Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa/17bad0c7-a26c-3870-80ff-59ab73a873f8.roa
File:                     17bad0c7-a26c-3870-80ff-59ab73a873f8.roa (raw, json)
Hash identifier:          53Eo37bFl1ftL8cCJm0IlUnIXz9puBDrgykyBjb68VY=
Subject key identifier:   13:E7:A5:49:CF:3A:C2:F2:E8:CF:7F:64:A6:18:E3:ED:D9:13:D0:F8
Certificate issuer:       /CN=4fba60d2-29a5-492e-80a8-8126449210aa
Certificate serial:       010D0C9F4328584B540C9A5ADBCF75680D0E95C0
Authority key identifier: B2:76:16:47:BC:DD:F2:D3:50:12:76:34:2C:65:39:B5:AA:22:5A:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa/17bad0c7-a26c-3870-80ff-59ab73a873f8.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     27578
IP address blocks:        2605:dc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa/4fba60d2-29a5-492e-80a8-8126449210aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa/4fba60d2-29a5-492e-80a8-8126449210aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:9a:5a:db:cf:75:68:0d:0e:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fba60d2-29a5-492e-80a8-8126449210aa
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=11f6139a-ab84-4059-a971-aa73a443a1d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:1f:26:46:93:e1:8d:f8:d3:38:89:95:7b:
                    75:53:86:06:81:fa:7f:dc:63:8b:53:ba:9e:0e:c4:
                    da:ce:18:f2:ef:e9:e6:9a:e9:8f:d8:9c:0b:bd:a0:
                    13:f2:06:ca:f3:e6:5a:2b:d0:0a:92:86:eb:b3:4f:
                    89:03:ee:e2:f6:0a:7b:5d:67:91:a2:11:3a:4c:74:
                    1b:08:47:a3:93:4f:6c:51:d0:38:7a:7a:dc:0f:ab:
                    7a:67:3c:ad:cc:c5:0e:ac:a7:e2:51:2c:33:41:51:
                    0c:7c:6d:ef:fe:d0:a9:c1:f9:9c:d9:59:5c:6f:cb:
                    74:c9:b3:89:cb:b4:db:3e:96:52:8f:e4:2e:44:7e:
                    a0:c0:83:d7:e6:9a:70:b9:e1:36:01:9b:88:db:fd:
                    0e:2e:14:60:bd:f9:38:10:ee:7b:9c:e2:45:5c:47:
                    c6:88:be:29:04:9a:8d:37:10:cb:b0:88:fc:44:a4:
                    52:39:32:02:23:1d:63:d9:76:ab:59:ac:07:14:af:
                    22:89:9f:6f:12:9d:60:13:8e:61:ce:44:62:66:31:
                    aa:36:39:45:09:d6:91:f3:89:0d:59:bf:b3:11:ac:
                    c4:00:88:37:da:83:6c:26:d0:6b:c5:f6:3a:06:90:
                    25:60:7a:b7:4b:2d:b8:3a:14:9b:78:4a:4b:dc:0b:
                    22:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E7:A5:49:CF:3A:C2:F2:E8:CF:7F:64:A6:18:E3:ED:D9:13:D0:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa/17bad0c7-a26c-3870-80ff-59ab73a873f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa/4fba60d2-29a5-492e-80a8-8126449210aa.crl

            X509v3 Authority Key Identifier:
                keyid:B2:76:16:47:BC:DD:F2:D3:50:12:76:34:2C:65:39:B5:AA:22:5A:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4fba60d2-29a5-492e-80a8-8126449210aa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:32:6e:98:6d:1d:34:97:6a:0b:e1:03:d8:2f:c0:28:1e:a9:
         82:44:ee:83:6a:f8:e2:b0:8b:e9:73:38:7d:d5:f3:db:ab:3f:
         5d:a5:2c:fe:27:95:2f:95:d6:59:26:c7:8c:8f:a4:87:9d:5d:
         9b:ee:38:b8:97:7b:db:af:ad:e5:26:9c:b5:70:7a:9f:7a:ef:
         0b:13:32:50:15:86:0a:83:16:9b:d5:ec:da:9c:bd:65:92:5f:
         6e:72:52:8b:a8:73:a2:c2:60:ad:e0:c8:18:37:b1:1c:95:3f:
         f9:14:f5:d1:07:c9:34:17:71:2a:6f:9f:3b:d7:82:f3:d7:9a:
         48:29:7f:5f:a5:85:48:9c:2f:22:15:54:85:b6:6b:f0:b4:da:
         90:70:c0:fd:df:5c:9c:cd:1d:fa:d5:34:6a:e2:3b:99:ec:38:
         f0:65:20:c0:36:25:f9:b8:89:40:f4:ad:45:b0:30:a2:33:1b:
         5c:e4:ec:c7:d5:53:53:5e:3b:c0:1e:77:84:eb:6d:11:26:2b:
         d7:76:32:8b:6e:4d:67:d0:7b:7e:99:e0:04:1c:c2:ae:a4:46:
         1a:40:fb:5d:aa:ad:83:6f:c8:e7:e2:8d:91:fb:2f:77:4e:46:
         56:98:d4:db:78:1e:5f:5f:d4:8b:b6:f5:b5:78:f8:42:a6:ab:
         0b:c9:58:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:25:17 2025 by rpki-client