Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa
File:                     d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa (raw, json)
Hash identifier:          ccwt8gd0dFnuhsxrOsn21K7mhZdwFmIpD27q091eqYQ=
Subject key identifier:   E8:DD:B0:92:70:E6:5B:8A:D2:A1:8E:95:0D:35:69:10:57:CB:E4:64
Certificate issuer:       /CN=3878fd50-eae1-4b38-a142-8eff8910579b
Certificate serial:       010D0C9F4328584B59A1CBB99958F40C92D82DC0
Authority key identifier: 40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     14807
IP address blocks:        2607:b7c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:cb:b9:99:58:f4:0c:92:d8:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3878fd50-eae1-4b38-a142-8eff8910579b
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=a79c5f32-af33-4d9f-bf7b-02bf900daf65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:70:01:22:41:b1:da:45:cb:92:41:12:f8:a3:
                    48:b9:91:fb:7e:27:31:86:bf:d5:b9:1a:ac:83:e7:
                    09:d3:cd:37:fb:a6:3e:0d:fe:87:44:fe:8c:db:00:
                    a2:6c:d9:e2:e8:9e:99:be:ec:88:68:99:07:e7:77:
                    e8:dc:35:1d:93:e3:93:ab:f4:f0:7a:9a:05:8f:25:
                    20:0c:26:ca:e7:57:bc:47:45:f1:d4:0e:4e:d7:69:
                    65:5e:40:5d:f3:91:09:8a:2c:84:69:75:77:00:4c:
                    65:56:3b:74:d3:26:2d:58:e1:b1:f8:b5:a9:c1:38:
                    6d:6d:c9:c1:b0:f8:2c:c6:88:a6:6a:4c:05:ac:a7:
                    98:3b:2b:b3:af:db:53:7a:74:17:f2:ce:b5:6e:8b:
                    36:74:26:83:d4:88:d9:8b:80:04:37:0f:a3:51:8c:
                    1d:95:53:2a:4d:12:d2:22:64:6e:5f:3f:0e:2a:1a:
                    1e:97:59:83:7a:7f:63:6c:9b:fb:67:61:37:01:f4:
                    75:64:c3:d8:35:2b:b3:6e:bd:5f:ef:68:6e:f3:06:
                    29:ae:a5:0f:a6:7c:95:b8:78:98:b8:3e:91:6b:98:
                    8a:76:fe:44:c1:fa:27:73:45:3c:35:59:31:a6:61:
                    f0:56:1c:10:87:44:3a:c2:1d:ef:c1:14:d7:4b:34:
                    5f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DD:B0:92:70:E6:5B:8A:D2:A1:8E:95:0D:35:69:10:57:CB:E4:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/d88f19df-77f5-3dc5-a48a-9b14c5c9e731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b/3878fd50-eae1-4b38-a142-8eff8910579b.crl

            X509v3 Authority Key Identifier:
                keyid:40:C5:C3:67:52:AA:6D:D6:3D:34:E0:AE:33:29:E3:75:C3:86:A8:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3878fd50-eae1-4b38-a142-8eff8910579b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c4:34:ee:8b:a0:64:7d:97:97:77:45:4e:7c:65:72:65:49:
         88:01:7f:8e:c2:8b:29:d0:59:79:9f:6b:51:03:b3:f5:ad:a1:
         06:e1:08:9b:ff:60:72:bd:7e:11:1d:5f:3e:8b:91:d8:c6:5e:
         9f:e8:d9:69:0d:b6:d3:e8:c2:1d:6c:0c:01:08:26:d5:10:22:
         f4:b8:b6:fa:8a:cb:00:2b:db:08:87:2d:3a:15:17:ae:23:c6:
         da:d2:32:8c:00:85:1f:c2:13:4a:5a:18:a0:92:11:cf:97:a4:
         c2:cb:ad:80:eb:93:a1:78:cc:4b:79:96:2c:47:28:c2:fe:19:
         2d:1d:5e:a6:cd:a8:2f:06:33:71:18:5e:1b:0e:45:a7:a0:d2:
         7c:6f:6f:a5:df:fa:0f:4e:e9:5c:c3:e4:52:6d:5c:52:15:f9:
         1d:89:c3:9f:68:cb:7c:49:4e:7f:5f:68:e0:a9:bc:fc:4b:27:
         60:31:43:d1:53:28:cb:bc:5c:6c:e6:57:7e:17:68:e0:bc:f0:
         5f:37:6a:d8:94:9a:e3:70:4e:1a:3c:5b:d9:a0:9d:bc:82:f7:
         f4:d8:3b:d1:3f:b6:0a:ba:04:1a:18:f8:17:f0:a5:e3:78:f9:
         d1:83:85:6c:68:51:81:5a:b9:e8:3b:6d:9f:a3:12:bc:ee:d4:
         f4:cb:18:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:10:54 2025 by rpki-client