Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f9e15737-b0d7-3910-9d7c-e2d47b60c5ac.roa
File:                     f9e15737-b0d7-3910-9d7c-e2d47b60c5ac.roa (raw, json)
Hash identifier:          ayH8sUL/SOmJByNeqIZJy+0IT0U4c6ouG7dDoqhi1rk=
Subject key identifier:   80:F7:57:22:96:69:75:B3:63:42:46:BD:ED:85:D9:97:D7:31:FB:81
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ADBD6DA78378B50E4B0C73800
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f9e15737-b0d7-3910-9d7c-e2d47b60c5ac.roa
Signing time:             Thu 14 Aug 2025 23:35:42 +0000
ROA not before:           Thu 14 Aug 2025 23:35:42 +0000
ROA not after:            Thu 13 Nov 2025 00:35:42 +0000
asID:                     16509
IP address blocks:        2605:4300:3906::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:db:d6:da:78:37:8b:50:e4:b0:c7:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 14 23:35:42 2025 GMT
            Not After : Nov 13 00:35:42 2025 GMT
        Subject: CN=da88352d-7ac5-4bde-8ac0-12162d3fc7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ed:8c:3c:67:ea:88:70:97:bd:93:c7:0f:85:
                    28:db:2e:47:72:35:02:df:d8:0a:d2:ff:ca:e4:fc:
                    25:cf:a6:df:60:ed:1d:0d:07:2b:e4:2b:42:51:48:
                    4b:39:a4:d6:fc:e8:79:7d:81:f9:d6:53:00:1f:06:
                    3f:5c:22:84:e8:83:b6:95:30:ea:26:2b:4b:e7:2c:
                    7e:23:82:2b:fb:7d:07:e6:d8:9f:fe:1d:7c:1d:fb:
                    4e:cd:15:5f:d8:0d:55:3e:12:2c:84:12:d1:a7:73:
                    0e:62:e3:f9:17:88:3f:38:fa:1b:59:d8:65:16:c2:
                    dc:0c:3b:f1:bb:62:bd:87:bc:1b:82:2f:93:d5:9c:
                    2c:6d:17:85:ce:1b:16:5f:88:0f:44:66:35:64:92:
                    cb:95:b2:3e:b7:50:9f:71:39:fb:6e:1f:ae:ff:8f:
                    b4:06:ed:0c:11:47:6e:0e:85:86:9b:e7:97:b9:a8:
                    a5:c8:9d:74:e8:91:88:a7:53:ec:4f:00:9e:bf:82:
                    2a:99:3d:cf:b8:bf:da:be:b3:8f:83:43:07:10:d2:
                    f0:56:89:84:28:44:f0:96:b9:5a:fe:ca:8e:93:c6:
                    66:34:8e:59:67:3e:bf:aa:ae:83:a3:db:12:ef:55:
                    64:13:b2:34:49:cc:98:c3:05:91:76:e8:1a:55:e4:
                    ea:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F7:57:22:96:69:75:B3:63:42:46:BD:ED:85:D9:97:D7:31:FB:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f9e15737-b0d7-3910-9d7c-e2d47b60c5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3906::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:59:dc:2e:68:00:23:5f:78:66:c4:e0:48:2e:37:03:57:1f:
         a1:61:77:0b:a9:4f:a5:23:cf:b5:83:d4:0e:85:0e:4a:7d:12:
         9b:0a:6a:ad:52:1b:11:7f:c2:0a:65:89:b1:73:52:53:1c:b6:
         ed:1b:fe:6c:6e:ec:ff:b8:ed:ae:24:86:e9:40:08:fd:a6:e5:
         d5:a5:39:09:52:f5:a6:bd:eb:b4:69:52:82:0b:60:81:db:71:
         9c:42:a3:d3:75:5a:10:b6:d7:70:bb:93:1e:89:48:90:a6:58:
         1f:50:93:c6:47:df:d1:15:27:1f:48:01:83:14:1d:40:b6:b0:
         8a:8e:7e:7b:2d:9a:9a:33:43:10:a7:4f:51:d5:73:88:de:32:
         14:f6:b5:28:d1:98:e7:df:1f:a3:8c:f2:06:03:3b:6e:9d:a8:
         f2:64:ba:71:8d:63:97:dc:e2:74:c9:d9:aa:24:e1:e0:f8:8a:
         4b:ab:3b:97:a3:65:f3:f2:a1:81:80:cf:a6:6f:20:86:29:6f:
         ce:0b:bb:50:cc:75:0c:01:23:dd:36:93:8a:77:16:8e:94:4b:
         88:7b:76:4c:cb:4b:62:a6:15:81:b7:de:09:91:9b:cb:e8:54:
         bd:62:2e:ed:7b:9a:1e:3f:a2:ca:e9:c0:38:83:50:4b:08:36:
         a0:a2:6a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:44:27 2025 by rpki-client