Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/483dc8f9-7915-347f-b63e-fb753177e883.roa
File:                     483dc8f9-7915-347f-b63e-fb753177e883.roa (raw, json)
Hash identifier:          0vhcWBmhdlBramwklgsIyfiZbPAu49i8PQB3tNkKio4=
Subject key identifier:   FE:C4:59:E0:16:3A:63:4F:9B:6B:F8:66:EB:F2:3F:12:92:5D:3E:D6
Certificate issuer:       /CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
Certificate serial:       010D0C9F4328584B6367486A72C9BB970313E280
Authority key identifier: 56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/483dc8f9-7915-347f-b63e-fb753177e883.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     8987
IP address blocks:        2610:108:bf10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:48:6a:72:c9:bb:97:03:13:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb9bc8d-6001-40dd-8162-ac1cf8678a49
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=c3ecebbb-a25d-477b-8721-ef85ad0dc9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e3:86:f8:a6:ab:b2:bf:71:ff:08:49:40:fc:
                    5e:d0:2b:bb:29:05:db:59:d4:d6:08:99:5d:66:b0:
                    b5:e9:68:d6:30:95:86:01:94:4f:52:60:ab:0a:e7:
                    88:82:3f:07:ac:4e:b0:63:4c:75:64:ae:d6:ea:9f:
                    aa:6f:b1:65:b1:ed:31:df:ab:01:a7:90:57:bb:dd:
                    89:4d:8d:16:7a:ee:cd:da:a1:6a:ec:dd:2e:3a:1f:
                    50:e7:96:b4:45:35:3d:74:be:0b:c1:3c:52:e2:e8:
                    cc:82:d0:e8:99:16:54:cf:af:b0:4d:55:41:26:a4:
                    e0:91:9e:93:cd:8f:c8:79:50:68:b4:00:c6:05:f8:
                    cd:ad:1a:71:b4:99:f4:4a:a1:d3:c9:31:7d:d7:15:
                    35:54:0b:60:0b:c7:77:d7:19:0e:95:56:a1:5e:5b:
                    35:33:80:57:e4:46:cb:36:ed:ec:94:98:19:1c:2f:
                    e8:b2:84:a6:d5:b6:6a:be:5b:22:8d:78:26:1c:66:
                    b3:72:32:83:8d:72:cf:89:40:c4:a5:20:c9:de:cf:
                    51:9c:c8:26:94:32:f7:86:12:30:39:f9:2e:dd:fd:
                    74:d8:02:2f:d6:fd:b1:5a:3e:06:09:9d:5d:55:91:
                    0b:42:4e:fe:ad:76:bb:de:46:06:18:d1:df:60:60:
                    2b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C4:59:E0:16:3A:63:4F:9B:6B:F8:66:EB:F2:3F:12:92:5D:3E:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/483dc8f9-7915-347f-b63e-fb753177e883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.crl

            X509v3 Authority Key Identifier:
                keyid:56:6D:D5:A6:9A:C8:37:9F:47:12:5A:0F:C9:33:C0:3A:29:59:97:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5eb9bc8d-6001-40dd-8162-ac1cf8678a49.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:108:bf10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:f1:50:5a:f9:5a:af:2e:88:46:b0:6b:b2:43:bd:ae:74:aa:
         52:f3:54:e3:47:ba:72:5d:ad:de:1c:a6:5b:ee:06:8d:be:cc:
         25:9d:ae:c7:30:c5:17:6a:71:32:1b:bd:35:f1:44:c3:df:62:
         1a:74:16:3b:bc:93:07:1a:57:c6:05:7b:ce:31:ab:80:4a:1a:
         bf:58:61:ff:b3:46:82:00:8d:c3:bf:fa:24:d7:06:f0:6c:8b:
         4d:a5:cf:56:de:18:74:51:93:67:1e:17:d7:a3:33:f2:42:b5:
         f5:d5:eb:65:09:27:56:92:88:51:cf:29:50:69:87:bf:af:e8:
         00:47:20:fa:46:10:c5:13:62:ec:0d:99:e1:2f:e7:6e:e3:35:
         7f:e7:58:d5:f1:8d:d3:71:64:25:e8:c0:b6:d2:35:7c:f8:d8:
         e4:a9:74:63:58:29:f5:fc:3c:48:1f:57:92:fa:79:51:5c:a5:
         45:f4:da:83:ca:10:04:00:41:b3:76:03:1d:3f:14:a0:a3:25:
         a2:93:23:e4:d4:aa:54:e6:a2:4c:84:ce:ce:8f:dd:7e:0b:1e:
         92:aa:ed:4a:27:c7:35:d0:5c:22:a0:fd:49:2b:d8:1a:65:83:
         2a:37:44:54:ff:b1:33:71:6f:69:76:f4:3c:d4:1a:d7:97:eb:
         bf:91:c3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:37:28 2025 by rpki-client