Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c84c7cab-d491-46ad-9ed1-28e7397421e7/3adde67c-430f-320d-902b-ae38c1c3a785.roa
File:                     3adde67c-430f-320d-902b-ae38c1c3a785.roa (raw, json)
Hash identifier:          +8SdVGY/HasbLEQc//dnVKbWtO9uE20DyOj+wFLvG+g=
Subject key identifier:   0A:E3:E0:AC:B3:92:B1:89:92:7F:E5:1C:CD:83:11:EF:91:CD:E0:83
Certificate issuer:       /CN=c84c7cab-d491-46ad-9ed1-28e7397421e7
Certificate serial:       010D0C9F4328584B126B75DAF99E9BCA5F903780
Authority key identifier: 51:5C:79:7A:2D:D6:B2:61:3E:8E:82:59:EC:BF:BB:A5:4D:56:8E:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c84c7cab-d491-46ad-9ed1-28e7397421e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c84c7cab-d491-46ad-9ed1-28e7397421e7/3adde67c-430f-320d-902b-ae38c1c3a785.roa
Signing time:             Wed 03 Sep 2025 12:48:46 +0000
ROA not before:           Wed 03 Sep 2025 12:48:46 +0000
ROA not after:            Tue 02 Dec 2025 13:48:46 +0000
asID:                     122
IP address blocks:        2605:e900::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c84c7cab-d491-46ad-9ed1-28e7397421e7/c84c7cab-d491-46ad-9ed1-28e7397421e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c84c7cab-d491-46ad-9ed1-28e7397421e7/c84c7cab-d491-46ad-9ed1-28e7397421e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c84c7cab-d491-46ad-9ed1-28e7397421e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:12:6b:75:da:f9:9e:9b:ca:5f:90:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84c7cab-d491-46ad-9ed1-28e7397421e7
        Validity
            Not Before: Sep  3 12:48:46 2025 GMT
            Not After : Dec  2 13:48:46 2025 GMT
        Subject: CN=c81c0fb2-0c50-4132-9dc9-9fc181976547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b3:56:6f:e7:64:6a:18:58:f5:3d:70:8c:00:
                    1d:bc:ae:70:fc:bb:f0:b7:4b:d6:34:39:74:e5:18:
                    ee:3f:c7:fa:92:61:d9:86:e6:94:46:e7:e4:4b:3d:
                    36:7b:45:4d:d3:11:a3:1a:59:11:41:23:94:81:d6:
                    76:f6:a7:86:6f:78:06:1e:58:2e:f2:a8:50:ec:05:
                    ef:8f:c5:90:17:81:c5:9a:3e:9e:49:81:75:a3:76:
                    90:0c:27:18:3f:e3:cf:2f:87:ed:11:7a:a1:fb:46:
                    16:af:1c:5d:0c:7d:3b:17:23:28:f3:69:a3:ca:4d:
                    e1:9b:61:cc:d3:a6:38:ed:10:a9:9e:21:fa:61:9e:
                    9f:3c:74:b4:af:ec:cd:fe:07:0a:e9:a1:e8:d2:a6:
                    22:49:6a:34:84:1e:f0:3b:c6:68:b9:26:ec:fa:95:
                    ff:28:da:9a:ed:79:bb:0f:5f:69:9d:10:78:b5:30:
                    e4:54:1e:4b:84:d9:39:f8:56:4f:b9:86:21:45:99:
                    d4:ab:2b:75:bf:2e:cb:84:99:21:b0:74:9a:72:f0:
                    a7:73:ee:11:11:4d:d5:19:17:42:8f:5f:7e:2f:2e:
                    5e:76:6b:1d:3e:f7:77:1f:13:d7:41:af:0f:d7:39:
                    65:53:16:94:e2:67:fe:7c:9c:43:84:51:c4:d1:21:
                    be:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E3:E0:AC:B3:92:B1:89:92:7F:E5:1C:CD:83:11:EF:91:CD:E0:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c84c7cab-d491-46ad-9ed1-28e7397421e7/3adde67c-430f-320d-902b-ae38c1c3a785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c84c7cab-d491-46ad-9ed1-28e7397421e7/c84c7cab-d491-46ad-9ed1-28e7397421e7.crl

            X509v3 Authority Key Identifier:
                keyid:51:5C:79:7A:2D:D6:B2:61:3E:8E:82:59:EC:BF:BB:A5:4D:56:8E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c84c7cab-d491-46ad-9ed1-28e7397421e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f5:97:2e:91:cc:c3:c8:56:f0:b1:39:7c:a2:7c:fb:3f:a1:
         10:23:e2:22:0f:63:d1:0f:30:f4:89:a2:a7:3f:ef:f6:b7:a7:
         ca:5f:8c:8b:aa:53:b3:e7:a2:47:e0:44:37:0a:ae:65:f0:0a:
         d7:93:e4:61:0b:7e:ff:55:29:d3:08:f1:49:ac:4c:01:fc:95:
         b2:95:30:ae:ae:98:84:61:4f:dd:e3:21:0c:02:fc:e3:b7:c8:
         01:68:d3:a4:6d:90:23:9f:31:5d:f2:f1:3b:73:bc:5f:12:05:
         ee:02:b7:f5:37:40:a3:ba:6e:18:2d:99:22:05:c3:19:d2:ad:
         a1:a4:f9:07:e1:d4:b2:47:8e:0d:6f:31:e1:3c:3f:12:69:2a:
         b5:8f:b3:16:98:35:96:ba:a7:2d:0d:3d:f4:8d:ce:7a:22:a0:
         ca:76:12:4f:f3:c6:d3:64:0a:a9:07:ae:8c:e6:13:3b:c7:f5:
         24:0e:db:d7:76:c5:4f:0f:10:b8:ea:08:bb:55:25:ad:70:b0:
         d1:5a:94:87:76:be:c7:31:ff:76:ab:61:ab:0b:9a:d4:20:18:
         f1:ce:d3:be:7f:71:9b:78:1c:d5:12:97:d4:36:cb:2e:11:e0:
         86:b6:da:b6:77:d9:14:7b:6c:d4:aa:75:b1:e5:64:de:1c:43:
         55:e6:27:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:52:30 2025 by rpki-client