Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/8963bea2-57aa-3726-b264-cf5c3ed96a4f.roa
File:                     8963bea2-57aa-3726-b264-cf5c3ed96a4f.roa (raw, json)
Hash identifier:          NcnBC+5bxb7mphRSHCzi9733/C0Dr4iZTIT8NlZ4dKM=
Subject key identifier:   BA:AC:C2:28:C4:45:87:E4:EC:F1:9B:39:D7:23:17:38:86:5E:9B:45
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584AAB26570D313B9F73F1F0D080
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/8963bea2-57aa-3726-b264-cf5c3ed96a4f.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     4181
IP address blocks:        2604:ad00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:57:0d:31:3b:9f:73:f1:f0:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=a2ff9116-638d-49b3-b08e-5b34c2fe071c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:54:45:d1:4a:48:54:e7:31:b6:8e:5f:53:00:
                    e8:9e:b1:df:e9:52:0a:e9:c5:fc:7c:8a:12:01:0a:
                    5c:db:81:b5:05:ac:a9:e4:e4:65:b5:65:16:3c:b4:
                    d7:27:21:37:4c:c5:62:78:d0:51:9f:fd:22:93:fb:
                    70:89:36:37:5f:35:a5:99:39:20:f8:5a:04:e1:b8:
                    80:ff:67:20:c2:70:76:cb:44:d5:5d:0a:bf:d2:68:
                    e3:3a:ac:44:b9:7b:84:28:6f:c7:14:26:0b:ea:3e:
                    e7:7a:92:1f:52:75:6d:09:3b:5e:dc:6b:ba:a5:73:
                    33:3b:27:e9:99:0b:1b:49:0b:bb:d9:af:b4:51:51:
                    40:75:a6:27:aa:50:03:7d:76:fc:61:fb:18:23:79:
                    fd:1c:17:90:0e:22:75:b7:d1:bc:23:37:a8:08:2a:
                    8d:8d:9b:cf:d9:21:22:5d:f8:7f:44:9e:7a:0e:a0:
                    c2:1c:7b:45:8e:27:1d:f1:85:5e:96:c6:22:ce:82:
                    9b:e6:e9:b3:16:d5:87:be:fa:4f:17:2d:e2:45:eb:
                    ef:d5:8f:5f:68:c9:c2:07:ce:2a:fc:32:aa:85:e2:
                    31:7d:8a:38:21:c7:c7:65:a7:e8:da:0d:07:dd:12:
                    5d:ab:b9:56:df:87:f8:0c:49:e2:5b:45:57:8a:c7:
                    13:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AC:C2:28:C4:45:87:E4:EC:F1:9B:39:D7:23:17:38:86:5E:9B:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/8963bea2-57aa-3726-b264-cf5c3ed96a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ad00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:cd:c9:1d:fa:29:d9:f7:85:03:c3:2f:5a:74:7e:bb:b2:76:
         ac:bb:2b:c7:36:7e:18:fa:5f:9f:9b:d0:96:17:32:97:fd:4f:
         5e:7e:15:c4:56:64:d7:60:31:72:95:28:48:00:48:47:bb:ba:
         7b:4c:13:87:b6:4d:95:21:7d:d7:ff:d0:ca:3e:d9:19:e3:d0:
         31:cf:55:70:44:bd:93:59:6d:09:bd:3e:66:fe:41:9c:f1:b6:
         4a:c2:37:12:c7:45:d1:14:92:33:a8:ee:9b:b8:b5:18:c7:84:
         23:06:c3:89:38:a3:8e:32:7f:bd:f1:80:50:5b:cc:a8:58:19:
         71:72:db:f1:83:af:40:f6:89:d1:2c:68:4c:96:66:e8:0c:ef:
         71:04:34:fc:91:57:41:fd:27:7d:2d:ae:95:09:73:a3:08:94:
         63:da:a2:91:47:ce:83:5c:c7:75:ec:69:3a:24:3a:ff:48:96:
         c5:d4:52:c6:4e:d2:41:4e:8a:01:ca:10:9b:f7:62:48:04:ff:
         65:40:38:43:1d:85:8d:11:8c:46:db:a9:56:cc:3e:10:8e:8e:
         cf:64:59:41:23:1d:f2:92:af:5e:58:a4:71:64:cf:d6:7e:83:
         be:b8:17:c2:8d:17:b8:63:28:e6:59:a3:15:c2:bf:8e:a3:c9:
         9c:b0:5e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:30:59 2025 by rpki-client