Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/13161fff-7fe5-3413-a997-8c16da025881.roa
File:                     13161fff-7fe5-3413-a997-8c16da025881.roa (raw, json)
Hash identifier:          FvFyqdvRkN+8eGhde0kuYjQ4HNWvQJ4+DXLMVnORIxs=
Subject key identifier:   67:B9:D3:B1:E0:4F:24:42:8F:67:A4:5F:CE:EE:5C:E8:F0:83:53:69
Certificate issuer:       /CN=0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb
Certificate serial:       010D0C9F4328584BA667C9D3F51CD4D884314F80
Authority key identifier: A8:15:F3:CC:F9:79:46:E4:70:33:A1:8E:A1:22:A4:F3:D9:DD:03:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/13161fff-7fe5-3413-a997-8c16da025881.roa
Signing time:             Sun 26 Oct 2025 13:00:38 +0000
ROA not before:           Sun 26 Oct 2025 13:00:38 +0000
ROA not after:            Sat 24 Jan 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        2607:fdc8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a6:67:c9:d3:f5:1c:d4:d8:84:31:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb
        Validity
            Not Before: Oct 26 13:00:38 2025 GMT
            Not After : Jan 24 14:00:38 2026 GMT
        Subject: CN=092413b9-89c2-4c58-911e-5d30bd871b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:a9:17:9c:28:e2:eb:74:dd:de:2a:67:19:
                    5e:b6:a3:5c:f0:ab:69:19:48:1e:48:42:c0:3a:a9:
                    f6:e7:29:51:0f:bf:bb:1a:77:84:b4:99:ee:18:47:
                    17:20:b9:b9:b0:78:c1:46:b7:d1:ba:54:e1:a7:07:
                    aa:ff:47:6c:d8:bc:b3:c1:98:71:2a:4a:35:c7:2c:
                    a2:76:5a:2e:9e:76:25:2c:90:37:4f:c2:d5:ea:5b:
                    86:17:90:c2:0d:84:f8:76:82:66:87:57:69:af:2e:
                    eb:b0:4f:00:d1:b0:e0:80:72:c8:9f:85:1c:2c:5f:
                    a8:c6:82:4c:a6:d5:27:05:76:52:82:0b:05:9f:bb:
                    ba:40:59:95:5c:27:3e:39:48:da:5c:ad:1f:03:c9:
                    3d:64:94:6c:76:19:af:a4:f9:ca:85:73:f7:ef:3e:
                    21:6c:14:4b:af:e6:0b:be:cd:4c:d9:17:ec:b0:cf:
                    29:72:a0:a6:08:ab:5d:af:1c:81:04:51:f8:93:ca:
                    44:15:d8:b4:bb:0e:09:72:96:23:f5:e4:b9:14:ef:
                    00:d9:8d:23:1f:cd:42:10:12:af:e4:0e:9b:5b:68:
                    04:eb:0d:04:18:e0:9b:0d:c6:20:96:7f:ab:34:7a:
                    31:11:1d:bd:36:e5:79:95:b2:37:b3:84:3d:01:2e:
                    d6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B9:D3:B1:E0:4F:24:42:8F:67:A4:5F:CE:EE:5C:E8:F0:83:53:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/13161fff-7fe5-3413-a997-8c16da025881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.crl

            X509v3 Authority Key Identifier:
                keyid:A8:15:F3:CC:F9:79:46:E4:70:33:A1:8E:A1:22:A4:F3:D9:DD:03:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fdc8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:27:b0:af:cd:8f:1a:a0:98:ea:66:c9:c6:50:60:d5:3e:9a:
         02:cb:60:18:ae:56:f9:16:b7:33:13:99:41:8b:a7:25:61:71:
         07:61:67:ea:af:8b:bf:ab:7f:ab:bc:71:c5:c2:d5:72:40:41:
         3d:9c:8a:3c:b6:29:49:ef:d7:fa:24:38:f4:ec:16:bf:89:78:
         ac:a7:7d:6c:07:4a:ee:b8:d3:2c:3b:73:ca:ee:10:ac:d8:8f:
         30:c8:d8:57:35:ff:0b:32:33:67:23:1a:9e:7c:a1:77:a2:f8:
         4b:a5:97:bf:d4:1d:fc:31:c4:64:77:1c:2a:bb:1b:cc:1a:ef:
         ea:88:67:0b:eb:dc:a9:93:b4:2c:6f:3c:2f:76:67:82:e6:fa:
         4a:3b:ef:f4:95:bb:29:7f:da:49:c4:f4:1c:fd:b9:4b:1c:f5:
         69:c3:8b:ed:e7:f4:b9:fd:90:82:8b:dc:db:ab:45:58:80:56:
         87:83:37:36:e3:3e:51:c5:00:0a:d8:ba:38:8c:f0:cc:47:86:
         57:7a:a8:a3:0b:93:93:a7:82:2c:a5:0e:68:b6:e7:f0:61:8a:
         ff:14:f3:a9:df:1f:8b:21:0d:20:89:aa:a3:0a:51:bf:d9:be:
         6d:9e:69:77:5a:77:8b:b5:df:a1:12:ac:47:70:2d:5a:ce:f6:
         12:2d:b8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:51:51 2025 by rpki-client