Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/ceda3ed4-49e5-373f-b1c9-7344fce724af.roa
File:                     ceda3ed4-49e5-373f-b1c9-7344fce724af.roa (raw, json)
Hash identifier:          jEK5Zzldhr7FGS+KTvkorq8Fgx6TLo+IKJhC2t0KjZY=
Subject key identifier:   61:AC:20:67:ED:2A:56:82:7D:A5:E3:54:8A:30:6A:73:63:87:78:3E
Certificate issuer:       /CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
Certificate serial:       010D0C9F4328584AA42B88D67DE678A36875B440
Authority key identifier: D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/ceda3ed4-49e5-373f-b1c9-7344fce724af.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     46539
IP address blocks:        2605:cb40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:88:d6:7d:e6:78:a3:68:75:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=390e6490-9345-4c6d-ab75-aa04ad76087b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:15:f7:ba:ad:30:85:0d:47:6e:23:e3:32:fe:
                    76:d3:5d:44:9e:01:d4:93:fc:f9:e1:fe:ee:28:18:
                    b9:2a:65:99:4f:f2:7a:50:3c:d9:3b:c5:6f:b7:43:
                    02:5e:92:83:0e:7d:45:da:3c:8f:0a:84:f0:b6:59:
                    fd:a9:58:b8:f1:a8:6f:fd:bd:78:b2:4e:cc:e9:17:
                    83:59:69:88:25:cb:67:9e:8c:4a:51:54:7e:f9:1f:
                    6a:7c:a6:b2:43:4c:9c:1c:c5:1a:4e:4b:e2:30:db:
                    08:fd:2c:19:60:80:1d:3c:52:d3:01:d0:54:62:90:
                    98:7a:3e:17:1d:64:1b:e9:cc:ad:f6:5d:c9:d9:75:
                    5d:91:c1:e4:53:b4:e5:dc:b4:65:39:44:73:7b:7f:
                    11:a9:b1:bd:40:3f:cf:88:54:1c:25:8a:27:e2:5a:
                    fc:70:fa:d8:06:e8:1d:ac:11:ec:29:00:20:bd:1b:
                    8f:a6:fa:84:b7:27:d3:39:bc:bd:c9:3b:59:4d:b7:
                    9d:84:e2:1f:e2:84:77:63:a4:3e:84:dd:ec:b3:9a:
                    10:f6:22:ff:cd:65:c4:13:3b:73:16:89:6b:bc:df:
                    9b:38:94:05:61:4c:8d:62:b2:1d:49:b2:5d:64:e5:
                    dd:c9:ca:dd:45:9d:04:89:db:c1:a0:ef:c2:f8:42:
                    65:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AC:20:67:ED:2A:56:82:7D:A5:E3:54:8A:30:6A:73:63:87:78:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/ceda3ed4-49e5-373f-b1c9-7344fce724af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl

            X509v3 Authority Key Identifier:
                keyid:D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:cb40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:bf:b3:98:c8:66:59:1f:3c:ab:a8:03:b3:f2:64:88:6f:28:
         a3:33:b3:d2:18:9d:d7:c5:d9:c3:67:3e:85:85:b5:79:b1:e4:
         1e:37:5f:5f:a9:53:94:66:d2:a4:7e:0f:05:dd:b9:7a:ad:75:
         9c:20:20:a1:f1:d6:39:74:ff:d4:ae:58:6d:a1:e6:86:b7:18:
         31:ed:b1:82:e1:15:8e:68:8f:89:4f:cf:c3:5f:1e:60:5c:0d:
         32:93:bc:80:36:75:ec:8e:8a:89:de:0d:e6:93:e6:81:17:2c:
         0c:be:99:bf:ef:76:62:56:4a:63:59:42:7b:71:d9:cd:8d:fc:
         47:bb:f7:b1:de:d1:4b:79:73:e0:ca:43:30:8e:1e:dd:45:d4:
         38:be:f9:b6:2d:48:17:ea:86:db:16:3c:52:fd:5d:c4:13:89:
         33:15:5f:64:0e:f1:39:31:bf:a5:08:ad:2a:7c:2a:ae:4c:de:
         cc:c2:3e:70:ba:b6:a1:10:86:30:da:10:8f:f1:b7:cd:2d:5e:
         5f:ba:5b:f5:27:9b:2f:01:b0:24:7f:42:36:6a:68:51:09:75:
         f9:97:ae:75:bd:69:4b:2d:cc:3e:7d:ed:dc:fe:3c:d7:1e:22:
         aa:d2:78:52:89:3e:b2:89:7b:37:32:64:5f:f3:2d:15:98:52:
         b8:28:f2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:10:13 2025 by rpki-client