Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/2b92b5d5-5abd-3570-b64b-2214956ec6ff.roa
File:                     2b92b5d5-5abd-3570-b64b-2214956ec6ff.roa (raw, json)
Hash identifier:          aglo8oO/37giqXCHRMmHU1Wz8Ha8BSLEvzVN3yOR4eM=
Subject key identifier:   7E:F8:B4:09:DD:4E:5C:07:45:75:26:24:F0:14:89:B5:2D:A8:79:E7
Certificate issuer:       /CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
Certificate serial:       010D0C9F4328584BDA2B09657E95256650BE2958
Authority key identifier: 5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/2b92b5d5-5abd-3570-b64b-2214956ec6ff.roa
Signing time:             Fri 14 Nov 2025 02:00:30 +0000
ROA not before:           Fri 14 Nov 2025 02:00:30 +0000
ROA not after:            Thu 12 Feb 2026 02:00:30 +0000
asID:                     393227
IP address blocks:        2604:7300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:da:2b:09:65:7e:95:25:66:50:be:29:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
        Validity
            Not Before: Nov 14 02:00:30 2025 GMT
            Not After : Feb 12 02:00:30 2026 GMT
        Subject: CN=b4642743-799b-4204-aac2-93624e53159a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:18:3e:5a:98:28:ee:4c:17:b4:9c:a3:9e:64:
                    ff:b0:63:2a:4a:d7:86:78:eb:f0:87:9d:12:7d:43:
                    fe:3c:30:cb:ab:aa:cd:81:2b:ca:ad:8c:d1:26:28:
                    30:ed:34:95:5f:dc:87:07:91:e4:3e:08:13:75:23:
                    b0:b8:bb:a8:51:92:4f:c1:30:b8:ec:99:e8:34:bc:
                    9c:48:74:19:a1:21:47:31:5c:1a:c7:8c:8f:91:9e:
                    6f:d2:fe:2c:bf:ad:d7:4a:c9:4e:7e:ca:5a:26:d5:
                    44:ee:e5:42:2e:53:59:84:8e:11:ad:20:a8:60:b8:
                    1d:99:ae:cd:ad:3f:62:be:1b:a8:a0:22:25:39:9a:
                    ab:b0:2f:da:f0:a0:d3:02:a7:cc:a5:5c:aa:0c:46:
                    fa:0f:11:65:ab:9f:a4:29:ca:b4:50:73:af:e0:de:
                    5c:40:dc:e6:28:78:49:5f:07:f0:4d:77:11:e2:89:
                    e6:fe:04:02:30:65:50:02:35:4e:9b:6f:d2:a4:9e:
                    c0:fd:b8:8d:ea:20:90:06:1a:c8:b1:0e:e4:39:2e:
                    c5:ee:f7:41:74:52:94:0c:35:ba:b9:1f:ee:82:ac:
                    40:66:94:e1:02:2a:3b:94:41:d5:04:42:2a:c6:07:
                    25:d1:c0:8c:80:f5:53:c0:f8:86:c8:8c:b9:eb:1e:
                    bb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F8:B4:09:DD:4E:5C:07:45:75:26:24:F0:14:89:B5:2D:A8:79:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/2b92b5d5-5abd-3570-b64b-2214956ec6ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl

            X509v3 Authority Key Identifier:
                keyid:5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:5a:67:c5:c0:60:a8:f0:ca:f6:6c:ae:df:eb:96:73:df:c7:
         75:42:d4:e0:a9:08:b6:e5:ae:a6:2d:86:7d:70:36:8a:7d:f6:
         69:d2:3a:4f:84:cd:f6:f7:a0:ec:8e:48:ad:62:e1:ec:34:50:
         39:67:17:98:3f:ed:c2:13:32:e3:aa:c2:42:e9:db:ff:fb:7b:
         0d:6f:0b:14:13:3e:df:8e:22:ec:7a:54:21:ea:c5:1d:b7:5d:
         43:a1:9c:0b:8d:52:7b:d3:cd:06:f9:ff:20:7c:f4:80:68:e6:
         00:b5:8b:93:a4:85:36:41:bf:c2:15:a1:6b:45:4b:66:32:e6:
         d4:50:39:ac:0d:38:0b:12:f6:8f:b2:a6:a3:23:90:cb:5a:da:
         d6:b0:9b:9b:1e:9b:db:b4:c0:6d:62:a3:6d:6c:c6:13:f9:b2:
         51:61:33:de:97:6d:b9:c3:c5:c4:5b:df:fb:cd:ed:86:40:35:
         77:7e:7d:18:a8:9a:f8:f2:66:26:cd:f5:5e:1d:ee:75:b9:34:
         1d:dc:ad:3b:8c:e1:fa:10:7d:68:cc:8f:cc:b3:87:bf:d3:5a:
         73:ec:5e:0c:a8:db:cb:ee:8f:0a:c1:2a:f6:5e:e7:61:74:5e:
         2c:82:da:02:9e:cb:e9:bc:80:4d:e7:14:26:4c:2d:65:21:1b:
         b1:3b:d9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 22:08:10 2025 by rpki-client