Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/401bafbe-03cc-3cac-9a44-36c27387a392.roa
File:                     401bafbe-03cc-3cac-9a44-36c27387a392.roa (raw, json)
Hash identifier:          P0t5qb0ghUTmaRFAAMiVBgYi0g0bYo0Tbq1nr0mbYzo=
Subject key identifier:   72:86:43:96:EB:86:C6:FB:9E:E9:2A:CF:E9:4E:B5:ED:DC:DC:27:78
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584BA39D040EB5791D2B118C8F00
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/401bafbe-03cc-3cac-9a44-36c27387a392.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     3384
IP address blocks:        2001:4830:c0c0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:04:0e:b5:79:1d:2b:11:8c:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=5d9bd63e-f4ce-45d9-9fcc-d58595752bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:68:96:73:1b:d3:7c:64:45:37:e2:de:fb:67:
                    97:cb:f6:97:bb:14:17:c8:f0:1b:29:c9:8f:8a:86:
                    93:a4:86:cc:19:18:b6:d6:b0:86:4a:42:b8:ac:a3:
                    1c:be:8c:70:96:c7:dd:08:ae:69:33:c6:1a:b4:2e:
                    22:6d:fd:38:80:68:e7:ce:28:49:eb:13:00:ac:0e:
                    34:95:fe:8c:eb:72:d2:e6:12:fd:c4:7e:0e:fb:42:
                    8d:4e:6a:10:56:01:81:10:62:42:9e:4b:2e:12:81:
                    35:48:63:4d:b9:c6:f8:f9:67:05:de:2c:ca:fa:36:
                    f6:fd:5f:84:be:de:b2:6c:be:41:d9:7f:ee:90:1f:
                    fa:61:9a:fd:02:7d:7f:8c:40:92:19:f1:64:08:1b:
                    44:46:9a:5c:0a:de:a5:b1:9e:94:51:ac:2f:73:2c:
                    96:3c:18:63:10:91:a2:0a:4b:80:c8:42:ba:47:20:
                    d4:98:42:eb:41:c7:9f:08:e9:45:b6:7d:6b:ae:15:
                    04:25:79:4c:0f:d3:fd:52:ea:8d:13:d5:f5:a5:05:
                    11:15:4d:19:ca:23:cc:6c:fe:6f:fc:72:28:0a:4b:
                    18:60:77:d4:02:97:f3:cd:e6:60:0d:67:39:9d:1b:
                    d6:ca:15:7c:e6:e5:0b:b0:12:83:98:3e:58:e3:b8:
                    fd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:86:43:96:EB:86:C6:FB:9E:E9:2A:CF:E9:4E:B5:ED:DC:DC:27:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/401bafbe-03cc-3cac-9a44-36c27387a392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4830:c0c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:0b:74:b1:03:62:06:da:41:9b:71:a0:23:c4:25:a0:89:a2:
         31:92:2b:da:3a:72:8f:d0:d4:d2:c9:ae:7e:d0:7c:a7:7d:48:
         de:e3:c7:13:25:ea:26:da:0a:6b:f7:a8:b8:dc:0f:22:a6:51:
         b7:7d:a8:6b:3b:8c:58:3d:27:4a:d6:3f:30:e4:b4:a9:de:db:
         c5:9b:ef:f0:90:c8:42:a9:df:61:32:00:b8:c5:d7:8c:6b:43:
         e3:de:a5:62:c2:f7:8b:66:60:57:9a:f6:4f:60:d5:de:64:f6:
         c7:70:94:4b:fe:0d:54:94:36:e2:8f:5d:a3:b7:e1:a3:ee:09:
         89:c5:aa:2d:3d:d8:42:f7:6f:30:bd:16:05:d4:3d:70:55:9d:
         5a:5f:e1:19:d6:8b:9a:08:01:a2:57:fa:89:b8:2c:4f:68:fa:
         5e:aa:67:c7:00:d2:f3:f2:c6:0b:15:02:a6:51:82:3b:0c:b1:
         e3:16:c9:1f:a4:f4:23:6b:be:bf:b5:0c:a5:f2:86:11:d1:70:
         d1:a6:8e:b3:54:89:0c:91:a6:79:71:a5:2f:4c:0c:ad:1d:de:
         84:fa:41:0d:bb:50:04:ab:c2:cc:c4:be:b4:86:a7:57:a7:2c:
         bc:26:56:aa:72:f9:05:02:0a:1c:f5:33:16:b3:61:f7:44:b5:
         8f:7e:2f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:32:34 2025 by rpki-client