Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/df335906-83da-3b3f-b818-1fd9a3d7a19f.roa
File:                     df335906-83da-3b3f-b818-1fd9a3d7a19f.roa (raw, json)
Hash identifier:          r/daaaZgKPQwl5SpKT9DshIxVKdBrAflXIKoekDUDUM=
Subject key identifier:   39:BF:15:BA:57:C4:3F:38:18:81:4D:F2:63:97:60:E5:67:C8:72:8F
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B146EB855D0287F4729541680
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/df335906-83da-3b3f-b818-1fd9a3d7a19f.roa
Signing time:             Thu 04 Sep 2025 06:06:57 +0000
ROA not before:           Thu 04 Sep 2025 06:06:57 +0000
ROA not after:            Wed 03 Dec 2025 07:06:57 +0000
asID:                     62610
IP address blocks:        2604:980:e036::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:14:6e:b8:55:d0:28:7f:47:29:54:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep  4 06:06:57 2025 GMT
            Not After : Dec  3 07:06:57 2025 GMT
        Subject: CN=5b4d3af1-3778-4d8c-bd95-d6b623077046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cd:56:54:fd:b6:ca:e8:54:28:d7:1a:23:dc:
                    31:c7:d2:28:7d:48:b3:cb:3a:90:7c:57:f9:41:af:
                    d5:80:a4:c6:0b:76:d8:f3:f9:fe:b2:4d:3d:e5:52:
                    2d:ac:a4:d8:91:b2:20:98:a3:1f:b4:b0:1c:37:7c:
                    fc:b2:70:d6:fa:97:68:ec:6c:71:d5:b9:f8:ec:3f:
                    5d:85:cf:06:83:42:56:f5:38:63:8b:fd:2d:b9:90:
                    83:61:1d:4a:7d:2f:93:b2:0b:cf:e9:2e:b5:c5:48:
                    a4:d8:81:64:8f:58:4a:33:41:77:db:1e:fd:28:af:
                    5f:f2:ea:ba:92:03:fc:ba:49:55:7a:2c:8d:7f:90:
                    09:f8:a8:5b:73:ad:36:e1:17:9d:06:96:a2:d1:0d:
                    a6:83:83:e2:59:22:9a:e1:12:5c:f2:97:26:e4:4d:
                    39:e8:f6:ea:cb:a6:61:fb:34:e6:1a:bf:28:de:31:
                    ee:c6:53:20:7f:97:09:1a:6d:6b:40:9e:03:d1:7f:
                    47:7f:66:98:45:e2:0c:90:f8:94:6e:cc:81:0e:e8:
                    81:e3:09:29:06:88:c8:dc:85:3f:26:02:4d:aa:9d:
                    44:ee:aa:ed:e8:04:e1:cd:d9:07:a0:17:54:7a:83:
                    6d:0b:07:23:f1:88:c4:c5:89:6a:bf:69:d5:80:84:
                    2e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BF:15:BA:57:C4:3F:38:18:81:4D:F2:63:97:60:E5:67:C8:72:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/df335906-83da-3b3f-b818-1fd9a3d7a19f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:980:e036::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:56:05:72:4d:48:dd:a6:0f:13:ba:4a:ce:a0:1a:8f:2c:b4:
         41:b6:ff:a1:1e:21:3f:24:3c:cc:51:68:3a:d1:35:52:fb:aa:
         25:df:51:99:42:66:e5:4a:70:df:c0:dc:4c:b4:73:5a:dc:c2:
         47:56:98:2f:42:54:b7:53:54:03:b2:0b:d2:ae:95:7b:52:00:
         bf:d5:c0:41:8c:56:bd:5f:57:a9:d5:08:68:f3:3f:3f:e6:f7:
         59:3b:07:35:65:71:84:82:be:15:e2:e2:c9:bd:5b:f0:f5:6c:
         3e:57:e4:90:ab:8b:55:a4:33:53:bc:f5:3f:cf:4c:be:b6:9e:
         99:45:d8:80:ac:8a:97:f9:5b:a5:f7:0e:ce:13:a9:24:51:f3:
         24:3f:b9:ad:63:77:ee:34:f3:ea:d6:9b:27:48:dc:98:87:a1:
         dc:f1:a6:af:57:10:cc:ab:d7:89:8d:b4:b5:09:36:a7:b4:04:
         29:5b:ab:f7:03:d6:0f:d0:48:ef:7a:74:57:6c:16:31:dd:75:
         bf:02:e4:7d:8e:cf:fe:97:b1:f8:45:03:37:49:89:76:5d:5a:
         e8:43:02:1b:bf:3c:86:31:e4:4c:28:d0:26:7e:5b:dc:e5:0f:
         54:48:86:c5:ef:a7:98:38:be:2e:1b:a9:00:70:1a:6b:97:a3:
         f0:6e:8d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 01:55:30 2025 by rpki-client