Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/28d0aa5b-9621-3eac-b529-dc66454f737a.roa
File:                     28d0aa5b-9621-3eac-b529-dc66454f737a.roa (raw, json)
Hash identifier:          +zIHbsZmJ3od3Gj72V0gwdtNVZWIJbm8rxsAFSTZ6t0=
Subject key identifier:   3B:16:C9:B1:67:8A:E4:B6:FE:27:22:64:DB:2A:44:02:17:F4:BD:49
Certificate issuer:       /CN=0a609de0-040f-42a5-990f-417b65a086a6
Certificate serial:       010D0C9F4328584B9E07B731D4AB733672046F34
Authority key identifier: F5:71:0D:F6:6C:9D:91:FA:24:17:5E:04:54:1C:35:71:46:05:59:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/28d0aa5b-9621-3eac-b529-dc66454f737a.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     20347
IP address blocks:        2605:7540::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:b7:31:d4:ab:73:36:72:04:6f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a609de0-040f-42a5-990f-417b65a086a6
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=f5c2e9ae-1fd3-42d1-b8c8-80c3e69ac768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:66:bb:d3:5c:d2:73:ab:24:c4:18:79:eb:
                    ef:28:99:20:5b:78:11:95:55:1d:5c:ed:d0:d5:dd:
                    01:82:31:83:94:b4:6f:78:d9:51:01:ab:af:c4:ff:
                    b8:f4:7d:fa:75:f3:f2:05:0c:10:f0:82:d9:42:1a:
                    a4:ef:08:64:e5:67:3f:8b:0d:2f:9e:fb:2a:ef:8c:
                    31:4e:b9:64:a3:f0:34:51:4c:25:a2:a9:3f:cc:78:
                    0c:37:b7:75:82:ff:aa:e9:45:ee:c0:74:87:07:53:
                    3f:e7:19:52:ec:dc:e7:f9:26:32:d2:ec:4e:20:5f:
                    25:9d:40:c8:17:83:5d:5e:d2:2e:d3:6c:d1:85:2c:
                    9b:90:c5:bf:97:bb:9d:fe:2a:83:98:76:b1:56:5d:
                    29:cb:ee:d8:fc:51:f6:cf:f9:15:c0:52:57:72:df:
                    00:5d:c5:c6:a0:b5:7d:79:cd:eb:6d:5d:52:d6:91:
                    be:79:a4:27:10:74:40:72:fa:c8:12:c6:7a:f7:dd:
                    6d:f6:49:a7:55:3f:73:07:21:c8:2c:c0:b9:63:7c:
                    5a:a9:e2:79:13:e1:b1:06:39:59:ef:c1:a0:ca:ae:
                    73:70:31:94:a8:4b:6a:bb:ba:8c:01:58:a4:9b:50:
                    6d:98:99:d9:e7:30:51:d9:e6:dd:2a:8b:72:e4:f0:
                    be:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:16:C9:B1:67:8A:E4:B6:FE:27:22:64:DB:2A:44:02:17:F4:BD:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/28d0aa5b-9621-3eac-b529-dc66454f737a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6/0a609de0-040f-42a5-990f-417b65a086a6.crl

            X509v3 Authority Key Identifier:
                keyid:F5:71:0D:F6:6C:9D:91:FA:24:17:5E:04:54:1C:35:71:46:05:59:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a609de0-040f-42a5-990f-417b65a086a6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ad:98:a0:4c:38:66:a6:a4:5d:a7:e0:ad:d9:bf:f6:86:61:
         70:25:a1:1f:7b:d7:1e:7b:76:5d:58:e2:a8:7a:7c:8f:5b:34:
         d8:e5:59:9e:d7:14:4f:11:43:5e:29:aa:80:14:0f:56:24:c0:
         32:95:6f:95:dd:c6:5a:f4:84:3a:e6:6c:5e:da:9f:33:27:33:
         a8:e7:09:f5:66:79:cf:cc:de:3a:c7:77:97:c2:e3:39:87:4a:
         68:6f:f0:4e:4f:35:55:29:7d:ef:1d:3c:95:99:40:3c:5e:d1:
         04:48:45:f3:c0:8b:23:6f:bd:65:3c:66:12:f5:e7:75:75:2b:
         06:cb:7c:03:54:19:e9:fc:bd:e7:2a:e7:02:2e:b7:0a:ba:17:
         6c:3b:3f:01:37:db:e8:cb:18:e2:fe:ae:99:13:5a:0a:33:c2:
         dc:ee:e2:13:04:a2:3d:88:4e:d0:e0:85:82:5f:83:f9:ef:68:
         17:8e:07:bf:06:65:ee:7f:d5:a5:f8:ba:eb:e4:31:30:5f:e7:
         42:6e:7c:be:5c:fc:2c:c6:6b:7f:d2:8e:35:e5:72:89:30:97:
         eb:be:f3:41:03:ae:3f:3f:f6:af:4f:5c:6a:df:f7:d2:39:5b:
         33:14:d5:42:ef:89:a5:6a:fe:03:8f:9e:40:a9:e0:50:03:fb:
         b1:42:b9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:17:24 2025 by rpki-client