Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/2fc8f455-2632-3f35-9046-77d0559fc266.roa
File:                     2fc8f455-2632-3f35-9046-77d0559fc266.roa (raw, json)
Hash identifier:          CM8CVmBcdkIqIGlGxib03YI0ExGD5IVfl/kmHFmhodU=
Subject key identifier:   50:D7:32:7F:D3:F9:DC:43:29:23:D0:72:EB:8E:2F:F8:BB:10:99:7B
Certificate issuer:       /CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
Certificate serial:       010D0C9F4328584B4FDC7601A06C44DFC03EEB80
Authority key identifier: AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/2fc8f455-2632-3f35-9046-77d0559fc266.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     2055
IP address blocks:        2607:f390:1440::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:76:01:a0:6c:44:df:c0:3e:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=95b9a590-5b20-4e0c-b3a6-1c6ea6d8a152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1d:6e:9a:0e:85:26:b3:62:d9:84:81:a9:19:
                    21:9e:f6:75:56:07:77:81:b5:86:8e:0e:30:c8:d7:
                    50:17:a0:8e:b6:15:2a:7a:fa:e4:38:c3:b7:d0:e5:
                    e8:44:9b:a2:91:ba:8d:73:a7:e2:4c:3b:d0:00:34:
                    2d:d6:bf:da:56:d2:9e:57:df:4a:6b:91:0c:27:d2:
                    5d:18:47:c5:27:22:1c:6c:1f:52:17:1a:6a:31:a2:
                    5c:0d:30:5b:22:21:17:d8:bf:9c:12:1f:c9:31:c6:
                    26:d6:71:1c:83:2c:c0:3a:b8:37:57:ce:0e:a8:e4:
                    07:fc:ba:c2:2b:17:d1:ba:dd:c4:6b:1f:fd:0f:da:
                    45:a7:12:90:b5:11:84:a7:df:03:81:d9:af:c2:2d:
                    29:1d:92:d3:76:a4:ff:6d:40:bc:dc:17:66:18:16:
                    27:0e:75:fc:b2:b3:8c:e0:db:87:f7:d1:08:01:0a:
                    64:67:c3:95:54:13:14:ca:bb:15:ce:c9:2e:fe:0f:
                    5e:27:96:08:1a:e5:4a:62:22:3a:86:cb:ef:24:4e:
                    49:b9:08:e8:30:ee:83:8c:00:97:78:2a:a5:8d:89:
                    70:e5:cb:f5:8f:c5:5f:00:31:ee:1b:49:1f:8b:1c:
                    13:0a:3e:b8:c2:71:85:28:c7:87:e8:90:4e:b1:ac:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D7:32:7F:D3:F9:DC:43:29:23:D0:72:EB:8E:2F:F8:BB:10:99:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/2fc8f455-2632-3f35-9046-77d0559fc266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl

            X509v3 Authority Key Identifier:
                keyid:AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f390:1440::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:93:7f:e0:7e:7e:a5:c9:40:00:56:c7:ac:fd:f7:ca:2b:8c:
         10:93:81:23:d3:c5:bf:7f:9c:76:b6:27:04:38:f0:a4:5b:16:
         cc:53:61:54:16:86:e5:a9:55:b6:bd:fe:72:14:cc:bd:7d:53:
         b0:99:19:08:cf:d7:0d:da:de:d5:a5:72:67:b7:bb:aa:26:8a:
         ad:0e:11:35:97:b5:cb:76:50:22:68:d7:4f:30:90:44:bb:00:
         97:f0:c1:9c:f7:5f:7a:2e:80:dc:5b:cc:bf:52:c4:35:34:72:
         ed:a1:6a:11:1a:35:ae:05:4e:d1:cf:e1:fc:55:80:d6:5f:c3:
         30:ae:a0:3e:91:e5:2a:4a:81:d9:1d:fd:d4:98:e6:a9:de:8d:
         6f:95:06:a7:97:4e:39:0e:1d:e9:85:90:70:5d:6b:66:66:63:
         d5:79:fa:a1:58:54:1b:0e:d1:e0:e7:f1:33:e5:8b:e0:23:5b:
         43:a2:f6:17:6f:bd:14:bc:09:c9:02:46:0e:ad:02:95:88:a0:
         1c:db:78:3a:38:66:b1:d8:5a:43:13:84:00:89:98:59:40:67:
         5c:16:72:7f:fb:07:5a:a3:51:c9:c0:dc:81:26:a4:82:68:2f:
         34:57:12:33:93:38:ae:68:8a:4e:4f:bb:7e:94:5f:b8:51:3d:
         78:44:11:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:54:16 2025 by rpki-client