Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/8c15e199-df9d-3fa3-8769-5796c769ab2b.roa
File:                     8c15e199-df9d-3fa3-8769-5796c769ab2b.roa (raw, json)
Hash identifier:          kchFgRLSnXbSjT8VIcF2R/9bOaZueRaNlHbciB8IfZU=
Subject key identifier:   6D:36:D7:BE:48:EB:74:F0:76:FE:5E:D7:44:8A:75:AA:56:4F:9F:D4
Certificate issuer:       /CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
Certificate serial:       010D0C9F4328584BBB759EB6EC64B2D343414B80
Authority key identifier: FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/8c15e199-df9d-3fa3-8769-5796c769ab2b.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     46484
IP address blocks:        2607:8d40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:9e:b6:ec:64:b2:d3:43:41:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=dfc2820b-895e-4b16-a13b-df3f6bb9f019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6b:30:4c:f8:20:cf:78:14:72:e6:0b:d4:37:
                    29:ae:21:ac:06:ba:85:4c:c5:71:c3:38:dc:af:5a:
                    e4:f8:1e:ba:ef:e5:84:fb:9a:b0:38:92:b2:c8:65:
                    fc:39:0e:c6:95:43:2e:80:66:6d:db:a9:1c:78:d5:
                    7b:4d:c9:3a:75:0d:e1:be:48:62:0d:c3:94:52:c5:
                    de:45:e1:64:86:22:8c:f9:17:f8:9c:c8:b8:a5:48:
                    58:ae:2d:78:1a:30:e8:db:bd:19:13:bb:79:ae:48:
                    a5:5c:89:ae:1a:d8:0b:cb:61:f5:96:22:cb:c3:f7:
                    17:a7:9a:73:07:3b:8e:d4:a7:4b:57:99:bf:8a:bf:
                    84:c9:e0:ff:31:53:c3:b9:a9:99:20:fe:3d:75:19:
                    24:db:85:af:b3:2b:1f:d8:89:51:54:84:91:f8:b8:
                    68:f6:ef:19:1e:b0:ba:5e:6e:47:a4:d9:9d:eb:15:
                    f0:4d:13:f5:98:93:62:2a:2d:2e:54:9d:26:36:77:
                    be:51:45:28:9c:5b:6b:19:b6:04:ac:ea:25:a1:93:
                    5d:0b:7d:20:0b:81:a9:89:20:92:97:c6:ac:40:d6:
                    a0:7c:ae:a3:23:a5:23:72:25:ee:cc:34:de:65:ae:
                    b9:06:02:13:55:7a:f5:85:8a:ec:00:57:37:cd:c4:
                    aa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:36:D7:BE:48:EB:74:F0:76:FE:5E:D7:44:8A:75:AA:56:4F:9F:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/8c15e199-df9d-3fa3-8769-5796c769ab2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl

            X509v3 Authority Key Identifier:
                keyid:FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8d40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b9:da:fc:a3:9f:23:b6:fd:2d:37:a6:2f:c2:82:49:03:b0:
         53:8b:f2:1d:30:1f:53:b9:98:9d:d6:40:5f:23:a0:2f:d3:6b:
         9c:06:b7:48:02:16:3d:c1:00:66:99:75:af:cd:80:bd:98:9f:
         42:0b:f3:7e:47:6d:80:56:00:28:8a:96:c5:50:54:7d:b3:ba:
         7b:8a:a3:e4:db:2b:df:1f:dd:94:c9:20:78:bf:bb:c2:46:72:
         25:72:d5:b9:f8:7f:bd:01:3d:22:2e:c7:da:1c:6f:8f:fd:3f:
         a5:28:eb:33:3e:f3:f1:61:44:f5:06:a0:9c:a3:5f:56:76:65:
         77:70:6c:3f:a9:43:13:3c:a4:19:b1:bc:94:69:bd:e9:63:ce:
         27:76:01:53:20:0e:6e:8f:13:5d:f7:aa:07:46:26:62:4c:87:
         d4:32:b8:77:33:92:82:04:cf:ef:a2:9c:73:58:54:c6:3a:a9:
         a9:fb:34:a6:68:5f:17:60:6d:c1:d8:e0:a9:7d:c7:21:15:d0:
         7b:5a:d7:0b:18:cd:9c:88:fe:5e:4d:41:14:ef:3a:1e:1b:40:
         26:9a:a3:51:50:1b:8d:19:29:b7:69:f1:81:51:20:2c:79:c0:
         77:64:14:7f:71:69:6a:b0:e2:ae:58:7d:a3:78:84:a8:87:c9:
         1e:91:08:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:50:57 2025 by rpki-client