Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/9bfefc0e-841e-32a7-adca-7e24076f32aa.roa
File:                     9bfefc0e-841e-32a7-adca-7e24076f32aa.roa (raw, json)
Hash identifier:          MQvOixZIM3S56c/WkY91+Sym4nDxGBQdf7InUJBkvz0=
Subject key identifier:   7D:BA:41:FC:72:07:B3:8B:F8:43:97:8C:5C:90:3B:4E:4E:D2:37:F2
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584B0E415D9C126957246A203F30
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/9bfefc0e-841e-32a7-adca-7e24076f32aa.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     11055
IP address blocks:        2605:4a80:ef00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:5d:9c:12:69:57:24:6a:20:3f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=890ee134-3700-4ba5-a11a-3794b8106218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:40:ea:7a:45:31:cf:c3:76:72:a5:fa:a7:32:
                    c5:b5:c2:89:de:a7:7c:90:1b:6b:08:de:b0:a3:6d:
                    04:bc:fa:3c:a6:f4:eb:c7:8c:61:bd:16:3b:1a:1f:
                    c2:79:9c:cc:59:f4:6a:b4:86:9f:9d:a3:31:aa:b5:
                    4c:74:46:05:7f:32:da:d4:5b:ed:73:3d:3b:49:c9:
                    52:de:51:95:3e:25:37:db:6a:5d:82:47:89:3b:f0:
                    c7:8c:df:5e:5a:68:37:0a:e6:f7:29:24:7d:37:da:
                    f2:84:1f:c1:83:36:84:84:05:bd:ca:cd:6b:72:e9:
                    39:7e:26:ff:33:08:46:79:dc:da:2b:c1:ba:79:27:
                    8f:cb:b2:7f:22:01:db:0f:a8:ba:b8:11:de:00:4c:
                    a6:17:cf:c1:dc:20:8e:aa:98:e8:49:96:09:24:75:
                    5a:10:5a:ac:18:4b:e2:63:56:b1:a6:c8:6d:78:5b:
                    61:2d:b9:82:e4:5d:76:ee:75:9e:92:03:4b:1d:b5:
                    c0:a5:7d:36:52:62:45:52:23:4c:3b:53:8b:74:bb:
                    81:bb:72:70:9d:d5:1a:9d:66:9b:d9:ec:11:d5:4f:
                    7b:a2:ba:ac:b9:5e:6e:dc:76:96:63:78:e4:a1:94:
                    26:61:af:c3:a4:ca:7e:9b:45:2f:f1:5f:d5:1f:32:
                    40:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BA:41:FC:72:07:B3:8B:F8:43:97:8C:5C:90:3B:4E:4E:D2:37:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/9bfefc0e-841e-32a7-adca-7e24076f32aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80:ef00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:85:87:cf:5e:67:12:3f:00:9b:d5:5f:bb:00:f9:45:7b:e1:
         36:b3:2c:7c:94:9a:f3:24:05:87:02:0f:8a:0a:86:64:1f:19:
         37:40:69:b4:79:a1:7f:ea:a9:91:de:3b:c4:d3:85:d4:81:80:
         51:64:74:16:3d:ca:32:69:97:7d:af:8c:4d:67:32:39:23:6e:
         a1:68:37:d0:90:84:16:ef:5d:84:c4:1c:a8:68:fc:e0:f5:68:
         e2:48:5f:bc:cf:47:ff:f3:64:f5:4d:99:52:48:64:4b:5e:31:
         a3:8e:cb:b9:0a:00:39:e0:a1:99:20:9f:4a:76:a3:94:5a:d9:
         14:7f:2a:c0:81:62:37:ab:aa:45:a5:91:55:7a:bd:2b:e7:67:
         10:07:3e:a4:3a:8c:31:96:8a:6f:4b:4b:e9:d6:4a:5c:bd:75:
         af:ba:1a:c1:3c:c7:c6:81:06:8b:1f:a2:92:3f:16:1a:10:99:
         4b:87:a1:3d:08:e5:9e:87:50:85:4a:75:f4:9a:4d:c6:ee:55:
         1a:1c:7a:2c:13:6b:bd:d5:a0:72:65:19:3e:3e:82:83:22:57:
         ce:65:1e:d3:c9:f1:ec:16:16:6a:a4:de:0e:5c:06:9c:b1:6f:
         85:b8:3c:1a:8a:7c:37:58:85:47:1e:17:00:50:2a:8a:48:6f:
         b3:cf:7f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:41:57 2025 by rpki-client