Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/68452c37-5a9e-3865-8fec-47bb4e783d81.roa
File:                     68452c37-5a9e-3865-8fec-47bb4e783d81.roa (raw, json)
Hash identifier:          6K5DfQvy1jllGULKDa/bDQ93yw5BQ8h1tjhE3sl78IA=
Subject key identifier:   AA:4C:27:4C:B9:37:CD:9A:7B:7E:A4:ED:D9:91:2C:3C:FE:69:4D:B0
Certificate issuer:       /CN=ea3f9044-c185-4062-8dad-240b32b11348
Certificate serial:       010D0C9F4328584B0E416773CDDED1CEA9D97700
Authority key identifier: FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/68452c37-5a9e-3865-8fec-47bb4e783d81.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     395661
IP address blocks:        2607:bc40:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:67:73:cd:de:d1:ce:a9:d9:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3f9044-c185-4062-8dad-240b32b11348
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=6e93b861-cfd0-4052-9a9c-9a5bca9d313c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:df:85:88:fc:2f:37:d0:1c:37:ec:ab:70:16:
                    ac:5e:66:b5:2f:ba:a0:6b:ee:e3:be:7a:9b:33:14:
                    0f:a7:53:5b:88:ea:a1:20:04:0d:02:43:64:e7:7e:
                    f8:54:d4:5f:e5:87:30:73:50:06:b8:56:18:24:bf:
                    dc:3f:af:8f:0a:a3:0c:65:83:67:5b:1b:1f:32:d7:
                    49:f2:53:f4:26:a3:cd:69:b3:b1:f4:32:f7:01:a7:
                    a7:dd:53:b4:47:e8:06:e9:8b:74:d0:cd:39:08:b7:
                    15:de:40:17:4d:17:a9:20:ab:bd:a7:36:05:e2:07:
                    42:a4:4d:b3:09:2b:93:bd:ac:43:1e:98:40:cc:eb:
                    50:4e:bf:74:d7:4f:e8:30:e2:e9:97:a7:55:05:64:
                    ed:d5:74:4e:b8:50:b6:32:7f:38:76:bc:c3:81:be:
                    be:8e:5e:99:c2:82:56:01:fb:4b:b5:f4:44:1e:e4:
                    73:a0:74:ae:6e:3e:ec:19:fe:7f:ef:31:08:38:30:
                    28:9b:0e:5f:83:35:5f:ba:e0:da:2d:88:f0:d6:98:
                    07:01:7f:70:cf:ee:63:6e:25:6c:aa:ff:ca:85:32:
                    21:5e:51:c7:44:a5:44:82:81:6b:44:5f:8e:5f:bb:
                    38:f9:87:53:5e:87:c9:b2:6c:a1:82:df:02:81:28:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4C:27:4C:B9:37:CD:9A:7B:7E:A4:ED:D9:91:2C:3C:FE:69:4D:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/68452c37-5a9e-3865-8fec-47bb4e783d81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bc40:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:6f:d0:9c:90:d4:6f:fb:83:b9:7a:a7:01:88:fe:52:c8:28:
         8a:c5:70:52:56:c0:c2:d0:02:82:de:be:b9:28:04:3f:99:10:
         2a:c8:44:c3:8e:34:87:88:25:0f:05:24:0c:5c:8d:f7:3e:47:
         35:fd:56:32:c1:51:56:9a:e5:79:c7:4e:51:24:65:ea:fa:d4:
         f4:fa:93:d6:9e:3c:a3:c9:9f:80:34:67:20:52:b9:15:be:7f:
         78:c0:da:d3:78:db:21:58:4c:71:a2:fe:70:e8:69:80:fb:2f:
         0e:b7:57:04:e8:c4:b6:23:90:ff:e1:f6:cc:3f:21:2c:e0:82:
         c4:e0:ea:dc:19:c9:8b:23:3e:84:7b:58:b8:c2:52:e3:9b:db:
         67:64:31:52:4c:73:35:52:ef:6e:b2:2d:fb:09:5b:0c:fb:e7:
         46:08:b9:77:89:4b:86:94:c0:23:6d:ba:7a:6a:56:6d:35:57:
         b8:09:4e:d2:49:55:05:43:13:48:cc:72:e1:8c:97:97:e7:44:
         20:f7:d2:c3:e0:9b:24:4e:82:83:9d:af:cb:0c:28:ff:ff:52:
         e8:fe:d1:ea:af:da:fe:f9:8a:ef:12:04:b2:b1:40:6c:74:4d:
         b3:78:16:c4:fb:c3:8c:30:5a:f2:f6:d2:76:ff:a0:f6:d1:2f:
         e4:ca:0e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:51:31 2025 by rpki-client