Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/c1a05190-ff77-3ddc-ad0c-1659b20d5be1.roa
File:                     c1a05190-ff77-3ddc-ad0c-1659b20d5be1.roa (raw, json)
Hash identifier:          8JocCs8X7VNr9g5NkP8i3bOBl0GXnUiA7LFrnR5Dwl8=
Subject key identifier:   43:7F:CE:68:BE:4B:6F:6F:83:9E:95:61:5B:13:96:8A:BF:76:A9:98
Certificate issuer:       /CN=e498d95b-9c81-4838-b64f-90f2065c0ea8
Certificate serial:       010D0C9F4328584B34B539A1E83828E191E22A00
Authority key identifier: 79:38:10:DA:F7:43:D7:2D:3E:42:9A:47:03:6F:5C:88:07:BD:15:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/c1a05190-ff77-3ddc-ad0c-1659b20d5be1.roa
Signing time:             Mon 15 Sep 2025 19:34:53 +0000
ROA not before:           Mon 15 Sep 2025 19:34:53 +0000
ROA not after:            Sun 14 Dec 2025 20:34:53 +0000
asID:                     10587
IP address blocks:        2607:f670::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/e498d95b-9c81-4838-b64f-90f2065c0ea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/e498d95b-9c81-4838-b64f-90f2065c0ea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:34:b5:39:a1:e8:38:28:e1:91:e2:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e498d95b-9c81-4838-b64f-90f2065c0ea8
        Validity
            Not Before: Sep 15 19:34:53 2025 GMT
            Not After : Dec 14 20:34:53 2025 GMT
        Subject: CN=724d080d-c74d-4829-a250-14366e7bf396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:eb:8e:9a:97:58:84:c7:22:7a:cc:cf:a9:19:
                    8c:ab:ce:4b:cb:e2:35:c4:79:50:ae:a4:1f:4d:5b:
                    f0:23:ce:5b:7a:33:37:60:66:fe:0d:19:69:1a:a6:
                    74:9a:fa:11:d1:47:b9:9e:75:8b:bb:39:2b:9f:85:
                    0b:4f:9f:85:bf:0e:ea:9e:be:3d:d4:27:85:8d:73:
                    03:b5:40:4e:86:6c:96:98:35:96:8d:f5:ef:ad:df:
                    a2:78:82:0e:f7:c7:04:6c:af:8a:64:44:b0:4c:cc:
                    2d:68:44:d8:ef:a4:ec:3a:3f:30:3b:4e:c5:14:e6:
                    4e:fd:78:c7:cb:cc:6e:58:18:ff:3d:e1:5e:66:8f:
                    6f:fe:5e:59:77:cb:0a:95:ba:ff:00:51:d2:0f:16:
                    54:3b:f8:39:79:56:05:8d:e3:3a:48:92:d3:8a:84:
                    e9:14:bb:9a:f7:f8:70:1b:6e:dd:0d:45:9f:ad:93:
                    83:5d:44:9c:7d:77:50:ed:29:c8:ec:68:2d:d5:c7:
                    2c:8e:11:b2:ed:cb:ca:9b:10:4c:5e:a4:13:98:5d:
                    2d:85:79:35:c8:e5:72:f9:ec:d6:fe:af:6c:54:69:
                    68:16:a5:be:14:43:2a:3e:85:ad:ec:68:53:5f:88:
                    62:74:98:48:a3:cf:df:07:e8:11:12:b1:b3:74:8d:
                    54:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7F:CE:68:BE:4B:6F:6F:83:9E:95:61:5B:13:96:8A:BF:76:A9:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/c1a05190-ff77-3ddc-ad0c-1659b20d5be1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/e498d95b-9c81-4838-b64f-90f2065c0ea8.crl

            X509v3 Authority Key Identifier:
                keyid:79:38:10:DA:F7:43:D7:2D:3E:42:9A:47:03:6F:5C:88:07:BD:15:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f670::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:6a:2a:1f:13:d8:e8:80:84:c7:c2:7c:65:d7:a8:77:f8:ba:
         17:57:00:81:94:29:61:06:da:80:15:28:d1:2a:17:36:28:45:
         7f:9c:6b:2b:92:67:5d:66:d4:10:82:19:13:f4:f9:fd:ba:ec:
         f1:04:c3:5b:d9:b4:09:4e:73:3d:5f:5c:5c:f5:d5:25:36:b6:
         91:3b:97:eb:80:3f:d8:30:5e:bb:72:3e:80:f0:c6:20:b0:ae:
         df:50:44:e7:7b:fe:45:17:d1:e2:9b:6e:a8:f9:a1:20:b1:92:
         b4:fb:e7:a3:a5:51:4c:74:84:22:73:50:c2:8f:91:ee:b9:c3:
         0f:2f:e1:3b:d2:9c:68:0e:08:09:e2:04:54:5d:b3:fc:3b:dc:
         70:b0:97:d9:7d:4e:d1:d1:15:a8:b8:75:ad:9c:ec:5c:72:40:
         55:e0:63:46:28:9a:9e:34:6f:f8:4a:4c:f3:c7:dd:37:49:b9:
         cf:eb:0d:9a:0b:55:5e:60:24:fa:ce:46:b3:96:e0:b0:63:44:
         f7:fb:84:bb:fe:32:dc:a3:bd:3c:02:da:00:e8:3a:9f:a1:e5:
         fe:0f:92:40:39:e7:1d:a0:8d:3b:ef:fa:89:af:33:21:06:fa:
         a8:df:41:22:64:23:05:40:fc:6c:da:26:02:5a:e1:91:71:f7:
         44:7b:bd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:51:10 2025 by rpki-client