Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/331149f2-c5c0-3d67-bf85-c4d04d046039.roa
File:                     331149f2-c5c0-3d67-bf85-c4d04d046039.roa (raw, json)
Hash identifier:          T6Ka4snEBTKnatojZT32HlUKIYE9b8Hclx9z9+Q7ezI=
Subject key identifier:   15:CC:8C:52:2D:82:FA:FB:55:21:B0:0A:A2:7C:83:A1:32:A9:29:31
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584B047C13D2DB0A6978EAC7A480
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/331149f2-c5c0-3d67-bf85-c4d04d046039.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     2153
IP address blocks:        2607:f380:4:4005::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:13:d2:db:0a:69:78:ea:c7:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=cb370209-6125-4348-9d2b-1be24fe24193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9c:a6:af:e2:65:e2:f0:be:56:6e:26:2f:1e:
                    03:f4:eb:15:33:52:34:b9:f8:fe:7f:c9:65:b4:db:
                    10:c8:e1:f5:33:95:d7:f9:37:58:8e:b1:1b:bc:59:
                    d2:e9:d9:60:d5:fc:67:b6:4b:e7:bd:05:57:2e:93:
                    26:88:75:22:99:79:aa:a7:7b:85:2e:fb:83:94:6c:
                    fc:96:7f:b6:a8:58:1e:88:2c:b3:05:f6:a0:45:55:
                    c6:2e:9c:d7:fb:cd:32:e0:5e:2c:88:58:33:98:f1:
                    3b:52:62:64:ff:c1:39:cb:97:68:94:81:fd:e7:bd:
                    73:72:1b:81:31:b1:e5:f1:e4:b1:21:1a:58:41:3b:
                    ca:ef:f0:31:e8:1a:e3:d0:c9:20:df:dd:83:ee:2f:
                    7c:e8:62:b2:d4:96:1c:85:ec:7f:3f:73:f7:42:c0:
                    5d:79:4d:1d:df:ee:cd:c5:dd:e1:e1:f5:09:3e:4d:
                    7e:da:bd:88:d3:6e:7a:5f:c9:f6:ee:1b:78:87:4a:
                    41:3a:42:f2:dc:a8:81:dd:1e:3a:1d:a1:01:0a:a2:
                    2c:79:28:80:72:72:a5:2e:bb:5b:26:07:52:c8:23:
                    a5:8e:31:b6:10:e1:9d:02:08:f0:db:5f:cd:91:ae:
                    14:79:10:9e:32:bf:6b:ec:5f:5b:ee:59:df:fc:2c:
                    56:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CC:8C:52:2D:82:FA:FB:55:21:B0:0A:A2:7C:83:A1:32:A9:29:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/331149f2-c5c0-3d67-bf85-c4d04d046039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f380:4:4005::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:0b:1f:22:19:02:d9:e7:88:12:e6:e1:51:46:03:57:06:83:
         a0:c7:37:77:e3:5a:44:57:f4:bc:e2:fc:2e:2a:df:89:7b:6c:
         7e:87:a6:9d:e1:46:e2:eb:a2:14:02:5c:e6:0f:ad:d0:4a:8b:
         1b:5a:c7:80:a5:48:7b:e1:e6:00:9f:48:ef:a0:b8:b5:3d:bf:
         0a:c3:c6:97:82:43:b5:2e:cb:e4:cb:12:98:d8:bc:30:12:ac:
         f0:e5:d2:c3:72:81:32:33:db:2d:5c:b4:6c:44:98:98:e0:51:
         7d:6c:11:90:84:d8:35:a2:ae:7c:6c:a6:24:7b:8a:ab:f5:96:
         ec:83:f4:4f:4c:81:2d:53:0d:7f:a8:8b:03:2a:d1:2a:89:5f:
         13:4a:50:66:f2:dd:52:1a:f9:94:1b:65:65:81:79:6c:98:e1:
         53:96:4a:10:e0:8d:8a:dc:6f:3d:ba:af:34:14:a4:54:ba:06:
         2d:79:1c:77:60:47:ee:b6:33:14:3a:2b:4d:5f:ca:73:45:0f:
         f6:c4:6b:76:e7:77:ed:a5:76:23:7b:2d:56:bc:ac:c4:a8:09:
         ce:7e:64:62:5e:05:c6:31:09:a7:aa:ca:88:4d:8d:77:e0:92:
         7e:05:23:d4:b8:67:e2:c4:55:d5:e5:07:da:14:9b:25:d1:e8:
         ce:14:e9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:18:17 2025 by rpki-client