Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa
File:                     b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa (raw, json)
Hash identifier:          v9sljOa4hwcisi04S1uwGEK+FoezM+VPsPU+lhY8jPc=
Subject key identifier:   86:86:11:CD:CE:41:B7:BB:8E:9A:6E:F3:66:54:32:D6:62:12:5C:18
Certificate issuer:       /CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2
Certificate serial:       010D0C9F4328584B2066D1E9433A065986A07000
Authority key identifier: 1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     3128
IP address blocks:        2600:1d00::/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d1:e9:43:3a:06:59:86:a0:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=79e75d40-e332-4504-b69f-c8a19f56d225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:52:46:2d:78:10:f9:01:f2:47:d5:65:de:99:
                    27:04:76:86:fb:24:9d:95:b1:50:7a:da:18:7e:f1:
                    7f:ee:92:25:5c:c1:2a:4a:01:9a:2d:32:d7:86:1f:
                    df:39:c9:d2:93:48:f1:a4:fc:3c:f8:91:e5:8c:5c:
                    22:56:3e:94:0b:15:95:4e:93:46:3c:8f:72:9d:32:
                    47:8b:c5:70:ad:41:de:6a:af:9e:de:b1:e5:b8:59:
                    d1:6c:96:49:43:6c:cb:3d:32:da:46:34:eb:d0:eb:
                    bb:2e:a3:2f:b9:48:4f:75:11:90:8c:d9:9f:23:17:
                    52:a5:47:93:c2:7e:48:b2:6a:e4:6d:91:0f:57:e4:
                    d7:17:d5:47:55:18:1e:18:f1:69:d0:b6:dc:f2:47:
                    52:5c:97:66:c1:86:cd:51:a3:66:cb:65:e3:22:f3:
                    7d:18:4b:8e:fe:77:2a:3f:13:33:2f:09:89:0c:12:
                    6f:46:66:bf:94:e5:6f:fb:92:d2:df:fb:41:71:16:
                    d8:3b:a7:ce:d3:fa:12:3d:b1:cd:3e:3c:31:eb:a8:
                    15:59:d6:8a:86:e8:d0:94:81:9d:eb:93:fc:63:71:
                    fe:eb:52:bf:93:b5:1d:68:f5:a6:43:11:a6:f2:a3:
                    10:f3:2d:61:ac:41:6e:3a:94:9d:7b:92:cd:47:39:
                    67:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:86:11:CD:CE:41:B7:BB:8E:9A:6E:F3:66:54:32:D6:62:12:5C:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/b45f01b4-a66e-36c4-bc0a-43fd338df2e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.crl

            X509v3 Authority Key Identifier:
                keyid:1A:89:A6:9F:26:2C:91:F9:BD:B8:AE:98:4F:91:01:4C:50:DA:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2b2e539-c81a-48cd-95a5-7e3eae8ad2d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1d00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:cd:9a:7d:d2:04:b7:5c:4f:bc:19:9a:5b:f4:16:d5:2b:25:
         99:6f:b7:56:21:a7:1e:36:90:b5:f1:b2:99:a6:a0:b2:f4:20:
         dd:37:a2:d1:06:0e:a6:f2:ad:9f:c0:5a:1e:65:7a:cf:eb:b5:
         e2:f7:06:a8:94:6e:2c:82:5d:05:77:18:60:c3:08:68:48:4b:
         3a:aa:1b:3b:9e:81:6c:9a:7b:1e:7e:43:2d:71:87:5f:9c:2c:
         be:dc:e0:7a:5f:63:49:b3:ed:a7:17:7f:fc:38:19:1d:dc:58:
         d7:f0:66:d3:cf:cf:43:1b:d7:df:32:f3:1f:88:67:02:e6:ef:
         21:94:6f:a6:5c:4d:fe:17:22:b6:5b:7d:69:47:1d:cd:ab:26:
         64:02:48:bc:79:53:19:f8:c1:c8:ee:95:b7:a9:34:02:90:8a:
         7a:ab:36:34:ad:04:60:36:93:26:35:66:44:c9:95:29:72:c9:
         00:c0:73:b7:5d:17:6e:f3:99:41:6d:2f:15:21:c9:d7:14:db:
         a5:93:54:6e:46:d9:13:0a:0c:27:19:ab:16:7e:8f:7e:38:e4:
         3f:95:64:7a:cc:2b:e7:ba:89:4c:15:df:66:e6:25:d6:bb:b4:
         a3:1d:41:6e:5b:3f:df:14:96:d9:36:31:94:c7:b9:fb:ca:85:
         c2:88:ac:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:03:46 2025 by rpki-client