Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/388e3bc0-2c92-3a37-8a36-7e1ff2c6bb51.roa
File:                     388e3bc0-2c92-3a37-8a36-7e1ff2c6bb51.roa (raw, json)
Hash identifier:          jgr0Tb/huqSRT6lYAgSoaFCPuWfqUEzfLB3l9tQ224U=
Subject key identifier:   7A:0D:4A:30:DA:BC:6D:0C:8E:7B:0A:1D:E5:C7:00:9D:0E:8E:B1:BF
Certificate issuer:       /CN=eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299
Certificate serial:       010D0C9F4328584B79BCBBFF5B3F14AA7503A480
Authority key identifier: F1:AE:7B:0F:B9:3F:2F:09:E4:D5:85:E9:7E:46:88:44:3A:85:65:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/388e3bc0-2c92-3a37-8a36-7e1ff2c6bb51.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     15333
IP address blocks:        2607:d1c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:bb:ff:5b:3f:14:aa:75:03:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=a7dc4984-8ca0-413a-b6c2-5505fba03ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:b6:e2:aa:c7:03:31:53:ca:af:35:a7:df:
                    46:30:a3:99:09:87:47:80:ce:97:de:e5:d1:42:b4:
                    08:ea:9b:b2:aa:e2:43:8a:82:0d:19:aa:6f:2b:6e:
                    b8:43:61:b7:5a:dc:ac:c2:47:52:13:0d:e0:6e:43:
                    76:1e:07:58:88:ad:1a:6f:77:54:78:81:03:ce:7a:
                    e5:6c:e6:fc:64:a1:7f:6d:90:6d:24:bb:3f:d8:c0:
                    9a:1b:b5:a1:bf:b9:d8:64:df:33:cc:f2:66:1d:c8:
                    ec:87:f0:b7:01:15:18:ca:80:48:d1:07:43:9a:5c:
                    31:38:ed:ce:4f:8c:ed:fa:c1:15:95:87:b4:21:88:
                    e7:54:c7:8b:f0:80:53:62:f7:cd:3f:32:e3:28:e4:
                    2c:a3:fe:49:d9:7f:c4:9e:ba:97:ed:e0:2b:53:7a:
                    36:16:58:1a:ee:81:d1:31:bb:bd:6c:73:99:4e:1f:
                    c2:a1:3f:9d:1c:80:b4:6f:a8:f0:67:48:1e:d9:d5:
                    7c:4a:35:f0:a1:f9:fe:d1:eb:3a:14:6b:50:9c:7e:
                    17:92:14:24:1e:75:12:d6:fa:98:52:29:a6:9e:a4:
                    7d:e1:42:b3:60:fe:af:8f:bd:a1:c9:1a:91:47:11:
                    42:d4:60:c9:06:9b:51:c9:f2:24:2d:73:6d:40:09:
                    79:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0D:4A:30:DA:BC:6D:0C:8E:7B:0A:1D:E5:C7:00:9D:0E:8E:B1:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/388e3bc0-2c92-3a37-8a36-7e1ff2c6bb51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.crl

            X509v3 Authority Key Identifier:
                keyid:F1:AE:7B:0F:B9:3F:2F:09:E4:D5:85:E9:7E:46:88:44:3A:85:65:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d1c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f5:35:fa:56:01:06:63:82:ab:bc:4d:bf:65:b8:73:c8:23:
         76:93:01:d7:b3:23:52:39:95:44:e8:3b:77:0b:ee:73:f1:a7:
         12:d9:24:72:2c:ec:d6:ec:90:3a:6d:b6:7f:82:02:55:81:89:
         1d:ad:50:aa:18:e2:37:e1:c8:86:e7:d1:1f:82:13:42:92:7a:
         9e:c5:76:26:a3:35:b2:3f:f0:94:d5:a8:6a:3e:cb:9d:ef:d5:
         39:f7:39:2a:05:6d:b4:3e:f1:d0:9e:fd:89:f2:aa:55:b5:54:
         fc:0d:0e:fa:84:2a:f1:23:dd:9d:4e:d0:27:ea:69:76:ca:54:
         ae:06:25:f0:c4:d4:36:84:51:36:61:4c:bb:39:e9:4a:31:9a:
         2f:45:b6:c9:ca:5a:0f:4f:41:b8:35:b9:36:6d:71:df:77:e4:
         be:09:a4:1b:c8:d0:4c:44:a4:8a:e4:44:f2:53:12:f6:aa:83:
         fe:ae:ae:3b:34:cc:e1:fa:40:c6:54:bd:19:9b:de:0c:d8:29:
         1e:28:9a:e2:53:18:01:c7:8a:43:38:ec:e6:b9:1b:d1:f9:93:
         c6:02:57:2e:31:7f:de:2a:69:5b:99:86:ab:fd:74:ee:90:8a:
         e7:46:11:90:f1:fa:e9:0b:80:14:66:d8:3b:49:35:f0:8f:26:
         e7:f3:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 13 20:12:56 2025 by rpki-client