Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/d9ce6bbd-81a9-38b0-b6d2-ed3b6017a668.roa
File:                     d9ce6bbd-81a9-38b0-b6d2-ed3b6017a668.roa (raw, json)
Hash identifier:          wExLN8umOcHHPK5uA50paIUtVSwKYDcYIbDujWzDL64=
Subject key identifier:   02:4E:EE:CD:7C:BB:05:FB:DD:A8:CC:B9:41:ED:CD:58:8A:70:DC:FD
Certificate issuer:       /CN=e8264592-bcc3-48f1-a782-8ba48fc506fa
Certificate serial:       010D0C9F4328584B2FC18F505E01A30794967C00
Authority key identifier: 88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/d9ce6bbd-81a9-38b0-b6d2-ed3b6017a668.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     397952
IP address blocks:        2605:3dc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:8f:50:5e:01:a3:07:94:96:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8264592-bcc3-48f1-a782-8ba48fc506fa
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=2395e326-b76c-4b66-88f3-e31acd1b13b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b1:bc:26:ea:c2:ca:c7:4f:bf:4a:09:fb:c3:
                    8d:a7:f1:9d:0a:97:8a:2e:9e:ab:d0:3b:03:5f:3f:
                    98:18:30:71:8f:b0:12:de:7b:2f:19:95:ce:45:d3:
                    15:3d:47:32:55:37:64:31:84:c6:81:27:94:8a:b8:
                    b5:60:7b:25:ba:d5:bd:46:e0:2f:50:8b:00:0d:7b:
                    a7:50:17:b1:04:29:9b:d4:13:39:0e:6a:86:55:bf:
                    60:98:81:3d:4c:19:74:e6:7a:f7:fc:a8:36:0d:96:
                    57:0a:4b:69:10:89:6c:58:9f:ac:b2:5f:53:be:63:
                    27:fd:3f:62:86:45:70:4b:61:72:4f:6a:f1:fc:6e:
                    d4:c2:4b:30:84:51:b8:f4:f3:ee:e2:0d:15:68:ad:
                    ec:b1:17:71:33:b7:86:2f:52:28:84:a9:60:c5:f0:
                    6f:9c:12:b9:7c:c6:ce:08:68:e8:fa:3b:b1:92:75:
                    96:84:d4:9a:78:b8:ac:bf:e9:fa:46:ca:3f:a3:8d:
                    83:28:13:2b:37:43:9b:9f:21:6b:8c:9b:fd:ed:b7:
                    c0:b6:2a:15:59:f2:0b:1f:48:d8:53:90:50:2f:0c:
                    62:23:84:53:cb:fb:46:22:8c:1e:c6:1f:9d:50:9f:
                    9f:d8:93:dc:f4:39:29:00:2f:f3:15:c4:42:1e:41:
                    9f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4E:EE:CD:7C:BB:05:FB:DD:A8:CC:B9:41:ED:CD:58:8A:70:DC:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/d9ce6bbd-81a9-38b0-b6d2-ed3b6017a668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl

            X509v3 Authority Key Identifier:
                keyid:88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:16:37:0b:d0:56:68:7a:d0:60:67:f4:ea:49:40:95:5e:f3:
         17:a5:9c:9d:e4:45:b6:e7:78:51:a8:05:11:d8:3c:52:f8:4b:
         46:e3:0c:6d:7f:e5:02:73:fe:7d:81:4d:e6:63:fc:7a:35:20:
         df:39:a3:da:2c:40:22:04:37:48:d2:2b:8e:bc:16:f0:45:fd:
         a4:a5:ad:0c:ec:db:d1:13:2e:76:f9:94:24:6d:6b:11:47:eb:
         4a:35:d9:76:b2:5d:98:0c:0a:c8:2e:72:02:c4:24:e8:49:46:
         ba:a7:27:f9:a8:08:c7:88:54:0e:d9:5d:62:49:9f:ad:7a:aa:
         16:c4:4c:24:09:d0:59:44:bf:7d:ee:ed:74:12:e6:9c:e7:e8:
         12:31:85:6c:11:4b:5e:36:e3:49:84:aa:be:ba:b0:62:b4:d1:
         ab:9d:c7:76:af:52:e0:35:83:84:49:46:53:f6:d4:c9:e4:13:
         43:9d:03:a9:d5:21:8f:61:7a:e6:46:20:c0:58:75:0e:22:46:
         fc:46:5e:60:d6:23:d9:fa:c0:ba:51:41:23:ad:fe:d4:4e:c7:
         87:36:a5:13:8a:40:f9:6f:00:7b:63:a7:7c:04:43:f4:aa:c3:
         42:91:1c:31:12:c0:56:70:f2:16:f4:1e:7c:4b:47:b3:61:ed:
         d7:ce:ce:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 08:12:39 2025 by rpki-client