Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/5c317d03-88bf-3bf2-8dac-704c2a078ebc.roa
File:                     5c317d03-88bf-3bf2-8dac-704c2a078ebc.roa (raw, json)
Hash identifier:          8WYXePLhlOh3w1jBvK6yJRBeHX94UgQoTVsPciI3TN4=
Subject key identifier:   04:DC:65:E3:0B:E4:50:43:E1:19:3F:5A:24:77:8F:AB:FE:61:EB:72
Certificate issuer:       /CN=08b22b46-d56e-4ead-a5fc-58eb07123cf3
Certificate serial:       010D0C9F4328584BB45D44D9AFA534B0A439D400
Authority key identifier: D1:E2:1F:03:18:3C:44:09:DF:EC:E5:C6:70:1E:00:1E:9A:F7:F3:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/5c317d03-88bf-3bf2-8dac-704c2a078ebc.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     400053
IP address blocks:        2607:6100:a2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/08b22b46-d56e-4ead-a5fc-58eb07123cf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/08b22b46-d56e-4ead-a5fc-58eb07123cf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:44:d9:af:a5:34:b0:a4:39:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08b22b46-d56e-4ead-a5fc-58eb07123cf3
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=cf9b6a5b-78e4-4bb5-b738-36394a55e6ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:29:97:0d:08:7e:57:3f:8b:74:46:6a:88:36:
                    80:3f:4b:45:fa:a3:62:ab:33:1f:ca:3c:c9:1f:e4:
                    65:f4:cd:06:8e:4b:b4:5d:03:bb:9e:0d:04:53:7a:
                    74:05:eb:c9:fa:e0:cf:a8:23:9e:49:07:b7:0a:ff:
                    c7:d6:4c:b1:a8:c3:ef:40:83:33:33:3d:6d:83:4c:
                    7c:8a:3b:9d:91:47:74:82:62:23:2f:71:a3:8c:5d:
                    54:52:dd:6d:d8:d0:8f:90:f9:3c:ea:70:bc:c5:ae:
                    ee:4d:e1:e1:2f:7a:6f:e2:cc:f1:46:b9:42:1c:a4:
                    53:1e:4d:33:1f:51:af:cc:65:5f:b5:df:32:9c:d4:
                    60:5d:d9:72:c6:1c:f5:51:8b:05:85:1d:b8:11:ac:
                    70:d9:1b:b5:1d:d7:c4:2c:98:3b:b0:e7:3d:88:5a:
                    6a:44:56:56:7d:d0:dc:f8:af:b1:2c:58:98:f3:0f:
                    b2:92:5b:08:8b:24:a4:97:bf:e2:6e:68:19:56:73:
                    40:41:58:82:f8:15:23:69:70:ff:a0:c6:2c:05:89:
                    76:25:4a:1d:26:1d:95:77:af:f1:47:bc:b5:4f:43:
                    a1:35:ce:0a:70:14:1e:07:5d:83:5e:04:4b:ed:8e:
                    af:67:a1:05:19:76:6d:80:c6:c2:52:9f:cf:98:55:
                    08:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DC:65:E3:0B:E4:50:43:E1:19:3F:5A:24:77:8F:AB:FE:61:EB:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/5c317d03-88bf-3bf2-8dac-704c2a078ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3/08b22b46-d56e-4ead-a5fc-58eb07123cf3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:E2:1F:03:18:3C:44:09:DF:EC:E5:C6:70:1E:00:1E:9A:F7:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/08b22b46-d56e-4ead-a5fc-58eb07123cf3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6100:a2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:04:01:1e:f8:be:5b:8b:61:ec:d2:4d:c3:5c:95:23:1a:65:
         a4:dc:8e:16:ff:35:c5:f4:15:5e:bb:82:a3:51:b5:03:72:7a:
         a2:82:bd:62:a3:1c:b9:78:c2:5f:6e:3b:c3:d4:9f:14:7f:18:
         5f:63:d2:d2:0f:10:ae:cf:16:db:2f:2a:6e:aa:e6:04:1d:63:
         08:3b:8b:f6:d7:39:5e:dd:05:d9:f9:48:4d:3b:f6:ec:ae:85:
         13:e6:58:7a:5f:a1:85:82:8a:96:ad:84:24:4c:ea:9b:b4:25:
         b6:ec:70:a0:cc:b6:84:7e:bb:1d:30:99:84:e2:fe:94:d6:e1:
         e7:a0:3c:f0:62:f4:8b:27:ad:7e:9a:78:3d:d4:c4:81:42:95:
         9c:f9:a3:77:f7:73:3c:e3:be:fe:9a:71:ff:42:ad:bb:eb:86:
         96:b8:71:f1:95:57:08:17:92:b2:b9:07:2b:19:7a:86:73:c7:
         c4:1d:f6:cf:07:93:25:aa:a3:0d:1d:16:0f:22:06:94:26:eb:
         05:c3:82:ac:d1:42:30:57:3a:4e:53:d8:80:9d:72:f2:63:e3:
         58:3f:39:da:55:59:48:e0:03:5f:15:23:0f:1f:65:f5:ad:3e:
         7e:77:b2:ff:e3:95:e9:36:cc:4e:b7:67:ce:05:35:2b:9f:2e:
         2f:78:fa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:31:05 2025 by rpki-client