Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/84d8c664-abe4-33bb-a4fb-17a1feda43fc.roa
File:                     84d8c664-abe4-33bb-a4fb-17a1feda43fc.roa (raw, json)
Hash identifier:          09DD0JS/qtzUwqZgvD1wIP+zpq+L0/Ln1St1Zw2F5Kg=
Subject key identifier:   86:BF:F0:7C:96:75:F2:BF:03:71:F3:D4:92:85:33:81:13:CA:0D:2F
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584B0E415DB1C310BF9E1DBAACA0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/84d8c664-abe4-33bb-a4fb-17a1feda43fc.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     11055
IP address blocks:        2605:4a80:ef00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:5d:b1:c3:10:bf:9e:1d:ba:ac:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=fb0e4d9e-699e-4023-9c58-a5b7fe0b8f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bc:6b:53:c4:db:f6:db:64:da:af:27:c3:b9:
                    bc:ea:a7:63:bd:47:e8:29:16:06:60:45:97:c1:cc:
                    f4:1e:da:33:12:4d:35:67:c2:aa:63:55:70:93:94:
                    12:f2:42:8b:06:ec:01:e9:c9:2e:39:6e:68:77:3f:
                    da:bd:2f:11:4a:ed:70:aa:b2:7e:7d:f5:d8:23:07:
                    36:d0:8c:47:b7:a8:f1:da:6b:df:d9:8f:1f:25:ad:
                    c9:cd:25:69:49:41:df:cc:d9:d8:6b:70:a7:a9:60:
                    54:13:f7:b3:52:3e:bf:c7:70:5b:26:72:eb:be:5d:
                    3c:02:3b:aa:bf:1d:92:77:af:c1:15:59:f6:c2:3f:
                    bc:fe:81:99:c7:b3:61:fc:d9:e4:da:c7:4b:5f:f9:
                    33:b3:ac:07:57:ff:90:78:51:2f:47:9a:57:9d:c3:
                    1f:b4:7c:a1:95:99:cf:0d:2f:bc:24:0a:1d:61:7d:
                    57:ee:4a:23:09:18:94:d7:5e:67:36:05:0d:7e:d5:
                    5b:b5:33:27:50:09:27:dc:83:cf:5c:04:b0:4c:58:
                    48:e5:a2:58:a1:d2:25:ea:56:9f:7d:75:80:79:e3:
                    9e:cd:c4:b5:1f:a6:2c:eb:67:d4:2c:e6:e1:7b:2d:
                    b6:b9:58:8b:62:7c:01:ec:1f:01:69:a7:ae:a3:09:
                    ee:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BF:F0:7C:96:75:F2:BF:03:71:F3:D4:92:85:33:81:13:CA:0D:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/84d8c664-abe4-33bb-a4fb-17a1feda43fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:ef00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f1:90:77:43:72:9f:c3:8b:35:de:6e:59:54:4e:c0:5a:06:
         25:45:6e:0f:0d:f0:39:dd:55:b4:04:a0:6b:fb:3b:fc:e4:e0:
         d3:97:21:e4:77:e5:28:c2:04:cc:07:13:bd:de:73:6b:cf:f9:
         44:95:51:95:f4:2f:14:47:4f:59:9d:a2:db:e4:29:f4:e1:ab:
         07:6f:d9:31:21:c8:b1:65:ae:79:b1:23:95:13:e2:09:f1:5b:
         6f:73:4f:c8:30:12:4a:8e:65:78:69:89:ac:3f:87:31:f7:69:
         6e:88:47:d0:d4:86:b7:86:71:a3:18:cc:ed:9f:ce:98:0d:67:
         99:62:6e:f1:f0:14:cb:b6:60:75:2c:76:e0:ac:36:0b:57:17:
         da:17:74:9c:af:8a:e7:46:5f:01:57:a2:8f:e2:a2:12:8c:d7:
         77:11:9b:79:47:3b:5b:83:b9:1a:0e:90:19:50:5c:be:59:0f:
         55:e7:cb:e7:91:14:97:23:f1:b2:a6:29:81:8c:b3:66:7e:81:
         2d:ca:c6:a3:de:52:a8:7d:71:e1:0c:6a:56:0e:75:d4:29:d1:
         41:e8:fc:0b:12:25:ac:97:1d:da:4d:f5:85:2f:0f:9e:ad:e6:
         0d:3a:54:29:29:a6:8d:83:19:d8:ba:64:ae:51:84:37:52:d3:
         82:c3:93:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:37:30 2025 by rpki-client