Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5c2617d4-b863-3aea-89a8-20002822ac28.roa
File:                     5c2617d4-b863-3aea-89a8-20002822ac28.roa (raw, json)
Hash identifier:          ka8i7tey+QA3SFbkXDbhVSZIlpeLVgLki34adlTp3K4=
Subject key identifier:   A5:2C:AC:4E:9C:F2:93:5F:2D:A9:74:A3:E4:0B:CD:E7:6F:69:B4:F5
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584BA7CCEC85E17EFA33E409CB00
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5c2617d4-b863-3aea-89a8-20002822ac28.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     18914
IP address blocks:        2607:1cc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:ec:85:e1:7e:fa:33:e4:09:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=0ff2dceb-2d96-4be5-b46f-a5c5db991454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2d:e4:44:d8:a3:c5:4f:16:04:f1:6a:c1:d9:
                    50:28:18:b5:46:ad:5d:ee:e8:67:7f:30:a3:7c:0e:
                    b3:86:7f:95:69:0d:c3:87:6e:58:b2:ab:43:0b:4c:
                    e0:3a:85:d9:96:6f:67:b9:c9:9c:b1:90:67:82:89:
                    5f:95:76:5a:0c:b4:24:1b:47:83:59:78:c2:34:f0:
                    07:fe:44:c4:27:be:7c:fd:dd:16:2a:ef:2e:5d:9d:
                    89:0e:01:a7:01:6a:ed:01:b9:03:a9:fa:a8:83:5f:
                    94:ef:5d:52:c7:1a:57:04:77:bf:3a:e0:2c:40:71:
                    6f:19:79:0a:59:d7:e6:85:81:03:72:f2:14:33:b2:
                    c1:0d:b5:4d:da:b2:ec:57:4b:f4:1a:11:9e:2f:96:
                    66:14:ff:56:1f:4d:62:2f:ce:4d:3e:94:fe:6c:98:
                    4e:c4:98:23:31:fe:08:c6:7a:bc:17:93:e6:cf:af:
                    e9:0f:37:d4:52:f0:64:d8:ad:af:ad:65:49:6c:6c:
                    af:c9:07:c9:64:5c:d8:c0:a3:f7:b6:22:3c:c6:b5:
                    80:8d:b4:a3:4e:a4:71:8f:44:de:f7:6e:ed:fc:3a:
                    32:14:13:fb:92:83:8b:e6:8c:7a:be:d8:80:5a:f3:
                    e0:32:16:46:29:89:44:bf:ea:39:34:70:76:a2:c4:
                    ce:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2C:AC:4E:9C:F2:93:5F:2D:A9:74:A3:E4:0B:CD:E7:6F:69:B4:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5c2617d4-b863-3aea-89a8-20002822ac28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:1cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:89:87:d7:1a:2f:f2:48:35:8e:63:54:61:51:f9:b5:dc:29:
         f1:94:82:56:7c:64:d4:a1:d5:55:6a:22:95:92:22:f7:4e:65:
         7a:5a:a0:e9:5f:7f:7b:fb:93:98:69:33:a5:7a:01:9f:f6:0f:
         20:fe:fc:f2:4a:e1:28:74:6a:58:95:d8:6a:f5:e1:3a:5f:85:
         be:5a:e6:de:d9:5c:f0:3a:b2:b4:5e:bb:24:cb:27:fe:26:a9:
         e6:7e:ee:8c:a3:34:6d:c3:3f:95:15:52:ea:b6:b2:4b:69:39:
         71:7b:68:45:75:a7:11:0d:ca:1d:07:2d:8d:6f:a3:ad:81:cf:
         59:46:05:2a:4d:7f:b1:03:ce:d3:b8:aa:88:0d:a5:cf:f5:b4:
         06:3a:71:14:e9:b1:cd:c8:7e:4c:2a:e3:b5:31:d4:d5:f8:0e:
         24:63:07:27:f7:9b:f8:95:d0:9a:88:6e:e2:53:10:01:2a:ed:
         85:15:ca:5a:63:c3:be:02:54:a1:55:ef:38:2d:d2:75:15:14:
         c6:19:1e:a9:ea:15:79:c1:0f:69:59:78:3c:e7:9c:f2:e7:8d:
         61:e6:c5:68:f1:3b:6f:b0:fc:e0:f3:43:7d:ac:3d:9b:35:dc:
         0c:99:1e:ca:7f:3d:4b:5b:cb:5d:4e:68:51:de:30:a7:18:c0:
         6c:ea:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:22:23 2025 by rpki-client