Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/02d672a4-08bb-3e92-b541-ae26424edbc7.roa
File:                     02d672a4-08bb-3e92-b541-ae26424edbc7.roa (raw, json)
Hash identifier:          E08deqCxN4xhe3WRCjHnmwcTjaVAIhUG58aLqxH94bQ=
Subject key identifier:   11:97:31:2E:3D:E6:96:ED:84:17:18:FA:98:14:6C:99:3B:12:CC:5C
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584B1806E2470721E1B091AA9D80
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/02d672a4-08bb-3e92-b541-ae26424edbc7.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     393249
IP address blocks:        2607:f8f0:614::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:e2:47:07:21:e1:b0:91:aa:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=ef09e597-ffdc-4d1f-ad4e-f8fc88ecd22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:80:42:47:42:1b:56:9c:4d:0b:b7:91:52:3e:
                    f6:60:3f:74:1c:8b:c8:57:a4:ca:f4:05:96:7e:ad:
                    e9:80:b3:87:b4:e9:3e:63:28:95:74:3e:67:79:45:
                    8a:8a:7d:fc:9d:8e:fd:30:ea:97:46:e5:b1:96:62:
                    78:0e:e3:4e:3c:be:d5:88:b9:ee:9b:20:cf:1b:59:
                    32:80:96:fe:04:d6:cf:aa:86:cf:2d:7b:12:25:e4:
                    2c:ea:13:e3:32:fa:1c:b2:a9:89:56:06:64:e9:eb:
                    16:94:bd:ea:f3:a1:d5:f1:63:a5:b5:29:bc:7e:6d:
                    f7:21:c5:34:ce:30:a2:7b:0a:d1:7f:3c:d1:2f:38:
                    95:e8:f6:f9:67:5b:af:71:2b:c1:20:02:bf:af:35:
                    13:cc:d0:8d:3c:5c:de:55:8d:1e:80:2d:a1:44:87:
                    8c:ba:75:42:14:8e:7a:3b:58:43:a1:e7:93:1c:4b:
                    a7:81:98:0b:8b:21:f8:b8:50:41:57:48:19:46:cf:
                    02:37:17:21:11:ac:d3:b2:a6:ed:b6:33:2e:11:1d:
                    0a:c9:10:11:8a:a0:c8:ed:b7:8d:56:c7:95:28:d7:
                    c5:78:32:db:cb:cc:36:aa:23:60:17:f8:f3:58:49:
                    2d:05:56:65:ae:c9:89:48:7c:b7:26:90:99:84:d4:
                    cf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:97:31:2E:3D:E6:96:ED:84:17:18:FA:98:14:6C:99:3B:12:CC:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/02d672a4-08bb-3e92-b541-ae26424edbc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:614::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f0:4b:29:55:38:87:da:57:76:e0:f0:d3:7d:05:f1:56:84:
         95:9a:45:86:f5:08:33:48:50:c1:a4:71:06:8c:3e:dd:04:80:
         72:f9:ea:95:67:8b:df:ec:14:d0:51:55:21:3e:a6:82:44:7c:
         2d:b1:b6:68:fc:43:43:ba:21:66:8a:60:e7:9c:a3:94:55:83:
         6b:8f:80:12:e4:45:56:05:70:34:09:6e:07:97:53:3c:04:d5:
         da:4d:19:31:97:5e:fb:9d:a8:81:15:f6:bc:f6:a5:4c:12:cd:
         b9:c7:7e:2c:28:89:af:90:9d:2b:42:57:37:d5:5a:4f:47:44:
         0f:7b:c5:90:7e:a7:19:8b:1d:3b:51:7b:f8:e7:9e:43:f6:f6:
         00:89:f0:3e:0d:44:e8:4d:c9:9e:fd:92:d3:b3:32:ee:d2:26:
         d1:c5:82:9a:08:c1:d9:34:96:d7:13:40:65:18:c1:35:8e:d2:
         51:76:8e:8d:5f:4b:7e:d7:bb:af:31:e4:fd:d8:27:9a:a8:ec:
         92:41:ab:4d:48:ab:53:1b:cf:aa:e8:57:d1:db:0d:4f:9b:4c:
         91:cd:86:73:e3:11:f5:43:ba:7b:ad:c7:e6:0f:77:d8:06:9e:
         15:a8:83:d8:9c:63:76:19:35:b1:93:b9:57:82:3e:03:a1:19:
         6c:a4:d0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 09:51:33 2025 by rpki-client