Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/4c3f52da-fd17-370d-8792-8d2bf07e19ab.roa
File:                     4c3f52da-fd17-370d-8792-8d2bf07e19ab.roa (raw, json)
Hash identifier:          wzBaWvxyqYuIbx/fpXwve52gAB0z2FzIk7kMNtl1ptE=
Subject key identifier:   41:8C:E9:3A:1C:DB:4F:21:56:41:03:21:73:ED:12:97:19:B4:C2:4C
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584B617B775D01AB0114EC763480
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/4c3f52da-fd17-370d-8792-8d2bf07e19ab.roa
Signing time:             Wed 01 Oct 2025 20:29:53 +0000
ROA not before:           Wed 01 Oct 2025 20:29:53 +0000
ROA not after:            Tue 30 Dec 2025 21:29:53 +0000
asID:                     55286
IP address blocks:        2607:4300:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:61:7b:77:5d:01:ab:01:14:ec:76:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Oct  1 20:29:53 2025 GMT
            Not After : Dec 30 21:29:53 2025 GMT
        Subject: CN=8a8f2fa0-c8a6-4415-9712-7b2665795a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a9:c0:37:fc:7a:32:10:cd:1e:47:20:a7:6d:
                    ce:80:44:31:7c:11:74:29:e6:4f:d3:9a:90:a1:e5:
                    33:a0:f3:5e:52:19:bb:52:84:78:8c:82:5d:3b:fe:
                    83:96:e1:33:72:73:3e:3c:2c:cf:e1:64:5f:f0:e1:
                    ba:38:ed:18:c2:c7:cd:84:03:a2:2e:13:fb:fd:b0:
                    c5:0e:62:6d:8e:59:41:54:46:76:11:24:ba:c8:bf:
                    22:3d:ce:72:3e:01:43:33:63:dc:ba:b7:4f:79:44:
                    1b:b5:cc:b7:5b:f4:1d:0c:3d:f6:8a:55:f7:d7:30:
                    d0:49:ce:1a:83:ed:07:85:e0:92:4a:ba:e0:ed:07:
                    03:65:29:f5:70:a3:92:74:32:21:6a:e4:23:13:9f:
                    c0:fe:00:41:c2:8e:b1:c2:ee:e3:94:db:26:6d:da:
                    4a:9f:39:1e:8b:9a:15:89:36:f2:51:7c:b2:17:dc:
                    14:2f:6a:b4:ef:86:c9:f2:98:ab:42:11:c0:57:34:
                    84:01:19:5c:f0:a7:8f:db:d2:aa:06:c0:43:d1:2a:
                    33:c5:22:18:47:33:5a:99:63:26:b2:4a:cd:21:3f:
                    7a:0a:07:fe:44:70:da:88:24:cb:85:0c:e9:dc:21:
                    65:5c:8c:2c:f8:fd:36:df:84:2f:61:78:41:04:b8:
                    65:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8C:E9:3A:1C:DB:4F:21:56:41:03:21:73:ED:12:97:19:B4:C2:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/4c3f52da-fd17-370d-8792-8d2bf07e19ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4300:5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:54:1c:a8:4f:e3:82:0a:fd:37:53:a2:fb:b5:9c:4d:08:2a:
         c0:c6:91:1d:7f:58:27:e8:81:91:99:6d:06:3f:34:09:38:5f:
         65:02:de:5e:c0:69:cc:03:b9:ad:8f:c9:b6:d7:58:3d:5e:0e:
         2e:ee:58:5c:33:35:62:76:3c:5c:e0:b0:dc:53:ab:f9:ce:95:
         33:f6:1f:5c:d2:ae:8d:52:bd:fe:21:58:2b:d3:f0:6b:4b:85:
         70:02:42:1d:da:16:50:f9:8e:b0:ea:c7:62:78:1a:f3:54:2c:
         a1:00:93:eb:8a:8d:5f:0e:ce:c0:7d:ba:cc:7f:c7:3d:09:76:
         4e:4a:a7:f8:48:23:08:e2:b5:13:20:ea:bb:1e:bc:d9:8e:a1:
         ef:74:3f:57:eb:17:96:87:40:7f:30:aa:c0:32:b1:cf:b2:47:
         db:db:07:54:db:f4:ba:be:61:d9:68:da:96:68:f6:45:a8:1f:
         bc:12:03:cc:f7:3a:4d:31:61:e5:33:36:d0:78:85:f2:e6:35:
         38:de:30:fa:9a:74:85:16:55:a3:34:8e:33:20:2c:88:f3:7f:
         f0:85:f5:b2:67:45:63:ea:a6:b8:a6:89:3a:7d:6d:e4:27:70:
         07:7f:fb:32:86:60:4d:a1:43:3d:74:e2:e9:a4:9c:ea:b6:a8:
         b6:28:e8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 07:41:58 2025 by rpki-client