Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/7f17eaa8-5221-35c9-ad7a-bc694e56899c.roa
File:                     7f17eaa8-5221-35c9-ad7a-bc694e56899c.roa (raw, json)
Hash identifier:          dXnZg2/tabjCeqorYnO/jCJiOceswrQ03aiz/rUoGgo=
Subject key identifier:   00:7C:F7:B9:70:45:02:AB:85:24:1A:8B:44:1C:87:ED:4F:39:99:33
Certificate issuer:       /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
Certificate serial:       010D0C9F4328584B74274C10BD28CCF2F94960C0
Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/7f17eaa8-5221-35c9-ad7a-bc694e56899c.roa
Signing time:             Wed 08 Oct 2025 13:00:37 +0000
ROA not before:           Wed 08 Oct 2025 13:00:37 +0000
ROA not after:            Tue 06 Jan 2026 14:00:37 +0000
asID:                     4473
IP address blocks:        2607:9bc0:1030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:27:4c:10:bd:28:cc:f2:f9:49:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e
        Validity
            Not Before: Oct  8 13:00:37 2025 GMT
            Not After : Jan  6 14:00:37 2026 GMT
        Subject: CN=1e0be91c-91aa-4870-bbbd-e433f83067f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a9:3b:ac:c8:1e:8a:c3:1e:b6:ca:16:55:5e:
                    c7:ff:d1:e6:bb:fd:b9:79:6d:3a:c9:29:3f:06:72:
                    ea:30:f3:b1:eb:b0:63:af:bf:19:e9:88:7f:ca:b4:
                    15:a3:eb:0a:8b:97:a7:4f:55:a5:b8:d7:31:3b:22:
                    84:24:32:f7:11:db:3c:c3:5a:6e:da:9c:81:c4:34:
                    52:48:1d:4e:cc:14:34:ff:fb:d0:5a:95:ae:23:99:
                    14:fc:eb:14:25:65:4a:40:f3:f7:83:80:72:b3:c1:
                    72:10:68:e4:c9:06:f4:78:d2:1f:be:57:05:e2:c1:
                    4e:ff:1b:d4:97:5a:d0:bc:f3:b8:dc:b3:74:ce:1b:
                    5c:1c:53:24:0a:3e:39:18:a4:ad:99:2a:bb:d8:6f:
                    db:4a:d4:e9:ab:df:ca:95:af:e5:33:a4:0e:7b:6d:
                    c0:17:72:56:b3:28:5b:f4:fd:38:1f:f2:2a:9f:64:
                    d8:13:e5:50:68:0a:1d:7d:a9:55:2e:51:c5:02:bf:
                    8f:5f:3b:19:e9:3b:e7:6b:fc:4e:96:ff:87:e7:15:
                    cd:a5:4d:cd:f0:40:c0:09:78:da:94:2d:38:75:78:
                    75:69:dc:82:e4:67:e8:4f:f3:25:ca:d1:a9:80:e8:
                    14:a1:35:72:76:51:81:bc:3e:d3:8b:e2:4c:3d:73:
                    d3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7C:F7:B9:70:45:02:AB:85:24:1A:8B:44:1C:87:ED:4F:39:99:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/7f17eaa8-5221-35c9-ad7a-bc694e56899c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9bc0:1030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:56:f6:84:f9:08:2a:a2:40:b6:a6:03:3f:5c:c6:40:46:f4:
         65:20:01:d6:13:13:9d:a4:39:05:ba:74:3f:54:84:19:1f:c9:
         ce:1a:2b:13:04:ee:d3:39:d5:20:4b:90:b8:5b:5d:50:13:bc:
         62:cb:59:b2:26:02:00:8a:6e:7c:cc:f4:06:2e:f8:35:17:f4:
         6e:f6:3b:49:eb:84:85:83:e5:fa:11:78:69:ed:39:7b:c5:c1:
         27:b1:90:e6:ac:ab:aa:a1:53:36:f0:a5:82:f3:11:13:0b:d4:
         f4:52:b5:ed:72:a5:be:86:74:8e:52:c1:78:fe:d7:2c:cc:fa:
         99:e4:19:06:fc:b4:58:e4:ba:5f:ae:4c:75:74:d5:67:48:d9:
         1d:e3:66:5b:9c:0b:58:b6:16:41:9b:73:1e:93:81:84:5c:95:
         de:ec:f2:c5:ba:12:43:85:29:f7:e5:19:81:0c:a9:bf:ef:3b:
         53:10:69:47:56:cf:ce:f2:9a:39:c1:9b:31:27:b7:d2:56:a1:
         d8:0b:29:28:e4:f5:2f:90:c6:ce:56:f3:54:eb:97:cd:75:93:
         20:40:fe:bd:04:08:18:43:35:c3:ee:af:2d:30:33:91:ab:61:
         98:71:bb:7a:13:68:ec:5c:d8:50:fd:9b:39:a6:9b:7f:04:0a:
         a5:78:da:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 19:28:25 2025 by rpki-client