Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/25edb3ad-e815-39b4-90b1-b87034b7d60f.roa
File:                     25edb3ad-e815-39b4-90b1-b87034b7d60f.roa (raw, json)
Hash identifier:          1GqKnWnMO35m53uk7fPHyZyS/iDJJN/Ba8nazQTfTb4=
Subject key identifier:   D7:FE:FF:1B:5C:EF:E1:E8:0C:EB:D6:96:F8:D1:57:FD:22:5F:47:3E
Certificate issuer:       /CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
Certificate serial:       010D0C9F4328584B36BC476E2F67D741C2F0F480
Authority key identifier: 56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/25edb3ad-e815-39b4-90b1-b87034b7d60f.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     13506
IP address blocks:        2610:108:bf10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:47:6e:2f:67:d7:41:c2:f0:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=5cd0dd57-f139-4b7c-9491-907bee6aa646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:aa:77:04:fd:4c:03:31:47:21:8c:94:bc:
                    65:16:b2:3c:34:37:31:64:bf:0b:6a:c7:be:a7:f0:
                    be:eb:73:a0:c8:b5:18:f5:fd:5c:95:12:4a:64:58:
                    bf:0a:cb:91:77:76:e2:8e:df:c3:d8:29:cb:f7:1a:
                    e9:2c:56:f9:42:cc:12:34:ee:40:d7:5c:14:d5:82:
                    40:38:97:28:20:d5:1d:d2:18:e6:de:62:dc:42:54:
                    cf:2a:7d:eb:77:95:09:aa:3b:36:8e:71:71:11:ff:
                    90:f5:8e:bf:ea:0c:a4:b4:50:c9:10:e7:4e:53:24:
                    13:45:06:bf:d5:5f:ef:00:a5:41:18:bf:0b:c1:59:
                    60:7e:1f:32:87:84:1d:67:4c:d9:63:c5:2b:d9:ae:
                    41:a5:67:7a:3a:06:93:96:15:f2:dd:1c:67:f3:33:
                    83:8d:1c:6a:b6:31:0f:ef:a5:1e:86:9e:d8:08:6d:
                    47:1a:af:e1:70:92:53:ed:4f:5c:da:6e:3e:db:f9:
                    8c:ea:1d:10:f6:9a:76:3e:03:14:d2:75:68:0d:ea:
                    ce:80:e1:7b:b0:f9:a8:af:5e:58:46:31:15:29:9d:
                    6b:d2:8b:a0:f6:b9:06:5d:5b:43:e6:c9:7a:35:9e:
                    96:86:b6:57:06:98:c1:d9:9e:69:d5:e0:83:52:96:
                    f5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FE:FF:1B:5C:EF:E1:E8:0C:EB:D6:96:F8:D1:57:FD:22:5F:47:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/25edb3ad-e815-39b4-90b1-b87034b7d60f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl

            X509v3 Authority Key Identifier:
                keyid:56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:108:bf10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:fb:68:ff:2b:92:e3:ae:d7:2e:86:2f:e1:4e:e9:06:8f:43:
         d1:8a:0f:99:9d:44:2b:f9:53:8a:2b:5e:35:94:f0:ae:12:be:
         cf:c3:3d:7f:7e:46:2b:a3:8b:48:d8:eb:c3:1b:56:4e:52:64:
         97:f1:fe:39:67:52:44:d5:a0:e0:c5:ab:e7:6e:5b:b2:fd:25:
         fe:d7:d0:51:ea:c6:d7:5c:bf:84:0c:0b:91:af:c8:cc:5a:61:
         c0:45:61:ef:28:9b:af:d7:61:a8:7e:e8:b8:ed:2f:58:3a:eb:
         90:87:8e:9c:b0:5c:3f:6a:a8:53:dc:2b:03:b6:6d:11:7a:a5:
         a7:02:8f:ee:03:24:55:c5:93:05:0d:44:17:f1:78:ca:c7:18:
         88:ac:c6:d9:39:1c:d8:2a:e1:32:3a:5e:23:55:c3:a7:05:8b:
         74:40:6e:7c:dc:41:6b:db:63:4e:fa:27:c7:42:20:2e:ff:2b:
         b4:70:7c:e2:3a:38:31:73:7e:a3:7b:08:04:05:b5:8b:3e:6a:
         f8:9d:f2:8f:fd:b5:6f:7c:d1:97:66:ee:34:43:f1:6e:00:8a:
         0d:eb:b9:05:81:22:b4:0d:bd:57:cf:4e:b6:1f:52:39:9a:26:
         c3:79:9e:41:d3:fd:ed:98:1b:19:15:b4:50:69:7e:a2:50:be:
         5e:3f:c8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:34:47 2025 by rpki-client