Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/04e98726-cb6c-3fc0-8257-de52674690ff.roa
File:                     04e98726-cb6c-3fc0-8257-de52674690ff.roa (raw, json)
Hash identifier:          lyLptPsHKiSjl59ioBzpfw5hFeL3dLr8IYNf29EBnlw=
Subject key identifier:   96:ED:5A:DD:34:C1:ED:2C:EE:AE:A7:31:96:2C:18:06:6D:44:B3:B6
Certificate issuer:       /CN=f0c5c989-838a-4504-9ec3-d2a149457243
Certificate serial:       010D0C9F4328584BAEC7B9115CBF8B9E18E18880
Authority key identifier: AB:26:F7:63:55:B3:02:0B:3B:78:5D:A4:CA:BC:A3:AD:5A:00:19:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/04e98726-cb6c-3fc0-8257-de52674690ff.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     0
IP address blocks:        2604:5e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/f0c5c989-838a-4504-9ec3-d2a149457243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/f0c5c989-838a-4504-9ec3-d2a149457243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:b9:11:5c:bf:8b:9e:18:e1:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c5c989-838a-4504-9ec3-d2a149457243
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=eb029224-4f7f-4f82-b504-aabe56289032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:37:c3:e6:ea:67:c6:9c:18:80:35:ba:f8:
                    25:f5:1e:45:46:7d:e4:37:d0:1b:50:29:52:c9:d7:
                    1f:27:14:c3:6f:24:30:be:76:a8:c5:1b:f3:28:db:
                    bf:8a:1d:b7:3b:3b:e2:be:41:81:1b:86:9b:6d:cd:
                    f4:f5:2d:df:5b:3f:05:e3:c7:21:ba:13:71:86:bd:
                    d2:0f:c1:3d:aa:cc:9b:21:86:00:ab:44:1d:d7:22:
                    7b:29:34:c4:e3:ac:b1:a0:e3:d7:31:f0:a5:15:d7:
                    3d:d1:e2:31:c2:98:9e:16:2f:81:2b:da:47:cf:cc:
                    f8:fb:9a:df:68:07:76:7e:d9:32:f6:78:b9:bd:b0:
                    ee:41:ba:3c:f8:8d:ba:c2:a5:2f:f3:20:9e:26:7e:
                    c2:83:78:28:e9:1c:98:1b:39:d5:3e:2f:1e:fd:aa:
                    a7:f9:b4:3e:a8:78:92:c2:26:02:49:83:a2:20:e3:
                    82:9c:ba:c5:92:53:c1:62:a8:51:4a:6a:75:7b:15:
                    f1:13:9e:1f:4d:97:3b:16:7d:46:83:86:33:85:c6:
                    f8:c5:84:e8:33:b6:10:74:8f:1b:19:c8:4c:0b:39:
                    05:2a:05:31:35:9e:95:b6:14:ec:0e:7c:a6:b2:a8:
                    7c:8b:5d:f5:9d:40:7a:52:6a:c0:56:de:73:49:56:
                    8d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:ED:5A:DD:34:C1:ED:2C:EE:AE:A7:31:96:2C:18:06:6D:44:B3:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/04e98726-cb6c-3fc0-8257-de52674690ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243/f0c5c989-838a-4504-9ec3-d2a149457243.crl

            X509v3 Authority Key Identifier:
                keyid:AB:26:F7:63:55:B3:02:0B:3B:78:5D:A4:CA:BC:A3:AD:5A:00:19:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0c5c989-838a-4504-9ec3-d2a149457243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5e0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:f1:f4:b8:63:b1:64:77:f4:de:ad:5b:9c:eb:a7:a6:b9:29:
         15:aa:d8:11:09:b4:03:78:de:02:49:40:1d:47:cd:c4:06:49:
         fd:54:54:d9:be:65:76:7a:69:e1:a5:e2:e2:03:b3:a6:d4:5b:
         63:bb:b4:cd:90:d6:c8:1d:09:7b:1a:18:a4:26:ce:7a:e9:44:
         b4:14:0c:69:eb:12:57:8b:a4:df:1e:98:92:63:70:b0:4c:64:
         85:72:e3:71:d2:f7:e1:c7:a8:91:5f:45:02:5a:bd:0d:ae:be:
         3f:82:15:1f:f1:21:33:9c:0f:0b:52:81:8a:35:3f:93:9f:36:
         54:9f:b8:50:38:68:30:a5:2f:9c:f4:ce:1c:7f:0a:10:c1:12:
         6a:2e:53:cc:f1:43:d3:6c:2f:ed:4a:6e:15:c1:0d:d9:65:f9:
         e7:da:92:ef:d9:07:c4:5d:2a:ff:63:93:84:85:3c:af:7e:7e:
         0e:01:33:af:6d:c8:86:2b:c8:67:bc:96:6f:e7:69:31:0d:98:
         81:86:06:4a:50:a4:ba:ee:34:f5:e4:d3:81:e3:1c:c7:f9:b5:
         d2:4f:15:e1:b0:80:6d:22:53:8a:ce:c1:64:4d:fe:7d:db:3d:
         92:49:65:3d:c6:9a:6d:e9:a0:89:a6:8a:4c:bf:27:d8:4c:12:
         36:6a:15:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:53:54 2025 by rpki-client