Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a8f015e0-31b0-3f44-9c1c-82959f4ce881.roa
File:                     a8f015e0-31b0-3f44-9c1c-82959f4ce881.roa (raw, json)
Hash identifier:          bZw2VEDYJn7xKgCNy4R+NrrZ/tHI9qyGWvPPBi/vbn4=
Subject key identifier:   35:8E:D8:B6:DE:A2:3A:4F:6A:84:70:91:8B:8B:3F:1F:9D:73:35:53
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B03168D60B85D26EA78CB9040
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a8f015e0-31b0-3f44-9c1c-82959f4ce881.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     8987
IP address blocks:        2605:4300:2c11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:8d:60:b8:5d:26:ea:78:cb:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=dd50c19b-2c68-4cb6-8988-13ff1b1e0b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ff:27:b2:4b:cd:dd:91:05:f5:da:3b:25:52:
                    00:f7:c0:a1:e9:4a:89:81:65:cd:b1:d3:09:29:5a:
                    46:6d:06:ab:b0:e8:6f:82:56:a7:e1:d3:7b:7b:56:
                    1f:30:c0:11:af:7c:f8:50:b8:12:70:c2:03:e4:c7:
                    19:71:69:26:86:6b:c0:29:d0:b6:ec:36:aa:68:12:
                    42:a6:48:6f:57:6f:65:a5:bd:7a:4c:68:c7:0f:ea:
                    df:af:5e:cf:85:46:1f:21:5c:02:49:7b:ab:dc:72:
                    b7:ea:92:30:60:1b:62:4a:66:8e:58:bd:81:4c:72:
                    15:69:51:5f:db:f3:8c:97:7b:80:7b:77:4f:d0:57:
                    98:a2:13:fc:93:a0:62:60:42:18:c6:9e:db:35:54:
                    c1:7a:e8:13:23:40:cc:b2:f2:7a:1a:08:c8:2b:ce:
                    84:c2:f0:05:82:bc:bb:58:38:10:1c:0b:fb:ed:ab:
                    26:7a:0b:69:fc:9c:f4:d6:b4:e2:3f:0a:e6:e4:32:
                    30:58:85:45:0d:eb:f3:99:ba:bb:d7:07:20:c2:33:
                    ac:32:f9:7f:4a:c9:c9:6c:af:09:8a:b5:bf:3e:ed:
                    2e:02:e0:13:2e:20:0b:2b:95:7e:57:1e:ef:0f:20:
                    5a:a0:1c:4e:f6:21:b2:63:0f:6f:eb:c4:a5:59:21:
                    fc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8E:D8:B6:DE:A2:3A:4F:6A:84:70:91:8B:8B:3F:1F:9D:73:35:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a8f015e0-31b0-3f44-9c1c-82959f4ce881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:2c11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:69:5a:a9:59:5b:e9:d5:cd:e9:f2:1e:58:37:73:9d:d5:17:
         0b:7d:3d:ca:e7:46:46:f7:c3:c9:c5:91:f5:b5:98:1a:cc:61:
         78:d2:38:c3:03:39:5e:fa:4d:76:46:a7:d9:97:c9:8f:9a:2a:
         71:ec:91:75:69:ef:94:67:1a:cd:99:3c:ff:fd:21:a3:c0:3a:
         7c:2a:8a:57:3d:1b:39:c8:07:d9:21:7b:a2:56:56:ee:16:b7:
         fc:ab:59:1f:bc:df:3a:a1:fb:2c:98:50:2c:61:6e:b2:e0:50:
         fc:d2:16:ab:8e:3b:1e:60:6d:d2:ea:ea:e8:50:c9:00:e8:8c:
         ca:ae:37:a6:33:b9:3f:2f:54:07:ee:4b:f5:db:ee:da:38:98:
         42:ee:7c:85:57:13:ce:65:76:93:dd:7d:9e:5c:3f:8a:3e:dd:
         04:b8:3c:04:d1:d5:ea:1e:de:12:54:cf:88:8c:ce:86:75:ee:
         8b:99:39:bf:b9:26:ae:c0:15:c1:5f:71:30:9f:04:ab:33:8f:
         ce:9c:82:0a:19:d7:9a:3b:99:94:43:8c:83:12:95:67:f5:95:
         21:30:42:6f:8e:9d:88:36:f9:55:10:63:33:3b:6a:30:cb:b4:
         fd:9e:3d:aa:24:79:57:2d:3a:2e:79:2f:c2:b9:89:5c:f7:9f:
         0c:25:24:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:14 2025 by rpki-client