Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa
File:                     0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa (raw, json)
Hash identifier:          VIox+Ez2TsjfRexGKEXT8VpDNZ+7ypHZ0298kIKUDAE=
Subject key identifier:   CA:63:67:C1:33:EB:70:7A:82:D9:35:57:C5:10:55:52:52:EA:BD:11
Certificate issuer:       /CN=285991ba-0db5-48fe-92ff-d202c357d86d
Certificate serial:       010D0C9F4328584B0746BAE2038BE72141325000
Authority key identifier: 86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     31998
IP address blocks:        2605:ed40::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:ba:e2:03:8b:e7:21:41:32:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285991ba-0db5-48fe-92ff-d202c357d86d
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=319ee128-2b3b-41cc-8042-9594913cf631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a5:0b:fe:bc:cc:aa:14:50:c8:97:6e:1b:df:
                    42:52:8a:f5:68:2c:03:43:cf:03:42:f8:2c:2e:f3:
                    d4:e6:f6:42:89:3f:ab:d9:9e:cd:9d:aa:cb:00:b9:
                    90:c5:49:b9:52:34:f0:b8:32:05:3a:b8:80:d7:21:
                    6d:be:49:63:c8:5d:b0:ad:3e:e5:18:91:64:c1:fe:
                    56:43:6d:dc:7b:b8:93:eb:a8:2e:ef:c9:df:e5:61:
                    87:a1:da:ad:68:55:93:93:f6:2a:6b:6d:81:85:45:
                    f7:31:c1:ee:01:43:58:47:a5:49:07:31:88:09:48:
                    8e:3d:ad:39:0a:5c:9b:b7:ff:13:b6:36:cd:f4:b0:
                    7b:8b:69:c9:28:c2:bd:2e:f3:cf:86:0f:ea:5a:7e:
                    f4:8b:d0:dd:16:cd:5d:12:15:6f:fa:5c:24:aa:ef:
                    f6:a0:5d:8e:fb:a4:6f:ab:ba:78:48:ef:2e:91:27:
                    90:a8:ab:2d:63:71:07:f8:0e:7d:ff:0e:c4:0f:7e:
                    f1:c5:c0:14:f6:07:28:36:bd:a6:04:83:90:10:12:
                    fe:da:95:85:ad:db:26:f9:64:0d:2a:62:36:72:53:
                    50:58:b6:1b:49:ef:d9:e0:55:dd:6f:4b:60:5f:d7:
                    f4:c0:bc:86:80:df:27:c7:ad:e4:60:b4:b9:b5:64:
                    d2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:63:67:C1:33:EB:70:7A:82:D9:35:57:C5:10:55:52:52:EA:BD:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/0ff2f632-9597-3e82-a7a9-c3dd4e5c0a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl

            X509v3 Authority Key Identifier:
                keyid:86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ed40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ba:40:07:ce:bb:0a:42:4a:7a:d3:5b:de:f8:b2:4e:98:0f:
         d0:ad:c7:b7:8d:7d:b2:74:7c:57:a9:5b:ab:c1:e4:83:4f:87:
         20:e4:e8:26:18:fc:dc:7d:ec:ed:79:f1:a5:26:ea:83:f0:68:
         3c:c4:93:d6:a1:e0:79:da:d7:ec:40:b5:ba:8e:b2:6b:ad:6a:
         1b:e5:88:3c:69:28:4b:44:3a:c0:59:ce:b8:aa:6d:75:16:8d:
         f7:4c:1c:1e:4f:5e:a5:9b:a2:14:6b:50:80:55:de:a2:fe:1c:
         20:e4:00:40:bc:1a:4c:93:b1:0e:b4:16:7f:2f:83:02:34:78:
         ee:27:90:b9:ee:c6:48:d1:81:8f:3b:a3:26:5b:2b:1a:08:46:
         ee:f8:62:4e:c7:87:6b:5e:82:4d:97:14:68:e9:61:ac:59:23:
         97:46:3b:7a:5d:f9:0f:03:f8:9a:e5:47:e7:4a:2a:f9:f5:c6:
         64:8e:57:16:5c:b3:ba:11:b9:2d:f5:9f:80:bd:6b:e5:14:ad:
         f2:92:77:d9:f4:1f:f5:10:69:e3:46:7b:00:27:24:f7:eb:55:
         ef:c9:49:df:90:7f:c8:5f:dd:36:3e:e7:f6:60:69:b5:44:09:
         f7:f4:a3:6a:3b:73:81:f9:5b:e6:5b:e5:39:7a:b0:96:39:3b:
         a9:a7:98:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:53 2025 by rpki-client