Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5d151199-3d68-39d0-bfa4-f996a0d268c2.roa
File:                     5d151199-3d68-39d0-bfa4-f996a0d268c2.roa (raw, json)
Hash identifier:          HCc2lOd1ApZ5gYwevjsVIGX/gRKYb/yM0unBNc5y0T4=
Subject key identifier:   3D:2E:9F:83:DC:A4:8B:AD:09:BD:47:84:54:B4:31:2D:A0:8B:5A:D7
Certificate issuer:       /CN=5b1072af-9cbd-4f62-8155-d5c95177bece
Certificate serial:       010D0C9F4328584AC7111DA7E9924F6B1D7F7080
Authority key identifier: 91:50:88:CD:04:0D:5F:38:E5:11:C0:82:96:C8:4D:22:6F:B3:42:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5d151199-3d68-39d0-bfa4-f996a0d268c2.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     29802
IP address blocks:        2605:e240:ff00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5b1072af-9cbd-4f62-8155-d5c95177bece.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5b1072af-9cbd-4f62-8155-d5c95177bece.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:1d:a7:e9:92:4f:6b:1d:7f:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1072af-9cbd-4f62-8155-d5c95177bece
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=00183012-bc1c-426c-8ae6-be3c4e8450fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7a:d9:49:3c:ea:91:c0:e4:65:d3:58:5e:a5:
                    19:f6:c6:81:55:74:ff:56:99:c2:e4:dd:1e:b0:ed:
                    96:9b:47:25:d5:a8:45:84:b5:91:60:07:31:ca:92:
                    c0:44:f6:90:d6:4d:bb:2f:20:01:93:0c:11:16:45:
                    dd:90:dc:e8:08:c2:1d:5b:61:d3:81:e6:8b:ce:e7:
                    81:0b:f2:07:2a:54:2c:94:bb:ad:15:dd:a9:17:df:
                    de:f2:83:31:03:98:99:68:04:45:4f:3c:8e:bd:0d:
                    51:cd:82:bd:dc:95:53:29:72:5a:de:65:5d:8e:60:
                    4c:88:f8:28:bb:f3:f2:60:6e:a3:d9:b6:dc:87:2f:
                    34:f5:8a:a9:9a:55:91:6e:e1:95:f1:a3:19:bf:06:
                    da:c2:fe:c0:52:4f:02:be:59:82:28:ab:9a:1b:74:
                    50:41:bd:39:02:1b:ce:b8:21:81:20:3d:66:ac:31:
                    12:10:b4:24:6e:55:c2:db:d7:4a:e6:cb:13:26:8c:
                    e5:ad:9a:af:23:47:ad:5e:3b:60:b3:5b:9e:f2:7c:
                    75:26:88:1a:f5:f3:97:c3:03:6a:78:9a:a5:52:e7:
                    2c:6c:ca:d4:70:f9:4d:7a:96:29:9b:42:c8:d5:95:
                    ff:3e:e2:d1:46:b9:0e:1d:39:87:57:a8:d9:74:d5:
                    4c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2E:9F:83:DC:A4:8B:AD:09:BD:47:84:54:B4:31:2D:A0:8B:5A:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5d151199-3d68-39d0-bfa4-f996a0d268c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece/5b1072af-9cbd-4f62-8155-d5c95177bece.crl

            X509v3 Authority Key Identifier:
                keyid:91:50:88:CD:04:0D:5F:38:E5:11:C0:82:96:C8:4D:22:6F:B3:42:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b1072af-9cbd-4f62-8155-d5c95177bece.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e240:ff00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:95:5d:8c:72:99:71:6c:d1:ce:22:58:8e:6f:b0:61:35:da:
         d0:fc:69:04:6d:77:8b:45:70:97:6c:20:58:4f:93:56:29:2e:
         c1:80:30:54:17:0c:db:8b:5f:63:a9:36:88:79:af:eb:92:de:
         ef:57:ad:07:be:a7:a6:01:d4:c3:23:4f:78:1b:f9:53:62:78:
         4d:86:5c:22:4d:6e:c3:58:75:51:21:41:2d:21:c7:a4:90:b3:
         88:39:9f:02:f2:bb:3d:e7:12:70:84:e5:15:70:f0:b0:4d:d7:
         1f:02:26:bf:c4:03:be:29:75:05:63:e1:00:d6:19:4d:8e:3d:
         6e:52:2c:63:bb:73:e1:0f:e1:69:2c:97:43:2f:ef:d2:18:db:
         e5:c8:62:12:c3:78:1a:80:0b:3f:6b:ac:46:d2:8a:95:65:5e:
         78:2e:2c:04:72:63:e8:aa:02:d5:50:9f:c4:43:9b:5a:ed:b4:
         eb:c0:4c:85:09:db:0f:5f:12:c1:80:43:83:77:7f:38:bb:3c:
         0b:a7:d0:30:4e:8d:1d:59:f1:72:91:1a:8f:45:be:5f:48:4e:
         00:60:f5:29:3c:e1:1a:ab:0e:98:09:9c:10:56:42:38:d7:99:
         89:71:96:9b:77:0d:1c:05:86:3d:70:49:b1:2b:d9:18:42:25:
         33:ff:18:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:57:12 2025 by rpki-client