Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa
File:                     1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa (raw, json)
Hash identifier:          5OPkyVU35JE8E4ssMKmn/zSoeDW3klTxxDtSNwh0QsU=
Subject key identifier:   39:0C:83:A2:35:74:D7:5C:65:AA:EE:D4:2F:FC:04:ED:D4:12:B4:9B
Certificate issuer:       /CN=5c264ed0-521b-453b-b8f6-85ab4d47c967
Certificate serial:       010D0C9F4328584B5B07475886C77B03A1F76000
Authority key identifier: 9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     55230
IP address blocks:        2604:c580::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:47:58:86:c7:7b:03:a1:f7:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c264ed0-521b-453b-b8f6-85ab4d47c967
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=7cf0f464-29f7-41cf-ac22-3564f573f4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3f:3e:ef:82:d3:63:97:74:2c:b4:d6:67:37:
                    80:d2:9d:b5:86:e9:c3:04:9d:05:f6:92:bd:7a:d9:
                    8b:e7:99:c6:76:79:db:62:cf:c4:38:c6:01:4b:fc:
                    77:fe:4a:f3:67:1d:c5:cf:f2:5f:be:5d:d2:d2:89:
                    47:e7:97:99:aa:02:b1:55:bb:d0:27:f8:c3:9e:44:
                    9d:23:35:29:61:db:58:0b:da:49:07:0b:1a:40:af:
                    7c:cd:fe:83:6d:a6:08:e1:b3:91:91:01:b7:1c:3b:
                    36:b4:4b:b5:b8:e3:4c:0d:bd:29:ab:99:d0:9e:74:
                    48:b6:69:80:15:60:03:bc:92:1a:cd:66:5a:28:59:
                    48:f8:cf:fc:1e:94:04:24:93:49:94:1f:67:25:90:
                    4b:70:98:48:85:c1:3a:bf:c3:f3:b7:1b:e9:3d:cd:
                    63:fd:6c:72:cd:da:e5:42:91:24:1d:1f:54:b8:01:
                    e9:ad:17:c4:93:43:33:80:7b:b6:26:74:87:4c:c5:
                    47:08:79:3b:97:71:9e:9c:eb:98:e6:b8:5d:7d:1f:
                    53:10:f8:07:39:39:9e:06:66:fd:8a:a8:d4:3b:df:
                    b8:6a:f6:43:6d:58:af:2c:a2:43:00:f2:e7:d0:b9:
                    e2:82:f4:90:7a:f4:41:62:5b:ea:38:a6:fc:8a:d1:
                    d3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0C:83:A2:35:74:D7:5C:65:AA:EE:D4:2F:FC:04:ED:D4:12:B4:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/1daa9c96-6c77-3e9b-8931-9c894798cfc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967/5c264ed0-521b-453b-b8f6-85ab4d47c967.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:CD:08:1C:CC:44:29:16:B0:7C:6D:18:9B:2E:B9:E6:02:4F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c264ed0-521b-453b-b8f6-85ab4d47c967.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:2d:66:72:88:49:52:27:02:2c:22:d8:8b:84:c9:4e:0e:e0:
         fd:b8:a6:f0:09:68:46:93:ca:a6:15:cf:7a:05:12:9c:99:7e:
         0b:66:57:b5:02:a0:35:d4:a5:a0:89:e2:d0:95:df:34:bd:d6:
         35:18:da:e7:4d:c0:93:05:f2:62:44:bd:b6:42:28:af:9f:79:
         7c:17:d5:2d:88:97:e1:26:06:2b:52:1a:6e:26:2f:b0:d6:df:
         d5:f5:10:27:3f:9e:32:fa:42:2a:ad:ea:cc:f1:77:ea:08:56:
         25:fc:dc:67:31:79:89:50:fc:27:91:b0:04:86:c7:90:4a:94:
         51:ff:75:e5:fb:71:d3:65:be:b1:11:6f:27:b5:81:8c:01:3a:
         fc:d0:a1:ba:33:53:f5:31:dc:6d:6f:b4:b1:d5:40:f4:95:02:
         3f:19:e4:6b:fa:9a:b8:20:84:42:b6:85:97:3b:92:6c:2c:00:
         aa:a6:b0:91:84:f9:b6:a7:2c:7f:77:42:af:2a:59:69:a7:eb:
         a3:7b:29:e2:6e:79:f6:c0:48:ca:07:6a:01:c6:a0:4d:25:a6:
         9a:4a:c3:ad:03:4b:0a:f3:4a:d2:82:70:d3:37:87:19:04:d2:
         aa:8e:fd:b7:61:9b:73:e2:ff:7d:b4:21:ad:32:d8:19:0b:b8:
         2f:af:d9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:40:41 2025 by rpki-client