Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/cad9ec0c-e2f9-3b01-bff2-9ea510f87158.roa
File:                     cad9ec0c-e2f9-3b01-bff2-9ea510f87158.roa (raw, json)
Hash identifier:          tIWU30Ty/nOEOvn2ugIBCL3tsk7yU/IubpeNo1afEVY=
Subject key identifier:   9B:DA:10:BF:F8:85:65:E4:FD:A7:A6:17:A3:17:62:BB:C0:8A:D9:B0
Certificate issuer:       /CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
Certificate serial:       010D0C9F4328584B153C19F030B46A17B9667780
Authority key identifier: 5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/cad9ec0c-e2f9-3b01-bff2-9ea510f87158.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     398325
IP address blocks:        2605:e040::/40 maxlen: 40
                          2605:e040:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:19:f0:30:b4:6a:17:b9:66:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=604ee751-09da-4db3-b162-76260b71cdb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:25:60:03:78:4b:dd:46:56:5c:ee:9c:f4:1e:
                    f7:ac:68:23:44:cb:0f:0c:e5:6e:73:e0:74:64:0f:
                    a1:ba:85:9b:df:85:3f:57:a7:a1:07:01:9b:c6:b4:
                    57:47:e2:2c:6d:0e:b4:64:f9:9b:da:67:82:b2:67:
                    71:84:5e:58:9d:b8:2d:9d:83:16:24:85:60:78:b3:
                    2c:ba:e5:da:17:c7:e9:55:f0:33:b6:64:f7:9c:dd:
                    d7:4e:dd:0f:9c:12:f0:f4:ab:34:9b:d6:5e:ea:21:
                    71:18:a7:73:cc:d8:34:4e:19:53:6c:95:60:e8:2c:
                    52:90:59:7f:9c:f7:2d:0f:c1:0b:18:cf:81:c4:cf:
                    c9:be:dc:3a:0a:5f:42:ef:85:68:f6:4d:17:49:61:
                    d2:cd:6a:49:cb:23:1f:6b:3b:d7:38:aa:ba:0e:c9:
                    63:25:96:bb:89:80:69:60:32:5c:c6:eb:58:92:27:
                    57:05:e6:af:9a:b5:a9:6e:82:24:25:a3:1a:39:2e:
                    7e:93:41:72:f3:02:18:23:81:d7:96:3a:55:33:4a:
                    65:1a:9f:e4:09:76:84:aa:8e:79:e5:f7:8b:1a:aa:
                    6f:f5:62:fd:ed:e3:cc:c7:f9:fa:54:17:49:b4:c0:
                    08:cb:14:9a:71:4f:0b:2c:e0:73:de:71:5b:1a:c0:
                    25:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DA:10:BF:F8:85:65:E4:FD:A7:A6:17:A3:17:62:BB:C0:8A:D9:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/cad9ec0c-e2f9-3b01-bff2-9ea510f87158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl

            X509v3 Authority Key Identifier:
                keyid:5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e040::/40
                  2605:e040:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:14:00:a9:82:d4:1b:4e:f3:f7:c5:aa:66:b3:00:63:8c:67:
         e9:b8:19:7d:fc:aa:5d:c8:5d:17:b3:d0:bf:5c:f0:85:38:50:
         fb:d4:b9:c8:15:0e:bb:4a:b2:d0:2f:12:a5:dd:4c:95:ed:9f:
         58:14:c4:91:42:e8:b3:ee:9a:f2:a8:8d:ff:dd:5b:f9:57:27:
         e5:da:4b:b8:ec:e7:27:e7:07:da:f8:bb:ab:f7:88:1f:5d:42:
         cf:87:0a:fb:e1:fc:2f:62:65:66:0c:73:02:d5:27:42:7d:dc:
         8f:73:46:cf:99:c9:d1:2f:c4:ee:38:5f:1b:c1:af:be:e0:04:
         a0:ca:9e:65:1d:99:83:32:1f:7c:6b:d0:ea:3f:c4:bf:9f:09:
         53:3e:5b:97:4b:f2:ba:35:33:3b:ba:97:30:64:d1:8d:e1:a6:
         ef:ad:20:d2:44:d4:ca:51:8d:29:c7:ea:9a:9b:4c:e6:95:3c:
         25:82:08:75:41:b3:ca:f7:b4:24:fa:61:2d:ec:e4:a4:26:1b:
         b8:15:40:70:8d:a4:43:e0:ce:de:6d:41:20:50:ca:62:bd:f9:
         ff:c4:58:96:cc:a7:e8:7e:61:88:01:58:9e:00:a8:17:ee:ef:
         d6:fa:5b:3b:b5:cd:a7:9f:61:ed:bb:d0:95:00:60:64:7e:f2:
         9a:1f:ce:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 05:10:30 2025 by rpki-client