Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/5447fca3-a5a8-3b61-90b0-e825d8612614.roa
File:                     5447fca3-a5a8-3b61-90b0-e825d8612614.roa (raw, json)
Hash identifier:          4uD6DEMyojgyDJ0CwMVHbx4rzHttRgr3Jqw8dm23uLY=
Subject key identifier:   A9:6C:0F:6C:BA:F5:04:34:83:00:D8:41:65:21:FF:59:C2:33:B6:F6
Certificate issuer:       /CN=ab48051f-b089-4872-acc6-a73a442e9736
Certificate serial:       010D0C9F4328584BC10ADDC4263810926391D440
Authority key identifier: 2B:54:20:F2:AF:8F:AF:36:32:D0:F6:01:84:AB:37:C8:43:29:28:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/5447fca3-a5a8-3b61-90b0-e825d8612614.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     401008
IP address blocks:        2607:ad40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/ab48051f-b089-4872-acc6-a73a442e9736.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/ab48051f-b089-4872-acc6-a73a442e9736.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0a:dd:c4:26:38:10:92:63:91:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab48051f-b089-4872-acc6-a73a442e9736
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=c3b29c3c-06bb-49ce-888e-8e5900e9f246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:fe:b5:2a:ae:ef:a4:91:f0:7f:d0:3c:04:
                    50:60:13:6a:02:5d:f5:2a:70:83:79:41:ed:fd:fd:
                    2f:a2:9c:41:bc:4d:f6:2d:bb:ae:2b:d2:4e:0a:ff:
                    f2:30:06:a3:62:fb:85:04:cd:2a:70:54:1c:f0:28:
                    39:0b:ac:b3:0c:0e:0b:af:9c:e8:15:e8:9f:de:1a:
                    34:ed:b8:64:f6:d5:d8:74:b6:c9:7c:d7:4f:c0:82:
                    7e:5f:fa:f6:ad:c5:ef:cd:f8:0f:24:26:6f:91:df:
                    33:d2:e2:36:29:a6:14:0f:16:4f:88:80:3d:f4:fb:
                    49:7a:c6:72:0d:d7:e9:5e:d6:6c:d8:5f:5c:d6:84:
                    2b:cd:3b:4c:a6:57:48:bd:99:87:ac:e5:b1:cd:96:
                    cc:64:c2:b4:f1:c1:90:e2:81:ec:05:1e:98:78:06:
                    10:3d:97:63:9f:a6:b9:21:fc:c5:b3:8e:8e:4c:b8:
                    92:49:9d:cb:c9:4c:a9:3c:f0:21:51:28:6e:40:24:
                    e3:be:f0:62:89:30:dd:e3:cc:8e:d3:63:67:2d:9b:
                    60:3c:60:bd:95:e2:a1:3f:bd:81:d5:6e:63:28:37:
                    9b:d9:fb:ed:25:4f:91:2d:f1:50:3d:dd:1b:13:c3:
                    20:28:ff:69:f0:61:89:29:07:02:60:4e:00:39:74:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6C:0F:6C:BA:F5:04:34:83:00:D8:41:65:21:FF:59:C2:33:B6:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/5447fca3-a5a8-3b61-90b0-e825d8612614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/ab48051f-b089-4872-acc6-a73a442e9736.crl

            X509v3 Authority Key Identifier:
                keyid:2B:54:20:F2:AF:8F:AF:36:32:D0:F6:01:84:AB:37:C8:43:29:28:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ad40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:8e:03:4c:45:4e:18:00:62:5f:32:b1:d1:64:5f:7f:7a:cb:
         9a:99:a5:69:92:c2:14:13:00:bf:92:8f:89:0f:34:b6:83:21:
         96:84:b5:3a:f4:4d:2e:8d:31:9a:57:d7:a5:78:2b:a2:c5:ea:
         7f:56:9d:1b:88:97:eb:ff:7d:3d:f6:e5:36:f4:24:9d:7e:5e:
         7a:34:f3:f1:32:ab:0e:67:ff:11:c7:d2:c6:3c:6b:98:c8:7b:
         da:2e:48:ac:ef:b2:3b:c3:43:d8:1e:4a:5c:d9:26:1d:0f:39:
         3c:a0:f5:52:fc:16:77:ee:aa:6b:c0:4a:f8:58:4e:0f:4a:fa:
         54:22:5d:56:70:e8:9d:5f:29:3c:3a:23:b4:e4:e7:e6:44:62:
         0d:2f:99:07:a8:0f:2a:61:f5:5f:ca:5a:4b:ec:ae:10:b2:07:
         e4:82:ec:db:45:cd:6d:f2:42:df:db:f2:37:f3:dc:4f:1d:f3:
         54:3d:ca:56:59:a6:60:37:6c:1d:7d:97:78:1f:2a:07:ae:68:
         97:f3:80:9b:e4:9e:1c:30:fe:89:80:d4:63:2f:7a:98:f6:df:
         a1:a6:4b:03:42:78:df:1e:48:f3:3d:1d:ae:ac:52:9f:c8:df:
         18:b8:4d:42:9f:35:fb:44:b7:ac:0c:c9:27:08:b9:4d:7c:60:
         78:53:e0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:51:31 2025 by rpki-client