Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/d0fc7d83-8248-36e1-8957-e593c1f5887d.roa
File:                     d0fc7d83-8248-36e1-8957-e593c1f5887d.roa (raw, json)
Hash identifier:          O0OqS0mN1McifKWn+Qq5UCUt9joUsiiKrxcVOqT8oVM=
Subject key identifier:   BE:F1:97:5D:D3:D6:BA:E2:3B:40:28:5A:7F:97:FE:0C:30:44:0B:B5
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F4328584AAB265369DA90820A4EB5CD80
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/d0fc7d83-8248-36e1-8957-e593c1f5887d.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     4134
IP address blocks:        2605:9d80:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:53:69:da:90:82:0a:4e:b5:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=c6e0fbbc-e4d0-4b09-b910-cab9dfb3f649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2e:1c:52:26:0a:e3:fb:5a:a8:83:1d:0c:e6:
                    29:0b:94:bb:af:17:ce:e5:54:4c:67:bc:fd:05:f1:
                    b7:82:53:d2:90:57:64:72:ea:3f:2c:1c:55:3c:f3:
                    d7:90:c6:80:fa:10:85:33:dc:29:3b:0a:08:01:21:
                    ef:1b:ed:ae:1e:8c:00:89:44:fd:72:22:57:fe:3f:
                    89:6b:64:1b:fa:66:83:67:34:c8:d1:f1:44:86:0a:
                    d7:75:2e:79:23:86:94:77:45:0b:60:d6:fd:82:39:
                    49:9a:c1:c6:a6:b9:09:19:29:f6:30:51:c4:fe:94:
                    7a:3e:55:7e:9c:de:6f:03:d9:63:d3:d4:ad:3e:de:
                    ac:55:7e:dd:2b:6a:39:e6:e0:e4:6b:2e:0b:92:f2:
                    1a:2f:9f:26:30:b4:48:34:3d:a3:85:60:77:94:27:
                    f9:57:41:c2:5c:59:f6:07:b8:1c:05:30:96:15:ca:
                    da:c9:c7:61:fc:f8:88:4a:21:65:bf:58:4d:aa:41:
                    87:a8:c5:1b:36:40:c5:3d:42:64:82:9f:bd:92:da:
                    06:87:17:e3:33:be:ae:78:40:45:0f:6b:65:eb:7d:
                    8c:0c:7a:56:67:96:b1:3e:14:81:7d:d3:a5:79:08:
                    e7:40:a8:a8:bd:53:d9:ec:81:2d:d1:c3:0e:ae:6b:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F1:97:5D:D3:D6:BA:E2:3B:40:28:5A:7F:97:FE:0C:30:44:0B:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/d0fc7d83-8248-36e1-8957-e593c1f5887d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9d80:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:87:56:08:ff:a6:9c:36:0e:2f:5c:c5:93:98:f7:3a:d2:ff:
         c7:4b:ba:19:61:0d:90:cd:85:57:01:9e:9d:15:1c:34:60:5e:
         00:00:94:5e:0a:70:e4:c8:07:42:fb:c2:06:bb:3c:53:6f:d3:
         23:35:37:fa:1c:68:64:6b:6d:4e:55:b3:cb:81:40:e0:a6:ab:
         ba:ff:5c:38:8e:39:ae:cb:d6:3e:e4:e2:fc:8d:99:88:6b:9c:
         9c:ee:d1:ee:0b:af:44:cd:80:80:cd:79:d6:54:e7:82:19:7d:
         cd:a5:5b:e4:1e:05:24:50:a2:de:89:3d:47:17:e2:60:91:69:
         ed:d6:58:a1:d4:3d:1e:85:21:d4:a3:4b:5e:24:37:d0:e3:5b:
         58:e8:b2:1d:7b:72:66:a8:e1:7c:ea:eb:9e:97:07:e6:6b:a7:
         3d:ac:5b:a9:a0:f2:dc:90:f9:f3:48:3d:64:1a:cf:fc:e2:4c:
         aa:b6:f5:1d:f3:aa:35:d7:7d:d1:51:af:05:8a:97:17:79:9f:
         c8:fb:74:db:3d:3d:88:e6:33:ff:1d:4a:1d:e2:f7:9d:31:31:
         29:be:a4:66:dd:2e:be:43:f0:6a:76:f1:0c:1f:3a:45:3b:04:
         dc:f9:27:94:be:c0:ba:9b:f1:fc:a3:04:70:ab:24:c6:38:0c:
         39:5a:1a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:00 2025 by rpki-client