Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/5d90001b-d20e-331c-8bd3-6c3305994bbd.roa
File:                     5d90001b-d20e-331c-8bd3-6c3305994bbd.roa (raw, json)
Hash identifier:          sJit+QfXFq74hywrUsWQvVtjjhSKL+eZjGTKraqt3Jc=
Subject key identifier:   FC:13:CD:B5:11:3A:5C:17:D2:6E:E1:9B:3A:66:CA:2F:22:19:F6:AF
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F4328584BA39D25AD16089E78017BA300
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/5d90001b-d20e-331c-8bd3-6c3305994bbd.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     53488
IP address blocks:        2607:ce00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:25:ad:16:08:9e:78:01:7b:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=0f11cd4a-0fe3-4077-a409-3bb74bb5f1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:ea:0e:76:29:53:53:2a:73:dd:bf:3d:b9:
                    f7:ba:83:5c:43:0d:63:2e:08:4f:ac:3f:13:e3:81:
                    e9:81:15:fc:9e:65:da:58:ef:9d:4a:d0:d1:3d:fd:
                    56:48:4a:fa:c9:fb:42:d5:76:00:b1:6b:b2:b8:d6:
                    98:ef:1f:fe:db:48:79:c2:2a:93:37:7a:3e:93:92:
                    55:f7:2e:59:9a:c7:3a:c5:7e:9a:49:e5:24:3e:75:
                    30:8f:5a:01:ea:51:e1:ab:51:91:91:0a:81:38:2c:
                    1f:4c:6a:76:d8:d9:fa:c2:d6:dd:56:a5:3e:32:fd:
                    1e:06:d3:8e:05:b1:06:18:0f:fa:82:b3:ed:bc:85:
                    4c:f0:37:79:4a:6b:3d:54:e7:73:e9:1a:36:09:15:
                    4e:82:ea:b0:81:c3:c4:5e:c0:4f:09:34:6f:83:67:
                    22:a7:42:61:71:af:c0:aa:8b:d6:0a:50:38:13:78:
                    28:c8:68:5d:3c:db:4c:50:18:76:69:3c:c0:35:07:
                    4d:b3:15:12:09:da:09:f7:31:6f:11:5c:c9:e0:8f:
                    c1:84:eb:e2:3a:ab:10:a8:1c:69:10:7c:a1:01:fb:
                    c2:76:75:12:13:1d:7f:f3:93:c9:82:53:c2:e3:6c:
                    be:95:b1:f1:36:d0:49:3c:c7:26:01:fb:07:d2:b9:
                    77:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:13:CD:B5:11:3A:5C:17:D2:6E:E1:9B:3A:66:CA:2F:22:19:F6:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/5d90001b-d20e-331c-8bd3-6c3305994bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ce00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:18:29:4b:c5:83:9c:a8:81:89:51:e1:a1:4f:a7:7a:16:57:
         41:ca:08:b0:8f:cc:09:11:fe:a1:ed:d0:09:f6:55:90:e6:ed:
         39:30:3a:48:2d:9f:a6:6e:5e:2b:b8:0a:a9:2f:34:d2:a9:ef:
         b6:be:b6:7c:e6:d2:c9:dc:c5:1f:f8:4d:a6:29:4b:36:04:00:
         55:85:c6:7d:9c:0b:40:3b:3e:cd:21:4b:b6:d4:ad:ac:ee:86:
         2b:b5:b7:16:79:7c:4d:00:f8:18:49:f4:c1:01:a0:e3:9d:3c:
         d6:93:12:31:a0:d1:f6:9b:d6:a5:f9:b9:94:1e:18:8c:f7:66:
         fe:bb:47:f0:32:ea:9b:26:c0:61:37:af:2f:dc:7c:31:51:d4:
         2f:f5:c0:6e:20:cc:bc:9a:b3:7a:fb:8c:1b:bd:7c:1a:9d:a5:
         44:61:ef:d6:40:ad:b6:9b:94:4f:b4:10:4a:42:f1:d5:fa:9a:
         4e:8e:47:80:b4:04:72:a1:89:41:ad:ae:cc:ff:54:77:a6:34:
         72:72:c3:00:ea:7d:2e:61:9e:17:97:b5:a7:70:50:07:77:43:
         ce:6c:ef:44:6a:2e:5c:e3:1e:24:82:9b:47:1a:21:e7:77:f9:
         99:7a:26:71:f1:09:76:e1:35:7e:cc:07:28:7f:24:83:90:57:
         bd:d1:36:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:50:35 2025 by rpki-client