Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/eee319d6-cb2f-32da-a231-7f12bf3fc1bb.roa
File:                     eee319d6-cb2f-32da-a231-7f12bf3fc1bb.roa (raw, json)
Hash identifier:          n+9xagLmHufAWRvc67zNjO7iZETU488EgDaIf8YWqk0=
Subject key identifier:   2D:5D:37:7F:B6:E4:AF:8A:C5:74:EF:AC:52:43:50:DD:4F:15:FA:CF
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584B0B76A36E4FEDF13F88994280
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/eee319d6-cb2f-32da-a231-7f12bf3fc1bb.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2605:dd40:8260::/44 maxlen: 44
                          2605:dd40:8570::/44 maxlen: 44
                          2605:dd40:8700::/44 maxlen: 44
                          2605:dd40:8880::/44 maxlen: 44
                          2605:dd40:8990::/44 maxlen: 44
                          2605:dd40:8f00::/44 maxlen: 44
                          2605:dd40:8f80::/44 maxlen: 44
                          2605:dd40:8ff0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:a3:6e:4f:ed:f1:3f:88:99:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=87869be9-385e-44cc-aa99-82a9c03d9c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:31:d2:7a:31:a3:a7:95:fd:85:26:52:b8:
                    5b:cd:e2:54:8a:a2:23:5d:1d:0c:20:b3:aa:74:8e:
                    ea:b4:15:6f:9e:3c:ff:82:c6:21:10:e5:75:5d:df:
                    55:c7:e7:c0:44:41:a3:3d:6d:a1:83:cb:71:7f:f0:
                    0c:ce:d2:48:46:0c:0f:ce:50:21:53:2e:d2:56:63:
                    ae:01:23:3c:d0:3a:6b:ff:b1:15:13:f5:1f:21:d1:
                    f9:f1:99:1a:26:11:9a:88:66:ca:28:e5:c4:fb:55:
                    81:00:5a:4f:3b:94:5e:9e:36:47:f3:6e:06:c4:60:
                    f8:e3:56:6a:8b:61:14:90:27:b5:aa:4d:cc:fb:cb:
                    a5:48:3d:6a:a7:f8:27:5a:1f:18:3c:85:84:49:08:
                    f8:ad:76:62:33:42:ec:a6:f3:40:1d:e1:38:05:f5:
                    02:dc:8c:58:a9:96:58:cc:1c:0b:d4:d8:ec:22:de:
                    b1:8c:a8:5f:de:fd:c7:06:eb:b3:c6:d8:60:ad:ec:
                    f1:51:53:e8:2e:58:bb:f1:b7:0f:e9:03:61:dc:9d:
                    d9:c1:17:69:49:98:2d:6c:a7:16:70:9e:23:d3:bd:
                    89:66:c3:23:fb:30:09:d1:fb:81:26:3c:56:91:fb:
                    a4:ad:eb:4c:32:a8:2d:78:93:6d:03:61:e0:59:7a:
                    e9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5D:37:7F:B6:E4:AF:8A:C5:74:EF:AC:52:43:50:DD:4F:15:FA:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/eee319d6-cb2f-32da-a231-7f12bf3fc1bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8260::/44
                  2605:dd40:8570::/44
                  2605:dd40:8700::/44
                  2605:dd40:8880::/44
                  2605:dd40:8990::/44
                  2605:dd40:8f00::/44
                  2605:dd40:8f80::/44
                  2605:dd40:8ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:d9:15:06:21:93:ea:2d:7d:41:7c:b7:19:55:dc:d1:4b:2f:
         94:37:42:1e:90:be:94:84:a1:36:49:be:63:61:c1:a4:c4:12:
         ea:52:7b:ae:79:cc:f1:e8:3b:07:78:47:4b:06:b3:51:ff:03:
         de:e1:96:d2:f2:4c:9b:55:d8:b5:dd:12:19:50:c7:f3:b6:54:
         5a:6e:92:0d:6c:42:73:89:df:99:5d:37:a6:d3:fc:29:cd:41:
         72:57:e3:98:c2:65:03:1c:76:2f:7f:6c:17:27:ca:b0:95:4a:
         f6:36:48:94:15:15:a0:4f:28:b8:5e:c2:9c:11:5a:62:74:ac:
         ad:69:4d:85:e8:34:45:fc:8e:b5:4d:9b:70:08:7b:4f:01:5a:
         dc:64:f6:9e:9d:4a:a0:48:2e:27:ae:13:b5:1a:5d:03:e7:46:
         eb:ba:f2:71:6b:5c:80:07:31:21:39:46:07:f7:cf:7b:7f:62:
         8b:c2:92:83:2e:df:51:f8:02:6b:41:ad:2c:fa:95:d8:35:77:
         3f:78:3c:da:d7:eb:f0:fd:ae:92:5a:8a:e7:69:d7:12:68:97:
         01:72:4b:ee:6f:d6:34:1d:a1:27:86:e5:e0:e2:7e:3b:bc:07:
         b7:76:f2:75:47:77:b0:6c:ee:33:8f:b8:b0:f1:18:ad:22:51:
         9c:5d:9c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 12:16:19 2025 by rpki-client