Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/08f7e636-199c-367d-a70c-0f88db87adf0.roa
File:                     08f7e636-199c-367d-a70c-0f88db87adf0.roa (raw, json)
Hash identifier:          5sK7Qo2TdMQtVawd5w25sE1TjYAAD6PuQDRcwT/EUCI=
Subject key identifier:   10:82:D4:F5:A3:FC:44:FC:7E:DE:3E:00:90:35:34:13:84:A2:5A:52
Certificate issuer:       /CN=dc563dc9-6b87-4d82-8a58-6b8b7917092c
Certificate serial:       010D0C9F4328584B62AEE2EA7F451C6DE76FCC80
Authority key identifier: A0:36:F8:0B:C8:AD:05:3F:44:8C:B8:A2:AB:AA:39:66:57:E0:D3:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/08f7e636-199c-367d-a70c-0f88db87adf0.roa
Signing time:             Thu 18 Sep 2025 23:29:19 +0000
ROA not before:           Thu 18 Sep 2025 23:29:19 +0000
ROA not after:            Thu 18 Dec 2025 00:29:19 +0000
asID:                     36352
IP address blocks:        2607:5dc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:ae:e2:ea:7f:45:1c:6d:e7:6f:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc563dc9-6b87-4d82-8a58-6b8b7917092c
        Validity
            Not Before: Sep 18 23:29:19 2025 GMT
            Not After : Dec 18 00:29:19 2025 GMT
        Subject: CN=6478ad8f-93f2-4dd2-ba3e-cfda50201d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:00:a4:e1:49:43:b8:37:4b:87:08:fc:75:1b:
                    67:8c:32:fb:0e:9d:f0:36:50:e9:77:20:18:50:22:
                    09:43:06:6a:3d:6f:81:a4:6a:72:57:72:6f:1d:91:
                    67:5b:cf:b8:45:3b:6d:df:83:ac:5f:52:f5:1b:47:
                    61:62:4c:47:22:55:22:bb:2b:91:ec:d8:78:ab:9e:
                    d7:88:87:5f:b7:b6:74:a0:bd:03:43:18:45:36:f2:
                    14:66:cb:9a:7a:06:43:48:d3:7a:73:fb:7c:3f:30:
                    9e:16:4c:5c:e3:5d:c8:8d:82:71:e0:1a:92:3a:80:
                    44:c7:8c:26:94:f5:3d:23:e1:74:bc:cf:d6:73:f1:
                    fc:e9:62:d7:86:ff:5a:bd:86:d1:92:37:a1:94:1e:
                    c5:f1:a9:c2:e9:8d:11:d4:9a:85:df:70:93:c8:7a:
                    90:49:11:64:9b:14:91:a6:eb:ce:7e:3c:0a:ca:b4:
                    70:49:38:41:e9:a5:a3:f2:40:8f:37:98:31:cd:f4:
                    52:01:2b:10:a4:6a:a8:73:4b:d2:e8:04:4b:b7:62:
                    9b:e0:fe:ee:2f:2e:a6:0c:78:db:11:e4:ef:91:e5:
                    cd:f4:3b:fd:24:33:2f:e1:b0:4d:7b:ca:be:5d:28:
                    64:04:6b:f5:e2:16:22:e6:f0:df:2e:cf:d7:ab:e5:
                    b0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:82:D4:F5:A3:FC:44:FC:7E:DE:3E:00:90:35:34:13:84:A2:5A:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/08f7e636-199c-367d-a70c-0f88db87adf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c/dc563dc9-6b87-4d82-8a58-6b8b7917092c.crl

            X509v3 Authority Key Identifier:
                keyid:A0:36:F8:0B:C8:AD:05:3F:44:8C:B8:A2:AB:AA:39:66:57:E0:D3:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dc563dc9-6b87-4d82-8a58-6b8b7917092c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:49:4f:02:1c:f7:73:17:61:23:fb:c8:e7:61:e0:d2:7f:c6:
         7d:17:fe:53:e6:37:30:d3:69:a2:9f:0d:49:00:2d:00:07:b5:
         f3:f4:b2:ba:1c:26:40:f0:e6:00:48:3f:89:6a:07:b2:8f:c1:
         56:8f:00:fd:39:a4:aa:fa:b0:98:44:49:19:2e:29:b5:07:d9:
         9e:71:d9:2d:75:31:c4:16:dd:ce:ee:3c:64:0d:b3:22:ed:e1:
         13:90:67:75:1a:98:22:43:8f:0a:be:87:18:ba:77:38:62:6c:
         b1:c3:1b:26:55:7a:91:e3:f1:70:c7:50:96:10:58:47:18:ad:
         ac:05:b0:57:5b:88:4c:02:2e:35:37:67:74:fd:ee:eb:e6:64:
         c1:2c:77:e6:e3:8f:17:48:d0:48:69:3f:4e:50:05:de:04:09:
         be:b5:f3:77:54:f4:49:a8:a4:24:6e:ab:57:83:ec:db:df:05:
         07:2f:58:3f:f8:9f:af:ca:f8:a6:f9:34:60:4d:07:4f:cf:19:
         e6:5e:7e:a1:6b:e7:48:24:5b:94:33:14:01:e7:99:7a:ba:8a:
         eb:ca:a5:48:39:11:ef:c1:92:b7:2d:b2:d1:4e:b4:05:bd:e1:
         ea:38:20:c5:50:7f:29:ea:ce:af:79:fe:30:4d:03:d8:67:e6:
         70:cd:ef:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 2 21:24:33 2025 by rpki-client