Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/dadb8b91-ae9a-3e4c-9a8c-06faede6c6a9.roa
File:                     dadb8b91-ae9a-3e4c-9a8c-06faede6c6a9.roa (raw, json)
Hash identifier:          raPQRiQVFoc8MWCj3ofcAlHA3lTTPl74Rl8xAzkJoBY=
Subject key identifier:   95:F8:8E:75:7E:38:31:29:12:92:F8:8A:EF:0E:42:EB:17:7F:93:66
Certificate issuer:       /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial:       010D0C9F4328584B3AEC557A0D4DA14E78D4AA80
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/dadb8b91-ae9a-3e4c-9a8c-06faede6c6a9.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     13737
IP address blocks:        2604:7580:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:55:7a:0d:4d:a1:4e:78:d4:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=9ed119ec-733f-47ed-8798-91636c76ab30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6d:c2:53:fe:57:b8:9d:84:a0:a7:ef:83:ae:
                    13:b3:11:d3:e6:60:9c:c8:99:52:28:a4:7a:12:17:
                    92:c5:43:33:8e:8d:6f:03:60:8f:aa:6b:66:4e:6a:
                    47:38:5d:93:8d:d9:e0:d2:e3:1d:b3:f3:3a:88:48:
                    fc:76:d0:97:e3:6c:e8:7f:8b:d2:f2:ba:80:e4:c8:
                    9d:38:67:62:45:b3:72:d5:45:34:fe:ef:58:9a:46:
                    62:83:6e:50:ca:d8:81:e4:44:dd:48:dd:a0:d2:c1:
                    dc:20:b2:c7:78:ef:48:66:a6:a1:77:83:af:c6:ff:
                    a0:b9:7e:64:e4:d8:b3:c4:7f:b4:a1:09:f8:c2:0a:
                    d1:a0:ca:ac:00:49:4d:4f:c5:fe:d9:14:9d:59:4b:
                    11:eb:3f:73:19:eb:b6:c2:a4:f5:6c:64:5a:a8:fb:
                    6d:11:fb:f0:ad:65:03:ea:04:7a:e4:62:e9:ef:3b:
                    9a:0f:df:30:e7:98:8e:36:b6:1c:87:13:1e:2e:7b:
                    48:2e:6c:d0:79:79:f5:6e:c0:29:95:68:4f:2a:13:
                    02:ca:81:cb:de:62:a6:18:2b:d3:51:bb:dd:68:cb:
                    10:92:07:42:ca:f1:92:15:fa:10:1a:12:e4:96:ec:
                    ee:f1:fe:cd:4c:b5:a5:53:2e:b1:c6:38:2f:31:cf:
                    26:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F8:8E:75:7E:38:31:29:12:92:F8:8A:EF:0E:42:EB:17:7F:93:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/dadb8b91-ae9a-3e4c-9a8c-06faede6c6a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl

            X509v3 Authority Key Identifier:
                keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7580:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:25:3a:a6:cf:39:3f:55:87:1b:1f:8c:e7:bf:51:8d:26:52:
         01:48:96:a9:07:21:9a:9b:58:37:93:e2:ca:db:a5:fb:0b:88:
         1d:30:5a:2d:45:44:b9:bd:c3:57:f9:3d:46:ef:fa:59:bb:9e:
         35:04:0a:2d:f2:90:4d:f5:26:a2:a5:f7:02:41:34:a3:61:ab:
         26:01:61:9d:df:6b:1e:0a:e3:c0:18:3a:9e:22:2e:06:7b:42:
         ca:f5:f7:66:50:d0:09:9f:64:aa:c3:af:13:7f:9d:1c:71:68:
         36:ec:7b:41:f2:31:1f:f3:75:91:95:37:4b:7e:8b:27:9d:45:
         14:e0:f4:a7:4c:57:7a:7c:c1:21:af:30:ae:98:17:64:88:84:
         72:3d:6b:0d:50:af:85:aa:c5:12:9e:ee:bb:18:20:c1:d5:41:
         88:e9:41:0e:6e:06:8b:39:3e:51:f7:00:ab:f0:16:ca:99:42:
         a0:81:e8:ca:c3:16:1a:e0:21:29:6b:08:e8:69:81:2d:e6:4f:
         6c:5f:30:79:f8:5d:85:14:92:77:47:0a:0a:a6:8c:d8:1a:92:
         4e:58:b8:4f:05:c6:09:58:e4:8b:4a:64:8a:ca:e5:3e:1c:2c:
         24:e1:76:bf:5e:87:f2:68:73:78:7f:1b:7c:74:40:8e:32:df:
         6d:b8:7f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 17:35:01 2025 by rpki-client