Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/381c74d2-a63e-3218-af39-42c9efe0a48b.roa
File:                     381c74d2-a63e-3218-af39-42c9efe0a48b.roa (raw, json)
Hash identifier:          O3ETz2l3d/T9Hufw7F+n9qcj/pTLdJdHhcgyt3YB5EA=
Subject key identifier:   1C:22:C0:10:16:6F:BA:B5:52:73:AF:26:61:A5:8B:3A:5E:D9:8D:FF
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F4328584B715CA932730E0DFD4853AF80
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/381c74d2-a63e-3218-af39-42c9efe0a48b.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     21782
IP address blocks:        2605:af00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:a9:32:73:0e:0d:fd:48:53:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=7a8d5111-aaf1-4e8f-a6de-82b20f8d16a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:9a:94:67:ba:14:ba:84:fe:73:29:24:dd:
                    7c:60:b6:dc:64:b1:79:d5:e7:23:c4:37:97:3a:2e:
                    06:b4:12:cc:c6:3d:d2:77:00:c2:a3:df:d8:97:8a:
                    83:c7:d3:33:e3:32:ce:47:12:b5:f0:da:03:bd:2c:
                    b5:88:9f:bb:d9:1f:ec:55:e6:a8:6c:43:3f:38:cd:
                    d2:1c:8b:eb:f8:fe:16:0e:8b:00:e5:05:34:44:c7:
                    7a:20:ed:7c:d8:db:65:6e:33:3b:8a:87:2e:33:11:
                    d7:92:55:e9:28:20:74:cb:bc:09:ca:9b:eb:20:6c:
                    56:ef:91:ba:83:8f:04:6a:1e:30:89:e2:d2:01:9c:
                    c1:dc:1f:f7:10:3b:7e:a2:5b:d2:a5:7c:02:04:d6:
                    52:63:d7:e2:8a:5d:5d:17:cf:93:16:80:d1:52:21:
                    e5:d6:fe:65:b1:5c:cf:d3:25:ba:4b:c9:61:60:c1:
                    69:78:b7:e9:71:37:0c:eb:ea:ef:aa:5a:52:32:ff:
                    d8:6b:33:e6:05:2b:9f:da:e3:e4:82:3a:52:5f:8e:
                    05:75:6c:7f:ef:a8:15:77:af:ac:a5:00:7f:8d:32:
                    5a:2b:cd:ef:12:5a:60:9d:b4:c8:83:a1:4a:fb:a1:
                    32:c3:b6:f3:03:da:8d:f4:84:88:2d:4a:82:a8:ac:
                    1a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:22:C0:10:16:6F:BA:B5:52:73:AF:26:61:A5:8B:3A:5E:D9:8D:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/381c74d2-a63e-3218-af39-42c9efe0a48b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:af00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:84:0e:d9:ae:33:3d:bc:b6:b3:ab:d7:6a:9d:cb:20:29:f3:
         55:e4:32:6b:35:97:56:95:82:2c:32:ab:ae:61:06:c1:61:61:
         83:f7:89:c7:b2:e8:27:56:3a:4b:a3:25:fe:c6:34:fa:ec:35:
         c3:a5:60:db:4c:76:8e:54:2f:e0:ce:cf:22:3e:f6:55:d3:83:
         f7:cc:62:5d:5d:60:00:5f:85:f3:8b:f6:da:55:73:cc:e9:1a:
         c9:0b:95:00:4f:3e:99:c5:80:c8:8c:95:9d:71:4f:14:2f:f5:
         10:59:45:5f:84:3f:97:b4:08:0d:de:3b:a3:b1:f0:f7:7a:98:
         d1:14:f2:01:49:38:19:7d:be:6e:4d:f3:91:79:86:84:56:b6:
         5b:91:0c:bb:97:e1:51:aa:58:d9:43:3d:3d:88:6a:b0:cb:f0:
         6c:d9:57:07:6f:b6:8c:95:ce:52:3a:9f:4a:b8:59:f3:d4:39:
         86:ae:3d:29:63:bf:e1:02:c4:79:3a:89:c4:cf:5e:3b:af:47:
         3f:96:d8:4a:9a:71:5e:b9:94:03:10:b8:ff:6a:4a:38:55:4e:
         a3:0e:f5:5c:68:a1:18:34:b7:a8:88:2c:b2:b8:8e:8a:cf:85:
         e1:9a:e9:b0:a6:b3:d2:f2:a7:73:c8:77:e9:f5:36:da:9e:19:
         80:be:9b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:55:57 2025 by rpki-client