Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/15695d7d-5655-3250-ba9f-dea695ff46a8.roa
File:                     15695d7d-5655-3250-ba9f-dea695ff46a8.roa (raw, json)
Hash identifier:          9bYlH/5XtyVbM9GFGVmEjcGcjN8qpqa046pJGNSj+mc=
Subject key identifier:   2A:21:10:F8:E8:9E:A1:98:C7:D8:A1:13:70:D8:D8:67:C3:A1:20:7E
Certificate issuer:       /CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2
Certificate serial:       010D0C9F4328584AFEE6A2D64A0259BBE6351D40
Authority key identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/15695d7d-5655-3250-ba9f-dea695ff46a8.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        2605:bb80:1337::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a2:d6:4a:02:59:bb:e6:35:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=202147be-7115-400b-ac83-81001514759d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:25:97:8e:5d:ae:e4:8b:0c:a5:18:4a:84:fd:
                    22:33:34:11:23:fa:b4:04:34:ec:1c:29:25:dc:d1:
                    1d:25:85:bf:21:a4:8c:a4:0d:da:94:87:41:3e:30:
                    32:5e:49:52:49:63:a3:76:e5:be:c4:38:0f:8e:7c:
                    dc:7a:ed:a5:68:cf:06:e6:9d:25:d2:f7:70:af:df:
                    fe:3f:d6:e4:28:a9:6c:7a:51:de:e5:1b:13:17:60:
                    93:0e:27:87:ce:65:77:63:7a:0d:ea:84:a9:c6:ea:
                    41:d9:09:b4:15:77:ea:ac:83:61:d2:49:5c:9c:a5:
                    19:ed:14:dd:b9:a5:0c:99:6d:22:e1:00:8b:0f:9e:
                    3e:fd:af:a9:80:2b:b1:bc:1a:55:6b:01:8f:d3:45:
                    42:d5:7e:02:77:cf:ee:aa:d6:22:5a:c7:a8:34:7a:
                    76:33:46:a5:7f:0d:b7:40:48:0a:e4:5b:83:bd:c8:
                    23:3a:dd:c2:18:6d:44:6a:1a:d6:81:a4:e4:72:28:
                    98:86:a2:3f:20:42:06:22:20:23:b6:8f:44:43:9d:
                    be:6e:5d:c0:f4:fc:fb:e7:c4:1c:32:23:b2:1b:77:
                    d4:ac:6d:24:54:0a:99:de:ef:46:78:5f:81:4e:45:
                    02:41:db:4c:25:45:3b:ab:96:be:ad:1a:09:92:0e:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:21:10:F8:E8:9E:A1:98:C7:D8:A1:13:70:D8:D8:67:C3:A1:20:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/15695d7d-5655-3250-ba9f-dea695ff46a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl

            X509v3 Authority Key Identifier:
                keyid:E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:bb80:1337::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d6:0c:e9:a3:15:0e:ba:1e:7b:27:f5:c4:94:54:d9:39:ad:
         dd:03:5b:7d:f2:ce:9d:3c:68:51:6c:1e:66:63:14:b4:c1:c6:
         1b:17:72:cd:7a:d6:24:59:e1:43:73:c4:56:39:82:0d:f3:a6:
         4c:5b:d9:be:4a:e4:d0:b7:6d:5b:6f:f8:2f:07:4c:26:43:31:
         2e:d4:73:23:ed:21:56:01:48:c9:8a:0a:01:4e:e9:ba:a8:36:
         7a:c4:51:da:82:34:6f:ae:53:e2:45:44:76:bb:1b:c6:92:65:
         78:ab:0f:d1:5d:26:df:74:cc:66:3e:37:d8:7f:af:86:52:cf:
         7d:f8:bf:75:f4:8b:68:7c:d3:5e:b7:80:14:9e:0a:70:40:62:
         19:49:aa:ac:c1:29:c9:95:6f:66:3d:41:d1:52:b5:f4:3c:de:
         de:78:e4:82:3c:2c:08:3a:dd:03:70:b9:df:98:92:d0:80:60:
         ef:d7:dc:fe:2e:9c:f6:b9:a2:73:c2:04:65:6d:ea:2a:d7:c7:
         96:b9:95:32:f2:25:f6:78:62:6b:ba:cd:da:54:ee:44:96:2c:
         7c:85:e4:1f:4d:8f:05:0b:e6:b3:4b:44:9d:ce:44:7a:8f:68:
         dc:60:92:c6:b7:0e:d1:79:c5:3d:cd:70:5c:24:0b:e3:ab:61:
         35:c8:91:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:16:50 2025 by rpki-client