Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa
File:                     0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa (raw, json)
Hash identifier:          CZigBE6x7fZKxuZJBvE1SlHU5gmNgg99USZqHya+PUw=
Subject key identifier:   A9:60:DD:52:DB:CC:06:49:EC:76:50:9B:DA:3E:AB:C0:38:2B:FF:5A
Certificate issuer:       /CN=89dfa952-929a-4c50-a372-96882b2b33e2
Certificate serial:       010D0C9F4328584B0B76B4B6E91C5B678B5189B8
Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     19782
IP address blocks:        2607:ac80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:b4:b6:e9:1c:5b:67:8b:51:89:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=de22b384-54d2-42d4-b1c0-c26ad47d396c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4b:77:a8:40:53:f6:3b:6d:fa:ca:1d:4e:58:
                    5c:53:28:2c:90:a5:2a:9a:51:22:7a:3d:3f:be:64:
                    ba:37:68:60:67:b4:51:e7:32:09:42:65:76:c3:1a:
                    e1:b3:3a:8f:32:94:80:72:f5:32:a3:87:88:e7:da:
                    06:fc:d7:c1:3d:5a:33:19:8a:19:06:7d:6f:04:54:
                    3a:93:e5:ee:9c:62:b0:d3:f8:80:26:38:07:6b:ea:
                    95:ec:c4:18:25:2d:ad:e5:c2:ea:06:d5:73:11:ca:
                    72:65:6e:44:c6:18:0a:0e:6b:89:41:8a:bc:2f:df:
                    29:db:55:f6:37:78:62:e8:a0:9a:b7:b3:20:d6:d6:
                    5e:c7:d3:60:d8:a9:b0:d7:01:1d:a3:be:20:50:e7:
                    d2:2d:1f:e8:17:5b:a3:f4:fe:dc:f2:93:74:a6:be:
                    38:51:04:9c:4d:f1:6b:b1:75:b5:24:12:c2:12:4c:
                    09:87:95:2f:24:25:94:c8:d5:97:d7:0d:b4:52:e6:
                    83:47:43:d8:e0:86:f4:2d:1b:ce:df:e8:b2:aa:6f:
                    c9:b4:f2:14:77:78:ae:f6:94:9b:5d:c4:0e:9d:05:
                    d8:45:67:0c:ac:34:9d:5f:71:94:18:69:a1:20:73:
                    10:88:bf:0d:ef:99:96:94:9d:b2:7e:5c:86:e1:70:
                    11:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:60:DD:52:DB:CC:06:49:EC:76:50:9B:DA:3E:AB:C0:38:2B:FF:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/0d36b90c-3ee5-3b4d-8a88-4a58b7068da7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl

            X509v3 Authority Key Identifier:
                keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ac80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:95:3c:ba:d2:35:89:32:84:93:c2:c0:6b:24:53:a2:dc:f9:
         bc:b3:f1:a4:d2:e1:a0:03:72:b3:7e:e0:1e:f3:91:67:05:d8:
         0d:2e:6b:fb:17:7d:47:13:03:a8:1c:5b:66:b1:86:e4:05:53:
         a0:5e:10:e4:3f:1f:85:70:d7:38:48:cb:5c:97:54:19:89:37:
         ba:34:a6:04:e6:bb:36:b7:76:7a:32:48:49:6c:07:41:51:e0:
         b3:aa:43:41:2b:81:5d:14:d5:9d:35:a2:09:87:b7:2c:f4:93:
         26:05:59:b3:12:42:21:d4:bb:4a:77:27:93:ae:c9:db:08:a1:
         bf:45:39:f9:df:aa:9a:59:e5:aa:60:6f:82:92:a4:50:35:3f:
         e0:e7:6d:21:8e:2b:f7:97:a5:c8:17:c6:f2:c1:dc:98:b5:97:
         d7:04:5b:58:28:fe:6c:2c:b4:8a:5b:cf:8f:30:4b:9f:d1:ac:
         2a:34:ca:72:44:c9:26:04:6b:24:0e:15:1b:21:4a:55:f4:91:
         f7:dd:8e:50:66:f2:16:78:36:9b:fe:61:bc:19:e7:0a:eb:90:
         38:46:fd:82:a9:c8:66:88:d6:3a:4e:29:95:ab:1f:19:13:9d:
         ab:3e:ea:b7:0f:2c:47:21:34:78:a7:bc:20:38:c3:8f:da:40:
         f9:5b:a0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 01:06:26 2025 by rpki-client