Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/b7c033db-f2ba-30cb-854a-395316fe8aca.roa
File:                     b7c033db-f2ba-30cb-854a-395316fe8aca.roa (raw, json)
Hash identifier:          hTqcDpkuyiWl4gseKbW84uNNyxnjVqCbByuY1HBGBJA=
Subject key identifier:   38:FD:B4:FF:ED:BA:15:87:C1:C7:8C:ED:2E:ED:43:C6:A3:16:53:5F
Certificate issuer:       /CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
Certificate serial:       010D0C9F4328584BB02CFBF4D31DD961C9C76C00
Authority key identifier: DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/b7c033db-f2ba-30cb-854a-395316fe8aca.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     11105
IP address blocks:        2607:f8f0:690::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2c:fb:f4:d3:1d:d9:61:c9:c7:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ab501b-6c69-46a4-b924-a09b68ce18cf
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=bdb81f60-093a-4cbc-8c28-c6f3f5744050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:3b:3c:7e:f1:6f:80:30:b0:75:eb:2a:74:
                    4d:26:e4:3c:cb:23:16:ff:a6:72:a4:10:71:2f:ea:
                    20:53:a7:20:d7:b9:0b:14:bc:3f:70:1c:20:d8:c4:
                    85:2d:51:fa:d4:99:36:2e:fc:e4:3d:fb:d4:85:b9:
                    f2:ae:89:29:bc:dc:1a:76:85:4f:e8:01:ab:c4:e2:
                    57:fe:12:71:87:88:b4:6a:9f:e1:4f:55:9f:98:19:
                    77:9b:64:76:30:73:83:01:b4:57:c5:d6:a7:ff:d0:
                    44:7f:9e:8e:1f:71:54:5d:d2:80:c3:20:fa:ae:80:
                    31:f7:77:b0:56:ae:7c:ed:8b:27:67:17:b6:37:6a:
                    25:8e:7d:fa:c9:9a:90:06:95:ce:f8:d9:dc:c2:e0:
                    d0:78:33:91:2e:d9:0a:67:58:24:09:03:cf:b2:75:
                    2d:d5:8c:7a:5d:5f:b7:f2:3e:d7:d3:4f:ba:3f:43:
                    5e:98:02:d6:e5:02:54:9e:85:f6:7e:d4:b5:c4:f2:
                    b5:d9:1c:0d:0f:6f:33:e5:e3:d2:a8:7e:57:18:d7:
                    ea:c5:af:9b:7e:55:50:15:05:fd:c0:e9:0d:2d:7e:
                    71:7b:ba:1b:3d:d9:67:c8:55:06:1e:f5:56:12:3d:
                    2b:d8:14:58:d6:87:0d:ca:31:05:5f:74:eb:3c:ea:
                    03:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FD:B4:FF:ED:BA:15:87:C1:C7:8C:ED:2E:ED:43:C6:A3:16:53:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/b7c033db-f2ba-30cb-854a-395316fe8aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf/e6ab501b-6c69-46a4-b924-a09b68ce18cf.crl

            X509v3 Authority Key Identifier:
                keyid:DC:D2:73:A8:27:7E:61:48:65:D1:41:52:8A:91:B6:20:10:A7:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e6ab501b-6c69-46a4-b924-a09b68ce18cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8f0:690::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:50:e3:a9:64:14:f1:c5:08:e0:1a:64:80:6b:58:2b:72:14:
         d1:3f:56:68:72:0e:e7:30:5f:b1:45:f5:71:da:5a:9e:82:9c:
         3d:1e:8d:55:eb:6a:c3:51:de:09:52:ed:9f:e9:ba:26:cf:a2:
         84:2f:70:03:7c:5e:fd:ec:05:c6:ce:11:62:fc:e0:94:f5:76:
         1e:2f:ac:60:b6:b4:07:d0:70:74:0a:e1:8c:31:98:03:44:26:
         e7:d0:7c:63:8a:aa:d8:f6:93:89:23:60:1a:dc:ef:10:72:39:
         cb:df:08:57:b6:fd:50:30:ee:d0:23:bb:55:fe:4f:96:60:76:
         bd:04:6d:bd:29:80:fc:00:f0:c4:27:f3:29:53:67:59:10:e7:
         d4:9d:1e:9e:69:88:2d:bc:b0:6a:53:17:f2:58:d3:ed:72:5c:
         4c:0e:61:27:22:fc:38:0e:14:5a:ad:71:7d:b8:a4:34:a2:92:
         9d:f2:98:ca:67:0f:c2:ab:30:bc:0d:a6:25:13:6e:fa:9e:13:
         d0:3d:aa:78:8b:74:8d:ac:cb:65:78:ab:1c:f0:87:e9:3c:67:
         12:07:19:58:2a:d6:06:b7:c7:0e:ef:36:29:16:0e:b5:01:b0:
         fb:21:c7:8e:96:59:27:f7:d8:92:8e:77:87:68:2b:7f:31:29:
         cd:c3:5f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:08:54 2025 by rpki-client