Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/b5bb8275-ad50-34e4-a199-80db31a4fbe0.roa
File:                     b5bb8275-ad50-34e4-a199-80db31a4fbe0.roa (raw, json)
Hash identifier:          Z5Iy+JCbo/l/wNKMo4SK9mEv9h37hIYvXL5DxEG2h0c=
Subject key identifier:   54:B4:62:A3:10:3A:A9:F3:CD:D5:02:58:AE:70:53:78:05:47:DD:4A
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584B477C6A0DD7A1B3E02B659B80
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/b5bb8275-ad50-34e4-a199-80db31a4fbe0.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     20454
IP address blocks:        2607:6002:200::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:6a:0d:d7:a1:b3:e0:2b:65:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=1e6630b6-3198-4f70-8588-0e5a4ea08843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c9:68:ff:8e:22:83:d2:50:e5:8c:b3:81:8e:
                    a5:1c:06:12:e8:b9:b5:bc:85:32:e5:39:67:8f:2c:
                    28:80:b5:de:e2:d2:03:76:60:34:d3:ef:55:16:e2:
                    84:00:66:0a:8e:7c:b3:31:7f:b3:95:81:d7:e4:5d:
                    7b:25:cc:69:49:e8:5e:f4:cd:aa:69:3e:8b:4b:72:
                    b4:07:49:78:11:b5:dc:ea:0c:0c:cf:7a:05:c1:00:
                    5c:f1:30:7c:7f:6d:20:a5:50:21:df:b1:d7:d2:87:
                    9c:8e:10:a3:d4:a5:9b:c8:9d:08:57:61:c7:51:de:
                    35:0f:13:ab:6f:eb:42:b2:1a:a6:99:f9:ae:ef:46:
                    a0:85:60:0e:c6:56:d0:5f:ed:88:81:6d:50:aa:8e:
                    4a:a8:20:e7:1f:5a:1e:7e:e2:03:27:60:64:64:0a:
                    31:98:fc:a1:6d:d1:eb:49:c1:c7:e4:7c:26:ed:b9:
                    f3:b0:00:fa:6a:3c:69:8e:36:9c:86:3c:ff:ef:82:
                    4b:94:a8:ee:4c:fd:46:2f:0e:af:bb:ec:ce:71:85:
                    68:3a:7c:c0:fc:0f:8e:77:1f:39:91:b0:a0:09:36:
                    53:49:20:3f:12:76:60:26:3c:48:60:24:bf:a4:70:
                    6c:a3:d4:15:a3:41:99:46:e5:5f:6a:ed:33:8f:a1:
                    04:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B4:62:A3:10:3A:A9:F3:CD:D5:02:58:AE:70:53:78:05:47:DD:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/b5bb8275-ad50-34e4-a199-80db31a4fbe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6002:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:f9:f1:60:b4:0f:dd:d3:7d:9c:16:3f:97:d1:dd:8c:3b:65:
         2b:2b:0d:d8:99:5d:f4:dc:dd:5a:a4:92:7a:7d:00:93:90:c5:
         d7:e9:05:f7:ab:8e:26:dc:e1:b1:c8:95:61:f4:be:b7:81:05:
         27:44:5d:f4:70:0a:5b:0f:e5:22:24:6a:28:91:bd:13:fa:df:
         75:ca:5b:0c:3d:f8:6f:43:f4:3e:2c:26:fa:cf:44:b1:65:06:
         c4:03:8a:43:9b:33:4c:9c:ca:ec:18:56:d6:30:f1:3a:cb:2f:
         0a:32:30:5e:51:77:03:c3:9e:91:f1:6d:87:b4:e9:f2:b6:c9:
         e6:96:9f:b9:8e:5a:41:3f:d0:a3:cd:75:39:d9:60:89:18:a5:
         f8:3e:ed:33:18:e0:a0:60:5b:af:4d:87:5b:e6:e2:25:c7:45:
         30:4a:1a:a0:d1:91:71:b9:bd:ea:28:de:e7:40:72:0a:4e:53:
         2d:c4:c5:ed:df:e4:86:a0:17:dc:9f:54:33:35:60:9d:b1:02:
         50:60:26:85:bd:1c:85:f5:61:f9:f7:28:6a:0d:24:e2:45:fa:
         6d:1c:94:9b:13:10:fd:da:71:0f:56:e0:60:24:2d:a3:08:43:
         b3:9b:73:e2:67:9c:c1:f5:02:25:d8:e8:e6:63:df:f6:54:4a:
         e5:bc:99:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:15:03 2025 by rpki-client