Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/fdeead2d-3023-34cd-b41b-0f952146b093.roa
File:                     fdeead2d-3023-34cd-b41b-0f952146b093.roa (raw, json)
Hash identifier:          VGd8JzqTvM3FYe6nakACnK1Dv+tHMh6TFk1xLfaRxr8=
Subject key identifier:   07:CE:50:F4:A3:9A:90:37:23:3E:F4:C7:A7:62:D8:76:EB:95:36:F9
Certificate issuer:       /CN=5d613e84-be93-4d7a-a56c-57a378f2c325
Certificate serial:       010D0C9F4328584BB88D2196AA322ABBE9258FA0
Authority key identifier: 83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/fdeead2d-3023-34cd-b41b-0f952146b093.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     23188
IP address blocks:        2605:7d00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:21:96:aa:32:2a:bb:e9:25:8f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d613e84-be93-4d7a-a56c-57a378f2c325
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=b2e7c788-d848-4a3f-8237-5c075c484283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a4:47:ee:f0:90:78:e7:e3:02:d9:6d:80:df:
                    ed:43:ed:95:b9:62:fe:d2:1c:09:a8:7a:4b:c0:b5:
                    c3:70:2e:25:45:7d:8e:d8:85:68:5e:db:70:83:57:
                    2f:ed:9a:94:63:14:d1:4d:bf:d5:61:ed:7f:23:7f:
                    4a:12:8e:2a:65:9a:cd:89:ad:c4:6d:13:d6:bf:5c:
                    be:18:c1:dd:d4:3c:3f:b4:57:39:0a:49:91:0e:22:
                    c8:b6:02:c9:e1:2b:0a:75:02:ae:f8:70:8d:63:8b:
                    07:f1:63:6d:21:3e:94:bf:39:3c:51:2a:73:7a:27:
                    14:a0:a8:fd:e8:03:2e:8f:81:b2:84:c6:d7:c1:1f:
                    b9:35:7a:ad:76:45:65:d3:be:51:bb:6f:35:d3:2b:
                    bb:82:ef:17:e5:b8:ef:22:42:77:b6:8a:dc:6f:4a:
                    63:4d:fd:f7:2b:f7:ca:d4:dc:05:71:0f:47:c2:22:
                    79:5c:b4:ed:f2:e8:86:6e:f8:04:a8:b0:44:24:68:
                    51:9e:40:6f:65:15:9b:65:ad:8c:25:32:6f:17:b3:
                    75:d0:a7:e7:13:a7:0c:6e:32:b9:36:40:be:c6:7c:
                    69:a0:c4:0b:ee:5d:6e:6b:ac:26:6b:a0:73:22:f4:
                    1e:f1:5f:af:64:c7:76:ad:d7:d0:27:d4:3a:a3:02:
                    d2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CE:50:F4:A3:9A:90:37:23:3E:F4:C7:A7:62:D8:76:EB:95:36:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/fdeead2d-3023-34cd-b41b-0f952146b093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325/5d613e84-be93-4d7a-a56c-57a378f2c325.crl

            X509v3 Authority Key Identifier:
                keyid:83:D9:7E:E5:89:0D:94:72:A3:71:AF:6B:D0:14:D0:CC:74:D3:1D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5d613e84-be93-4d7a-a56c-57a378f2c325.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7d00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:35:9f:92:de:80:f4:0c:eb:3f:39:21:c1:9b:c7:9a:fb:6e:
         01:ca:d4:58:75:cf:4d:de:51:fd:03:57:0c:fb:cf:ca:0b:1a:
         c4:95:c3:54:02:6c:4b:f1:30:bb:71:cb:67:d7:9b:92:a5:0b:
         a9:51:2b:e4:34:f7:24:a2:3c:24:53:65:9d:98:f8:e7:96:54:
         35:38:ad:fc:2c:19:3a:71:a5:0d:33:7d:a6:1c:27:29:d0:82:
         e3:36:ba:08:d8:a6:b0:0e:02:24:b4:64:13:19:ff:a4:a4:9b:
         a6:f3:fb:00:8e:ce:d9:70:ad:4c:af:c0:23:11:12:e5:d8:eb:
         1c:4c:4e:83:57:2c:70:5f:9a:4c:e2:81:31:ef:f3:b4:a7:e4:
         86:db:bb:27:1b:fc:b3:44:26:ab:f4:2d:b9:47:4b:36:0f:45:
         be:26:52:8d:9c:97:11:1d:fb:46:58:04:d6:ca:4c:9a:c4:32:
         e3:66:18:96:3c:5d:0c:bf:bf:4b:da:b8:75:ca:c9:49:53:00:
         87:6f:da:ac:86:4f:b1:22:bb:35:d5:c0:c5:47:99:c2:09:44:
         ff:c1:3a:60:a7:79:06:68:13:f9:7e:21:ca:12:ce:1d:25:05:
         4e:c8:76:2a:eb:71:f3:bf:58:e3:9b:f6:65:40:db:15:29:0d:
         de:dc:12:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:02:57 2025 by rpki-client