Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/ddcaa9e3-5d8d-3969-8188-845f5c5402a6.roa
File:                     ddcaa9e3-5d8d-3969-8188-845f5c5402a6.roa (raw, json)
Hash identifier:          0wE9bavECCmIUv5XTXMrt433pUYv+8CmLYYaOPjiS+M=
Subject key identifier:   E0:1E:59:CA:E0:AE:B1:DE:FE:66:A4:89:92:9B:E3:72:5A:8E:55:5D
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584B25FC35A2A4F1CEDAFDE32C00
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/ddcaa9e3-5d8d-3969-8188-845f5c5402a6.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     6181
IP address blocks:        2607:f500::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:35:a2:a4:f1:ce:da:fd:e3:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=e6f314e9-8edf-484b-b666-602eaa7a35e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:46:d1:ca:14:39:bc:a0:e7:88:1b:d4:8c:90:
                    ae:33:c7:21:e8:0e:90:7e:22:3d:8c:97:11:e6:2d:
                    67:da:f9:f8:21:7b:ad:e8:16:c8:d9:c1:e7:ea:31:
                    be:f9:fd:74:f3:b8:e6:28:7a:be:73:9e:94:3d:a0:
                    92:1c:69:f6:ee:67:25:f0:c0:fb:7c:d4:a5:d4:fb:
                    57:db:5e:c8:bd:74:f3:52:45:8c:36:74:80:27:ec:
                    77:82:95:87:21:17:f1:27:69:c9:82:a7:b3:cd:9f:
                    5e:84:c1:ba:4f:e5:20:d3:10:d7:47:6d:7a:ea:e8:
                    5d:bd:45:bb:ed:24:f5:35:9b:66:e9:d7:5e:6e:27:
                    32:b2:43:a0:a5:2a:7c:cb:ae:eb:22:ba:30:7f:98:
                    f5:2f:92:c5:4c:94:c4:a1:11:a3:a6:95:f2:bc:f5:
                    ba:12:e8:2f:f4:de:bd:22:82:a2:7b:db:7b:a2:7f:
                    16:ab:c9:12:03:d9:d7:76:14:97:43:b5:e1:5e:29:
                    57:1d:87:7a:86:62:e4:b3:a2:e1:4e:cf:62:1b:44:
                    41:c1:02:4e:d3:ac:62:98:22:fe:43:f4:51:d7:d1:
                    27:e3:e7:a9:9e:1a:b6:26:af:96:4a:84:4c:79:d6:
                    4d:a6:b0:f9:d4:08:7a:ac:67:8d:bd:5d:96:8a:c2:
                    e7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1E:59:CA:E0:AE:B1:DE:FE:66:A4:89:92:9B:E3:72:5A:8E:55:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/ddcaa9e3-5d8d-3969-8188-845f5c5402a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d7:19:10:59:18:08:0d:81:ec:ab:40:90:b2:c9:46:f5:56:
         c2:f2:c4:1f:ea:9a:77:53:7e:6d:fa:42:bf:9a:3b:3c:59:9b:
         d4:64:c3:e3:ad:d0:2c:5d:a1:e7:12:d6:e7:61:f1:bc:df:61:
         92:e5:1e:0a:da:66:3b:af:d7:ae:f0:04:3a:2b:5d:37:a9:01:
         c0:cb:4e:42:23:fb:d4:bc:53:85:5d:6c:0a:92:27:37:5e:73:
         a4:1b:a7:5f:6d:fa:4d:38:00:f0:83:83:af:49:2a:3e:43:82:
         86:22:a6:09:a4:01:a3:36:da:0c:fb:23:b3:f4:f3:5a:83:95:
         54:dd:3a:24:da:7d:21:7c:21:99:13:3f:47:ea:b9:b1:23:d1:
         0b:e8:40:af:dd:7e:17:69:d1:c8:cf:f5:e3:a2:cf:7e:c9:c6:
         03:bb:28:77:3f:e3:4b:de:20:da:fd:cf:6c:13:12:47:eb:95:
         9e:69:df:9a:b3:a0:00:4d:fd:97:ff:e5:e2:88:59:15:c4:b1:
         35:f2:b1:02:ab:29:bf:26:a9:5c:f5:13:0c:ea:f0:f6:29:ef:
         79:a1:4e:18:97:1f:22:5b:27:07:68:ee:ee:d0:03:6c:66:e3:
         4f:bf:9e:11:a4:eb:af:32:4d:ba:7d:11:db:3a:5c:cc:86:82:
         cc:8e:0c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:37:35 2025 by rpki-client