Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/6612b44b-607a-3b8f-9c8a-32e864031d1d.roa
File:                     6612b44b-607a-3b8f-9c8a-32e864031d1d.roa (raw, json)
Hash identifier:          /6e+hSumF0kUVJ47LLvHWPqhH+fGLBDZnEQ96ac23dY=
Subject key identifier:   C3:4C:F4:CB:D9:74:46:1E:32:52:7A:1D:C4:C6:5C:70:B1:63:83:C4
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584BB2F7A767C66AB3B0B5804B80
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/6612b44b-607a-3b8f-9c8a-32e864031d1d.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     11572
IP address blocks:        2607:6002:500::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:a7:67:c6:6a:b3:b0:b5:80:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=a237e57b-f4d4-485a-ba33-bb97da19c419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:ac:fe:9e:95:07:df:d7:09:18:91:1e:f8:
                    e7:f7:10:78:95:16:49:b5:75:84:54:a2:18:2a:ef:
                    a5:c7:2f:7a:c9:da:89:5f:55:57:5b:66:e5:5d:54:
                    63:c4:25:f9:93:e0:96:15:f3:5b:b4:e2:db:56:26:
                    b3:cc:dd:ea:fa:e8:94:46:da:16:21:b3:e6:ef:2d:
                    0c:29:58:bc:b5:fd:a5:3d:bb:ee:33:a4:0e:c8:8e:
                    e0:57:4a:57:b7:54:4c:aa:e7:70:67:fe:e0:b9:0a:
                    4b:43:1b:60:78:17:9d:e4:c6:39:23:39:d7:c3:2a:
                    96:9b:d9:86:2a:7c:aa:88:b5:90:2b:01:f5:b9:39:
                    39:8e:fc:91:61:97:ec:dd:45:14:67:9b:69:a8:e3:
                    fc:29:9a:24:48:ee:8b:bb:24:bd:0e:a2:10:4f:32:
                    e8:14:48:b0:2d:1c:80:c2:46:16:2e:5c:c6:a6:36:
                    b7:b4:ee:e0:bf:a7:27:d1:a4:bc:10:f2:ea:42:a4:
                    50:43:ad:e7:95:9a:16:82:ee:6d:62:99:36:93:ad:
                    42:d0:e0:4f:69:12:24:c5:10:ae:2c:97:4e:be:a0:
                    c4:0a:1e:dd:c1:72:3f:f6:31:00:31:b0:22:44:ed:
                    e6:64:a8:c7:86:9b:12:12:68:75:d1:2a:3f:84:ba:
                    fd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4C:F4:CB:D9:74:46:1E:32:52:7A:1D:C4:C6:5C:70:B1:63:83:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/6612b44b-607a-3b8f-9c8a-32e864031d1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6002:500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:1a:1e:2d:af:53:cb:81:3a:64:d4:e1:9d:42:f1:49:6e:dd:
         5c:c4:a5:9b:c2:c9:e5:98:ee:07:16:f5:a5:1a:12:60:3c:d3:
         21:84:bf:a0:8e:0c:9d:ef:63:6a:1a:6f:b3:c7:67:5d:e9:93:
         65:7c:c7:da:68:07:21:77:0d:8d:08:68:13:5a:69:2e:b1:5b:
         21:23:77:89:bb:06:d6:50:63:47:c1:00:90:3c:af:2b:36:94:
         7d:90:f8:80:b0:bc:ff:d4:23:4f:1e:09:24:0e:e1:86:f6:e0:
         18:7d:bc:7a:58:04:a0:41:f3:67:8f:d1:83:63:9e:27:e3:15:
         75:7c:92:0f:6f:7f:6a:ad:e0:73:e3:97:00:a0:cd:cf:fb:7f:
         b2:8f:77:e7:a1:20:3f:83:03:02:3e:ef:aa:98:65:60:7b:9d:
         8f:99:1f:24:13:e1:03:09:74:75:c6:09:ca:5e:aa:c5:56:a8:
         36:fc:1a:ff:e9:94:ab:87:af:4a:8a:0f:82:9d:0d:7e:d5:85:
         dc:bb:91:b2:87:f5:99:d4:cd:c1:31:4a:e4:84:38:49:bf:90:
         c1:96:65:6f:37:29:72:11:49:ad:5b:d2:29:ec:f0:ed:47:86:
         59:ca:10:9f:46:01:c2:98:3c:80:d3:a7:e6:be:28:7c:56:17:
         be:6d:f6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:41:22 2025 by rpki-client