Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/27be7397-7a00-3f80-80d6-0af1003bcb73.roa
File:                     27be7397-7a00-3f80-80d6-0af1003bcb73.roa (raw, json)
Hash identifier:          9PWNgVnmQdZA/di81Ern/AKK/FdVvbZ6w9X5NTXszDc=
Subject key identifier:   07:93:67:5E:CD:E3:8E:46:D3:98:69:7A:BB:1F:EF:5B:04:1C:57:50
Certificate issuer:       /CN=89278746-5270-4955-a4eb-d96ac3a3dce1
Certificate serial:       010D0C9F4328584AF9A953AA754723C82D78B800
Authority key identifier: A9:EA:ED:EE:79:AF:F1:B6:11:77:29:71:B1:DA:2F:14:F6:02:04:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/27be7397-7a00-3f80-80d6-0af1003bcb73.roa
Signing time:             Mon 25 Aug 2025 15:58:13 +0000
ROA not before:           Mon 25 Aug 2025 15:58:13 +0000
ROA not after:            Sun 23 Nov 2025 16:58:13 +0000
asID:                     401831
IP address blocks:        2604:17e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/89278746-5270-4955-a4eb-d96ac3a3dce1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/89278746-5270-4955-a4eb-d96ac3a3dce1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:a9:53:aa:75:47:23:c8:2d:78:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89278746-5270-4955-a4eb-d96ac3a3dce1
        Validity
            Not Before: Aug 25 15:58:13 2025 GMT
            Not After : Nov 23 16:58:13 2025 GMT
        Subject: CN=70dd7a38-151c-41f9-9e79-be942003f50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:7d:01:96:e1:25:04:0f:65:a3:32:89:b3:
                    45:36:bf:7b:95:c5:7d:56:f8:99:6b:f7:ab:89:bd:
                    75:04:94:e0:85:85:59:8a:c1:6b:1d:22:5d:fe:40:
                    59:56:5e:1a:5a:02:f7:f4:24:6e:b1:df:c7:5e:a5:
                    5b:2b:ca:90:17:a7:b3:85:be:ba:01:55:4d:50:ca:
                    47:b4:07:6d:1c:95:5f:52:6b:59:3d:4c:4f:b8:bb:
                    6e:a4:f5:36:cc:bc:30:a4:bb:f6:85:c2:75:ab:9d:
                    c6:df:08:b9:c6:9e:9f:f0:8d:0c:ea:63:aa:a0:3f:
                    18:50:52:36:c2:04:e8:0c:9b:2f:28:8b:f6:35:16:
                    cb:8f:4a:85:01:37:08:49:eb:1c:00:8f:4b:a1:da:
                    7e:04:89:da:0b:47:3c:53:4c:22:c5:1f:47:c0:e5:
                    92:b1:b9:d8:cc:6c:2c:7e:77:ff:a8:e8:ff:3a:7f:
                    3b:26:37:18:37:f3:a4:91:7a:0a:0d:9e:4d:c5:2b:
                    19:88:58:c5:ab:33:8d:fb:96:5c:91:18:1e:1f:e2:
                    1b:f3:d1:2e:11:15:f2:3b:b0:21:b8:2f:8d:22:2d:
                    64:a9:1f:b3:ef:c8:36:5d:8d:f6:5b:d4:d6:0c:a7:
                    bb:d3:ea:a5:34:95:b5:23:15:c4:45:a4:15:86:ff:
                    a9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:93:67:5E:CD:E3:8E:46:D3:98:69:7A:BB:1F:EF:5B:04:1C:57:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/27be7397-7a00-3f80-80d6-0af1003bcb73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1/89278746-5270-4955-a4eb-d96ac3a3dce1.crl

            X509v3 Authority Key Identifier:
                keyid:A9:EA:ED:EE:79:AF:F1:B6:11:77:29:71:B1:DA:2F:14:F6:02:04:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/89278746-5270-4955-a4eb-d96ac3a3dce1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:17e0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:ca:9e:54:98:9b:4c:8b:db:3e:13:70:34:18:32:89:e0:68:
         1c:8d:19:e3:6e:08:ad:b0:c0:2b:2c:18:e9:1b:7c:1f:77:c7:
         af:37:56:1c:82:32:0a:19:64:c3:b5:63:c4:da:b3:98:24:a2:
         ca:96:fe:f7:59:47:a8:cb:76:11:99:53:8b:c5:68:89:11:d9:
         0c:ce:8b:09:cf:2a:60:10:d2:39:ef:be:60:96:23:fc:16:a8:
         7b:81:c0:de:be:b6:7e:07:46:88:e5:78:fb:34:ac:10:2e:18:
         63:ef:45:11:fa:dc:24:58:0b:3a:64:fc:b1:18:60:63:13:a8:
         e1:d3:0c:5b:de:97:0c:88:00:ce:ef:5b:00:69:45:cc:e9:ca:
         2c:5c:af:9e:a5:a5:42:36:77:e8:15:69:bb:42:9a:e6:ba:66:
         b7:46:c0:d2:b7:a4:38:26:fd:41:4b:66:45:97:90:0d:d9:64:
         d2:9f:17:16:ee:4a:1e:c7:e1:b3:cc:e6:f3:a6:18:6d:7f:f3:
         a8:75:df:30:1c:97:70:82:fc:2d:c8:f8:cf:35:03:ed:d7:4c:
         04:65:96:c8:8a:c5:91:dc:3b:96:05:b5:a7:58:a6:23:9b:f7:
         cf:d9:fd:0e:a3:ab:51:51:e2:86:1b:e2:ab:43:98:7b:ea:80:
         3d:79:8a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:39:57 2025 by rpki-client