Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/f24930c5-5332-3110-b8bc-fded59845106.roa
File:                     f24930c5-5332-3110-b8bc-fded59845106.roa (raw, json)
Hash identifier:          A/WGRLdiQd8NPgUdw+hquU9D0DTaX+r6QkxeeCuZWzs=
Subject key identifier:   6C:13:08:EA:00:89:B7:61:49:7A:F8:E3:16:E6:F3:E6:A9:3D:B7:E3
Certificate issuer:       /CN=1ff41215-3026-434d-963c-327afdcf5cbe
Certificate serial:       010D0C9F4328584AFCC1B0EF556EDD786154FF80
Authority key identifier: AE:22:FC:47:60:31:D9:CF:87:8C:E8:48:09:6B:F6:F3:23:71:0B:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/f24930c5-5332-3110-b8bc-fded59845106.roa
Signing time:             Tue 26 Aug 2025 18:34:44 +0000
ROA not before:           Tue 26 Aug 2025 18:34:44 +0000
ROA not after:            Mon 24 Nov 2025 19:34:44 +0000
asID:                     14618
IP address blocks:        2607:d0c0:a000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:c1:b0:ef:55:6e:dd:78:61:54:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff41215-3026-434d-963c-327afdcf5cbe
        Validity
            Not Before: Aug 26 18:34:44 2025 GMT
            Not After : Nov 24 19:34:44 2025 GMT
        Subject: CN=8d4a60eb-c9d3-4dda-ae1b-4007db812761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7b:69:35:6b:65:c0:0c:59:2f:64:2b:d0:48:
                    d8:e6:3b:90:67:95:0c:bd:cf:c8:85:18:e4:d1:28:
                    ec:1c:33:7d:41:de:d7:7b:f2:19:4d:8e:c2:67:d4:
                    f4:4d:6c:b5:10:3c:60:cf:df:fa:23:d6:4c:79:47:
                    80:6a:20:c8:d4:c1:e0:45:a2:90:da:dc:aa:1c:f7:
                    54:09:a4:20:1a:62:32:0b:dc:23:28:94:1b:d8:e5:
                    4e:08:cb:50:95:d4:fc:81:6d:f4:1f:e4:41:72:90:
                    05:51:8e:a1:88:be:d3:2f:ec:7c:2b:14:68:1a:40:
                    d4:13:90:7f:50:91:68:7b:6e:be:4d:19:70:12:e3:
                    02:b3:9a:ee:2e:6c:6f:a8:61:97:f6:f2:6c:60:b5:
                    b5:3b:c8:75:ad:35:8b:b8:74:16:b8:cd:a7:44:6a:
                    06:68:34:73:80:cb:6a:62:4d:68:7f:d9:eb:3e:fd:
                    90:94:63:7f:f5:b1:91:86:22:eb:3e:b2:b7:c8:5c:
                    45:cb:94:54:8d:89:7a:a4:e2:a4:9a:e0:44:1f:a4:
                    59:c5:e6:b6:45:a5:48:40:f5:90:55:9d:84:14:c8:
                    d9:6f:19:45:14:a0:32:d3:e5:03:ad:77:32:13:30:
                    59:19:f7:05:6d:65:39:3e:93:8f:c1:c4:d4:bb:77:
                    8f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:13:08:EA:00:89:B7:61:49:7A:F8:E3:16:E6:F3:E6:A9:3D:B7:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/f24930c5-5332-3110-b8bc-fded59845106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe/1ff41215-3026-434d-963c-327afdcf5cbe.crl

            X509v3 Authority Key Identifier:
                keyid:AE:22:FC:47:60:31:D9:CF:87:8C:E8:48:09:6B:F6:F3:23:71:0B:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1ff41215-3026-434d-963c-327afdcf5cbe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d0c0:a000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:e5:d8:62:74:76:10:97:f3:78:e9:f0:d7:d8:26:20:ea:47:
         ec:6e:e9:42:be:02:71:00:ef:29:a7:29:e0:c1:1e:35:87:7a:
         75:45:17:ea:19:ad:10:45:2d:13:be:48:e3:e9:6d:b5:3c:4a:
         4d:9d:02:31:82:1c:03:54:df:1d:f4:d1:ed:42:29:5f:86:43:
         01:96:49:fb:ca:eb:4b:7b:cf:9b:17:8e:a9:d6:cf:ed:5a:0b:
         7e:49:4d:16:be:70:fb:01:71:13:1e:25:a5:72:99:dc:97:3c:
         c7:56:6d:62:39:c3:84:b1:67:b6:0f:c6:36:68:70:78:38:bf:
         dd:ea:89:1e:0f:e3:f2:8e:3b:bd:97:40:e3:4f:26:64:ba:cd:
         39:94:c7:c9:99:0a:c3:ea:e8:b8:e2:0b:85:ca:4c:ce:34:70:
         22:bb:5e:f5:ba:e3:ef:a9:ee:99:4e:c8:14:df:0b:0f:79:cf:
         21:1d:2b:d7:9b:b1:f5:57:c1:e6:df:8d:ef:83:ed:2c:2b:0c:
         bd:d4:9b:ee:cd:18:b6:69:16:b7:81:54:df:74:31:6c:59:24:
         8e:4f:c6:aa:8c:bb:4e:ad:dd:26:9c:d0:08:fe:01:fa:13:9e:
         5d:be:ae:ca:27:a9:fc:be:e8:89:68:75:1b:ee:66:f5:29:96:
         84:57:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:28:30 2025 by rpki-client