Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/8d29cc79-0418-3685-a36b-52ea43d6efc2.roa
File:                     8d29cc79-0418-3685-a36b-52ea43d6efc2.roa (raw, json)
Hash identifier:          exZcs/SKEtPgr6dgrURmWsQ6k1zAfhWEQmB5ny/T3dc=
Subject key identifier:   5C:55:8D:08:8C:DC:2C:02:4E:64:D2:4B:61:89:DB:2E:23:AC:91:C1
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584AF7EBDBD125B5E20FD6DA8900
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/8d29cc79-0418-3685-a36b-52ea43d6efc2.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     10835
IP address blocks:        2607:f498::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:db:d1:25:b5:e2:0f:d6:da:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=a5e25066-472e-41f4-ad37-bf32f82a6663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:a0:1b:fa:5d:2c:fd:fb:73:d1:c5:c8:3d:
                    a9:c5:fa:d8:e0:d1:8f:9b:c6:35:93:2b:c5:f7:78:
                    cc:6e:74:3d:39:9b:08:69:30:c5:95:9a:fd:a1:91:
                    cb:7d:2a:04:62:2d:20:00:f9:ef:71:d7:60:6e:42:
                    77:a4:79:3d:64:cd:86:7a:33:22:e8:b7:84:20:26:
                    0e:ef:83:c2:f3:33:9f:86:92:ad:86:f8:f0:8d:c2:
                    52:41:f9:d3:94:95:53:21:05:f6:84:a7:01:9e:e2:
                    22:0f:88:24:86:9a:ab:59:3e:b6:13:7c:b5:5b:64:
                    f3:fd:bf:56:cb:02:2f:1b:b9:ed:cd:78:70:63:77:
                    0f:b3:8d:be:57:7d:50:44:7a:d3:fa:33:08:e1:a3:
                    73:78:2d:1b:76:ec:a1:17:11:19:f9:f0:e2:8f:33:
                    c4:36:a0:8b:35:e7:44:53:54:d7:5b:f1:04:e3:5f:
                    aa:e8:30:de:cf:62:6f:35:e9:79:f3:6b:02:d6:83:
                    fe:b3:b2:0f:b3:8a:31:30:4f:4f:be:9a:77:3e:31:
                    f8:1d:56:12:83:89:ac:a3:b6:e0:66:1e:a3:ef:3d:
                    6a:0b:70:12:fd:ec:62:96:69:38:f4:47:6d:1b:9d:
                    1f:42:ef:31:21:1b:36:82:43:21:c8:9b:6f:87:c0:
                    a8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:55:8D:08:8C:DC:2C:02:4E:64:D2:4B:61:89:DB:2E:23:AC:91:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/8d29cc79-0418-3685-a36b-52ea43d6efc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f498::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:2a:90:26:c6:f0:59:22:9a:60:8c:18:ec:b6:57:80:d1:87:
         cb:93:6b:d6:cc:cd:59:dc:27:b6:8f:87:0d:2a:27:19:a7:05:
         31:e0:8d:cb:07:33:f5:cc:d3:c1:b0:d2:91:61:fb:cd:9d:ff:
         75:65:b8:fa:95:65:31:55:30:bb:aa:36:61:fa:04:66:0a:e0:
         f2:ef:e5:bb:9f:7c:7f:e3:42:f8:da:48:64:e6:98:e5:f1:5a:
         9f:cf:f6:7a:ed:e1:37:59:ab:0b:e4:6f:3c:f4:0f:58:ac:ed:
         fe:d4:ec:d8:96:66:0e:a1:e0:5b:7e:51:3c:d6:05:58:34:cc:
         d3:2b:da:18:81:bc:66:f1:1d:d8:f4:c5:d7:e5:7f:17:df:89:
         65:22:ad:08:61:3a:20:e8:0d:1e:7f:a5:65:c4:53:33:0d:c4:
         7c:e8:fd:e3:c0:ad:89:a3:a2:27:f4:f1:3e:5c:3c:32:79:8a:
         a9:29:6b:41:ae:e6:82:e8:90:81:63:2b:cb:f9:98:fd:43:eb:
         b3:10:52:71:70:86:97:0d:c0:b5:a5:62:20:c6:05:84:31:0b:
         56:ae:e2:dc:73:98:af:e8:a4:6e:ad:a5:5e:15:e8:ea:44:9b:
         f1:d0:de:0e:3a:22:52:ac:b5:8a:1a:df:e9:65:1e:db:a0:37:
         97:87:c1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 12:26:05 2025 by rpki-client