Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84/0e6686a8-6014-3f02-a193-887bace1fe7e.roa
File:                     0e6686a8-6014-3f02-a193-887bace1fe7e.roa (raw, json)
Hash identifier:          Z8bZMnu+Ty3QgALthJYbxYjDmV8Q5HDuZDqjQ96+0aY=
Subject key identifier:   52:52:EB:7E:4C:C4:89:A4:50:A8:E5:E3:77:EA:7B:0D:CD:13:52:C1
Certificate issuer:       /CN=f51e2479-4af9-4d7f-84b9-1821268b9a84
Certificate serial:       010D0C9F4328584B6631F7377F8E3712FA69F440
Authority key identifier: 4C:AD:46:96:CB:86:10:75:0E:83:D5:5C:8E:64:45:56:74:3B:3D:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84/0e6686a8-6014-3f02-a193-887bace1fe7e.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     31758
IP address blocks:        2607:7500::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84/f51e2479-4af9-4d7f-84b9-1821268b9a84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84/f51e2479-4af9-4d7f-84b9-1821268b9a84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:f7:37:7f:8e:37:12:fa:69:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f51e2479-4af9-4d7f-84b9-1821268b9a84
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=10f7eb0d-5050-494f-bae5-0c0754ab990b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9a:da:8b:7f:0b:93:d8:95:1b:7d:a1:71:92:
                    80:fa:47:f8:59:2b:51:91:16:0c:32:63:2c:ed:90:
                    98:03:fa:ff:a3:e7:df:12:90:f3:53:19:24:b9:72:
                    d4:02:ed:08:d9:18:fb:56:23:3d:fb:8b:4d:b9:33:
                    22:1d:d4:df:53:fc:e9:e6:e0:8f:4c:c5:3b:46:9a:
                    02:3b:a5:38:f5:fc:7a:8e:dc:49:65:a2:d0:36:84:
                    8a:60:3b:96:fe:7d:5a:f1:d4:4a:ce:c5:36:67:dc:
                    89:13:94:5c:ed:5e:80:18:67:a8:16:90:c1:50:a2:
                    b6:dc:49:3f:2e:f0:90:0e:cf:85:56:9f:53:37:d2:
                    6b:ab:42:d9:c6:9f:a1:43:81:d5:64:b1:15:91:f8:
                    32:e8:db:b8:70:dd:13:52:ca:57:69:a7:d9:57:94:
                    c5:df:fa:b5:b0:a3:cd:1e:95:48:e3:09:30:00:a7:
                    d3:35:7e:2b:ca:d7:1c:34:cc:74:00:fc:ed:12:e8:
                    75:f8:af:7a:c9:87:5f:6b:27:25:16:39:f3:61:4c:
                    ab:2e:85:d9:39:cf:84:e6:d2:e3:52:28:7a:79:34:
                    79:bf:4f:aa:cf:53:65:b0:2c:39:b1:bf:70:cf:c2:
                    fb:e6:8f:e2:ae:81:6b:2c:1e:da:80:56:70:b9:2e:
                    ff:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:52:EB:7E:4C:C4:89:A4:50:A8:E5:E3:77:EA:7B:0D:CD:13:52:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84/0e6686a8-6014-3f02-a193-887bace1fe7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84/f51e2479-4af9-4d7f-84b9-1821268b9a84.crl

            X509v3 Authority Key Identifier:
                keyid:4C:AD:46:96:CB:86:10:75:0E:83:D5:5C:8E:64:45:56:74:3B:3D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f51e2479-4af9-4d7f-84b9-1821268b9a84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7500::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9e:dd:90:4d:26:08:e4:c2:4b:5e:50:4b:0d:7f:34:06:f0:
         aa:99:61:5f:5e:11:8a:d7:0b:7a:4c:31:0f:37:ae:55:ac:49:
         13:04:8c:08:42:7c:3a:5d:f7:67:9c:45:70:ee:6a:be:bd:4a:
         58:76:f4:9b:dd:5d:45:9c:d9:cc:4d:ae:a9:b5:b4:d3:08:64:
         47:90:0f:1e:b2:cd:10:f8:63:3d:58:52:fa:5b:2d:86:80:ff:
         83:8e:dd:ef:8b:a0:65:a2:c3:5b:31:77:9a:10:e4:ef:cf:53:
         2f:df:af:64:01:3b:a9:cf:0d:52:e0:cc:b1:90:84:42:21:9a:
         45:e7:92:d7:a7:e3:31:91:e5:5f:e3:88:19:b6:81:70:df:61:
         9f:41:91:b7:1b:06:0b:0a:55:f1:70:9c:56:e0:28:9a:6d:d9:
         a5:70:a8:30:5b:b3:87:0d:ee:e9:d7:9b:ce:c6:c5:37:66:09:
         be:50:7b:23:74:56:cf:34:8e:36:e9:60:66:bc:b6:e8:64:17:
         9c:8b:df:11:91:d0:63:99:df:eb:f3:22:4b:ed:89:08:d4:8f:
         cd:41:bc:17:cb:61:21:95:79:42:a7:22:78:7f:67:40:02:f2:
         34:58:4c:38:db:ce:dd:45:82:39:b1:87:7c:34:b3:57:b8:e4:
         84:e1:62:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:11 2025 by rpki-client