Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/96ea45eb-3fab-3bdb-8c8a-1c70a4b29e99.roa
File:                     96ea45eb-3fab-3bdb-8c8a-1c70a4b29e99.roa (raw, json)
Hash identifier:          5UQRFYsAPvB4zILp9OGDn62zKCuZgSoqCvdCT6bU1uU=
Subject key identifier:   FC:3F:EA:91:F4:0E:A7:01:E5:38:D3:81:33:D1:FA:86:5B:DE:18:17
Certificate issuer:       /CN=ea3f9044-c185-4062-8dad-240b32b11348
Certificate serial:       010D0C9F4328584AC016540D6967897A91240E80
Authority key identifier: FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/96ea45eb-3fab-3bdb-8c8a-1c70a4b29e99.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     395661
IP address blocks:        2607:bc40:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:54:0d:69:67:89:7a:91:24:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3f9044-c185-4062-8dad-240b32b11348
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=4534aea2-58dc-4ba8-9d13-aabeb9477e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:54:98:42:42:cb:1b:2e:7c:f3:2f:9c:25:3d:
                    a1:b8:09:d2:01:05:42:1d:16:69:6b:04:db:04:8b:
                    10:73:12:49:fc:6d:13:f3:a4:2b:f5:ed:9b:21:1a:
                    12:0f:6a:a1:5f:af:4f:8a:3c:33:55:f4:e6:a2:c1:
                    de:23:e1:44:73:0a:74:c4:e8:2d:e9:3c:56:18:40:
                    16:a5:e3:5f:d1:c6:7c:81:46:d4:09:c2:b3:67:14:
                    17:a7:a0:84:78:07:58:fa:5c:5b:61:60:c9:6c:84:
                    bc:84:13:72:29:c6:35:27:48:c2:c1:1f:8d:b2:15:
                    0d:ae:a9:95:13:fb:bb:c7:93:ec:ce:cd:61:4c:02:
                    a2:eb:bc:18:12:0e:e6:a6:cd:fa:72:a8:19:af:3c:
                    78:ef:36:79:69:77:0c:43:1f:38:6f:c4:1f:ba:76:
                    7f:8f:2d:c0:ff:24:c3:fa:ee:64:d3:ee:e6:87:b9:
                    3b:3f:b6:1b:62:fd:77:c2:6c:20:2f:e8:5f:cd:9c:
                    00:cb:31:f7:df:6a:69:fb:fb:78:db:ae:55:da:f7:
                    30:6c:fa:14:18:e7:54:92:2d:30:24:6d:8a:6d:5c:
                    bb:e7:08:79:67:31:d0:e1:02:49:94:57:3e:76:9a:
                    1a:69:31:4f:c3:8c:06:6c:57:13:af:43:ea:c6:fc:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3F:EA:91:F4:0E:A7:01:E5:38:D3:81:33:D1:FA:86:5B:DE:18:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/96ea45eb-3fab-3bdb-8c8a-1c70a4b29e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bc40:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:4a:40:1c:ce:4b:d0:06:bf:e0:e6:5f:ed:23:b8:41:62:c6:
         f1:e5:a1:83:90:48:95:4e:d0:2c:53:d7:3a:ac:03:7d:9b:4d:
         3f:2a:cc:26:ec:7d:26:65:e8:a1:47:7c:ea:c1:66:e6:26:8f:
         df:b9:29:af:0a:cd:b2:43:10:bd:98:29:7d:30:b3:f8:06:63:
         d5:99:30:83:42:12:c1:a6:5c:f4:d8:03:9d:c6:1b:09:7b:0b:
         d6:4d:4a:19:55:a5:e7:8d:b4:bb:6a:14:c6:3b:6d:72:e2:55:
         a7:cf:0f:11:25:87:c7:a4:10:10:30:d3:89:5f:af:d8:0b:4d:
         ac:98:01:c0:f6:f5:00:28:f7:e3:29:36:41:3c:91:b7:e3:14:
         fd:dd:7a:e1:cb:cb:71:43:24:73:01:4f:a2:9b:ad:aa:c8:6b:
         2d:97:fe:f0:cf:7d:a7:28:04:79:bd:7e:5c:f4:83:df:32:f9:
         07:7a:47:d0:bb:c6:89:93:1f:ee:0e:5e:e6:63:37:93:bb:8d:
         ad:34:b0:4d:65:5b:e8:8b:5e:0f:b8:cb:26:e4:a0:2b:e7:5d:
         f2:3f:5d:7d:5a:c0:8d:07:cc:eb:a8:cd:49:e1:ca:6e:2f:76:
         1e:63:f7:ae:26:10:a5:6f:0b:0c:08:7e:b7:ad:ed:ce:08:f5:
         df:a0:b9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:25:15 2025 by rpki-client