Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa
File:                     7251ede9-db40-315e-96d5-145116a009a0.roa (raw, json)
Hash identifier:          cIbMbEd7OMMuJ22o4XVIaPOFp+raIjEX0TnLlcChrBA=
Subject key identifier:   5F:1A:79:D5:C4:E7:9E:2A:5C:89:47:C0:2B:E6:A2:FC:B7:22:83:37
Certificate issuer:       /CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
Certificate serial:       010D0C9F4328584BA932546BA7A4FF8B6BFC5680
Authority key identifier: C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     46562
IP address blocks:        2604:2880::/32 maxlen: 64
                          2607:f7a0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:54:6b:a7:a4:ff:8b:6b:fc:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5323dac-a15d-4f82-a70b-30e1a4ca1279
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=23dff75d-90af-491d-ac93-1ca1c53e0d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e1:6a:09:04:19:69:3d:ec:f2:12:c9:cd:08:
                    a5:e3:62:cd:f2:08:1c:07:df:28:8f:1e:a1:09:d3:
                    b1:4f:c8:a0:40:6e:da:78:f0:20:4e:07:7a:42:93:
                    ff:d0:a1:a3:bd:2e:37:50:72:f4:9b:f1:c3:c9:0f:
                    47:28:8d:19:5e:d8:07:4f:39:3a:5a:77:a6:8e:24:
                    0b:6e:a6:5d:50:af:1c:b9:85:21:ab:94:f2:47:2a:
                    01:bc:62:dc:e8:2d:88:e5:a0:40:9a:fd:3e:0c:36:
                    41:a1:3f:ac:70:c5:a4:d2:ca:d5:89:32:69:85:b6:
                    cb:0d:e7:d4:f9:87:61:28:d2:5c:eb:c2:24:b0:a4:
                    c6:17:e4:bf:0e:10:ee:e5:2a:3d:72:34:42:04:49:
                    b7:6f:3f:a6:85:cf:50:75:17:8a:78:4c:6b:35:96:
                    ef:f4:2c:84:58:af:a6:2d:e2:1f:26:90:0e:11:16:
                    ca:47:1f:9f:53:8b:34:fb:02:73:d5:fa:13:76:6b:
                    06:0d:b3:b7:f6:83:c4:81:f4:0c:a2:17:c3:de:01:
                    2f:76:ce:d9:9b:3f:d1:eb:df:44:10:cc:73:d4:f5:
                    ad:fc:1e:c4:99:ad:65:08:19:d2:4c:28:fd:fd:68:
                    c5:81:77:dd:4e:d2:a7:6f:c8:71:f4:cc:b2:ad:ca:
                    0e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1A:79:D5:C4:E7:9E:2A:5C:89:47:C0:2B:E6:A2:FC:B7:22:83:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/7251ede9-db40-315e-96d5-145116a009a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279/d5323dac-a15d-4f82-a70b-30e1a4ca1279.crl

            X509v3 Authority Key Identifier:
                keyid:C8:36:37:73:F5:2A:CA:E8:CB:EB:92:19:6E:5C:AF:20:55:F1:1A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5323dac-a15d-4f82-a70b-30e1a4ca1279.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2880::/32
                  2607:f7a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:e5:5c:7e:b8:ca:2d:51:0c:be:d6:ed:8e:e2:1f:36:3a:4e:
         4c:6c:39:65:cd:28:e8:a3:98:14:94:a5:4b:77:42:fe:3d:71:
         ea:d3:66:a6:47:7b:15:6d:ec:e4:3e:d7:08:67:52:ed:43:9d:
         13:fd:7c:08:9f:26:58:b7:7f:ad:e7:03:9b:7d:c0:a0:79:93:
         69:e7:7d:1e:cf:1a:e1:1a:bc:ff:a2:4b:b9:fa:98:1c:c2:dc:
         27:53:e9:f6:ae:24:13:36:67:dd:fc:47:0a:39:2d:53:09:ed:
         9f:b3:73:5f:be:33:7e:b2:a1:9b:17:a2:de:a4:bf:31:51:c1:
         d3:c1:10:dc:cd:5b:4b:dd:83:8f:7e:64:09:17:f0:5a:75:f6:
         af:a3:b5:d3:78:b9:04:80:05:a2:7f:ff:c6:19:d6:65:83:86:
         fa:97:f8:cc:c1:c7:ad:2d:76:05:81:79:2d:6f:7b:5a:22:43:
         b5:52:95:0d:b0:24:6c:44:88:40:9b:82:7c:63:79:02:20:cd:
         87:3f:42:e3:6e:b5:fc:f0:5a:a4:10:08:b4:0a:0c:3f:6d:77:
         d0:a5:d9:b1:d5:1b:9f:45:db:94:8e:c5:fa:e9:9c:4f:b1:8c:
         9b:73:ff:6b:5e:f5:21:15:01:e2:14:28:36:85:69:96:ba:c4:
         c9:1e:a9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 21:26:25 2025 by rpki-client