Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/efdfb3d4-cefa-3c61-8eee-5d71708406e6.roa
File:                     efdfb3d4-cefa-3c61-8eee-5d71708406e6.roa (raw, json)
Hash identifier:          zTQn9RaqMoIkCBzWC2X41Y9XEkWCGOIKguB7Z9mUK6U=
Subject key identifier:   89:94:F7:5E:32:F7:B9:A4:74:72:C7:B7:D9:FE:45:E9:3C:7E:C4:A3
Certificate issuer:       /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
Certificate serial:       010D0C9F4328584B1F0178BE5B82EB0BBF767D00
Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/efdfb3d4-cefa-3c61-8eee-5d71708406e6.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2607:dd40:1000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:78:be:5b:82:eb:0b:bf:76:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=92051e84-d4b1-44c3-9977-ef154b5a754e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:03:ef:47:52:29:56:e3:ba:c5:ff:5e:88:
                    4d:d4:c3:e6:f2:70:0b:ac:8e:ac:83:da:82:6b:42:
                    db:21:0f:be:3f:e8:5b:35:d5:19:3f:c0:7c:e6:15:
                    e8:d4:af:99:f8:4e:d8:b6:d5:5d:6d:90:fd:cb:21:
                    fc:a4:17:46:8e:1b:e7:96:62:9c:c1:bd:69:b8:97:
                    ee:6f:51:94:c6:65:27:28:7e:5a:a0:60:d3:98:ef:
                    a6:61:85:48:72:38:9b:f1:4e:7e:d1:04:c0:24:4a:
                    e3:ee:08:5e:6f:74:76:ac:2d:f5:9f:69:f1:ec:00:
                    71:bc:de:c8:78:fb:87:4e:c6:46:c6:54:8e:88:ff:
                    c1:52:50:fa:b9:59:a6:8c:90:e6:48:dc:5f:a4:b3:
                    34:98:8d:2b:7d:96:07:aa:4c:64:d7:65:30:5a:b0:
                    ca:93:c7:bd:1d:1b:b7:c0:82:0c:8a:b6:98:ca:23:
                    88:e7:e8:41:db:f8:d3:86:51:1b:93:48:8b:f0:d5:
                    45:ff:bb:62:77:9c:b4:92:5d:80:60:af:56:f5:12:
                    7a:62:61:eb:76:be:e8:11:bb:9a:89:21:a6:df:d9:
                    41:aa:6a:b4:98:56:23:33:66:fa:ca:74:5d:74:b4:
                    9b:04:a9:5d:e3:44:de:c5:80:00:16:53:03:a7:90:
                    de:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:94:F7:5E:32:F7:B9:A4:74:72:C7:B7:D9:FE:45:E9:3C:7E:C4:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/efdfb3d4-cefa-3c61-8eee-5d71708406e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl

            X509v3 Authority Key Identifier:
                keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dd40:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:05:b3:f5:bf:48:f3:b5:3e:ed:20:44:4c:87:09:14:44:d6:
         86:96:97:3f:52:fb:93:24:27:8f:c5:db:f3:68:05:78:41:ac:
         4b:03:79:51:b9:da:a6:11:21:e6:71:bc:62:1a:e5:a8:e6:ba:
         73:35:ca:4e:1d:a9:cf:c3:85:cf:49:08:74:22:b7:7a:bd:b3:
         0e:39:5a:f5:a1:e4:8d:d5:0e:bb:f0:d8:72:0b:db:d6:1f:73:
         3f:3e:53:68:56:de:60:e6:d3:ed:89:d7:a8:df:05:11:09:d9:
         28:3d:f0:5e:ee:45:76:e1:cf:e7:03:bf:32:c6:f2:e7:65:26:
         56:23:45:3b:d8:5f:9f:f4:88:75:cc:f5:bf:93:ba:c4:7d:76:
         c0:9c:60:63:e4:23:e4:2f:af:b0:a6:38:de:14:0a:21:34:d0:
         e1:8a:09:b7:c3:7d:3f:56:44:55:27:e1:f0:b9:1f:84:08:e8:
         ee:0a:e8:f2:aa:8a:28:7b:40:2f:ac:00:78:c6:18:b5:d5:96:
         ab:c9:e5:a3:1c:d9:7d:22:5b:6c:bf:11:71:d2:4b:3d:ae:6c:
         37:d4:96:b2:69:56:15:a5:ea:3b:d2:80:c2:a3:1f:0a:da:9b:
         d6:22:4d:50:20:63:e8:2c:87:46:40:e9:35:60:1b:a4:a1:22:
         c8:8e:6a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:24:21 2025 by rpki-client