Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/04623bed-8a51-304e-9d94-54b88dab4623.roa
File:                     04623bed-8a51-304e-9d94-54b88dab4623.roa (raw, json)
Hash identifier:          pak0vBIcfuEdK0X7ejSQYuH03+HQ0zUcwokQUWnrTVM=
Subject key identifier:   9A:BD:E1:85:6B:F1:40:1E:F2:B2:20:05:9D:FB:CB:B6:11:69:55:21
Certificate issuer:       /CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
Certificate serial:       010D0C9F4328584B48E1BEC5CDC790B51EBC9160
Authority key identifier: CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/04623bed-8a51-304e-9d94-54b88dab4623.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2602:fcee:ff8::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:be:c5:cd:c7:90:b5:1e:bc:91:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=e0d9fd02-77a4-4223-8ab7-22682e200b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bd:29:79:79:a7:26:22:38:97:35:c9:7d:a1:
                    25:72:71:d1:a0:e7:0a:42:26:90:71:3b:cf:e4:da:
                    6b:33:58:78:c2:af:46:16:b3:2d:ba:96:78:2f:c8:
                    44:15:66:bd:5e:cc:0f:11:66:41:28:4f:ea:f5:0e:
                    a6:2a:b9:0a:0d:2b:ee:62:38:6a:ca:bb:a4:36:a0:
                    0f:4d:19:f8:35:dd:a3:cf:eb:5f:5c:1f:61:56:92:
                    17:1a:44:65:2b:0e:6a:29:e0:42:cb:6f:f2:0a:c2:
                    a1:92:49:74:25:80:62:95:12:79:36:ca:8e:df:7f:
                    3e:05:1d:87:d3:cf:fd:b2:63:db:5d:fa:60:0f:94:
                    0f:5b:e8:8c:fb:ff:6d:1d:56:08:5d:ca:fd:bf:34:
                    49:36:96:48:5d:19:98:96:a8:31:da:8f:17:fd:cd:
                    46:45:40:37:77:de:9b:75:c3:72:ad:8e:f7:45:e4:
                    d0:53:ed:fe:79:98:4a:3a:a2:2c:d7:40:5d:c2:c0:
                    3d:44:99:39:03:5f:76:69:65:bb:c6:82:7b:a9:46:
                    95:a7:55:2d:3c:0c:3e:c0:d0:6a:a0:a1:ad:d7:03:
                    81:73:66:2b:bd:8b:5f:b1:cb:51:e9:dd:c7:c5:7e:
                    72:f8:c6:12:88:be:2d:09:8c:d2:5d:90:13:49:75:
                    bd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BD:E1:85:6B:F1:40:1E:F2:B2:20:05:9D:FB:CB:B6:11:69:55:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/04623bed-8a51-304e-9d94-54b88dab4623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcee:ff8::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:16:e5:10:3e:f8:09:5d:85:fd:98:2b:67:3e:f7:e7:6b:2b:
         a9:e1:35:cf:85:d7:9a:95:c3:9e:dc:39:9c:c1:9d:07:81:06:
         56:38:05:ce:21:ac:21:ee:b3:37:6b:ba:05:f2:8b:5f:5d:bb:
         ae:7a:22:0f:cc:e3:f2:a8:e4:50:bf:cf:aa:b3:85:fe:e0:12:
         4f:5f:31:14:7f:79:10:b8:50:8e:be:52:b7:a7:10:8c:b7:2b:
         29:9f:73:6d:19:8b:35:be:e5:93:a8:84:e6:09:d2:4f:2f:da:
         6e:03:23:91:2d:ab:92:34:a3:c1:51:bb:5d:72:f2:67:e2:5f:
         42:0b:6f:97:d6:82:d1:33:21:f7:82:33:58:61:26:5b:cf:60:
         ef:cd:3d:8a:85:87:b4:6d:dd:65:61:2b:01:e2:d9:f0:d5:d6:
         90:0b:d4:da:ae:db:5d:af:1c:5c:fd:e3:1f:93:b1:0c:44:6e:
         03:77:c5:f2:79:2e:55:84:9a:47:7e:c3:c4:df:37:aa:cb:fe:
         d1:a8:7e:bc:53:46:73:89:63:0e:63:74:a5:2c:ef:40:fc:b5:
         af:87:41:ad:31:e6:c6:6b:16:fd:6f:12:d2:a4:14:5f:e6:57:
         79:d0:1c:2c:05:79:74:0b:50:50:1f:91:d0:19:b0:28:18:d8:
         f3:88:55:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:24:46 2025 by rpki-client