Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/6e92f77b-e528-38fe-a618-5f254f2bcc7a.roa
File:                     6e92f77b-e528-38fe-a618-5f254f2bcc7a.roa (raw, json)
Hash identifier:          HjnyuebD825FALNSsQYcjsc2EAiF/yRAysKA+/w7Gco=
Subject key identifier:   BD:A6:17:83:00:8B:B2:86:56:8A:CE:8E:85:7C:41:86:E5:80:7B:47
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584B9E07AE845795F4CDDD575A80
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/6e92f77b-e528-38fe-a618-5f254f2bcc7a.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     25623
IP address blocks:        2001:4830:2070::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:ae:84:57:95:f4:cd:dd:57:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=cca3c3e5-48a2-4b30-8526-4d012b30f2df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0c:a4:da:4c:33:f1:62:40:72:68:8d:a1:32:
                    1a:c4:12:ae:42:90:5f:da:0c:59:65:03:98:b7:cc:
                    60:3e:a5:19:90:4e:be:10:c3:24:50:e5:cc:1e:21:
                    f4:c1:d2:67:9f:ad:d4:57:70:24:ae:bc:87:22:b6:
                    07:42:75:d1:fe:d4:d8:27:d0:0c:d2:72:70:99:52:
                    97:6a:d8:ed:ac:a6:b5:9c:c4:d1:e5:b4:1c:58:59:
                    18:af:66:d5:09:09:8c:52:21:d3:e0:05:ee:25:df:
                    59:ac:50:37:29:fd:fb:fc:d4:ec:be:95:b6:35:5e:
                    80:6a:ec:da:20:6e:a6:52:53:b9:17:08:a8:38:cc:
                    77:7c:12:99:33:ea:31:fd:9c:37:a6:f7:64:9d:eb:
                    47:06:66:d1:80:c6:c7:b4:8f:7f:d2:8c:08:8d:94:
                    c8:f6:4c:d7:1b:42:35:21:c5:86:34:da:cf:a3:14:
                    4d:d6:58:a6:a7:83:5b:ac:3b:fb:40:59:f9:ed:52:
                    11:e1:2f:c4:3a:cf:83:1d:36:c7:74:62:0a:cd:05:
                    ed:56:0a:e2:05:ba:7b:05:6e:4d:22:b7:e7:55:b1:
                    53:ee:55:76:28:19:14:15:1f:59:61:13:bd:d5:6e:
                    a2:52:4a:4a:b9:59:eb:b7:47:6e:ec:ba:3d:96:3a:
                    40:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A6:17:83:00:8B:B2:86:56:8A:CE:8E:85:7C:41:86:E5:80:7B:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/6e92f77b-e528-38fe-a618-5f254f2bcc7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4830:2070::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:33:6a:de:82:82:b3:44:2f:a2:5e:c5:b7:12:04:19:a9:05:
         a9:55:e2:ac:ee:d4:53:26:52:07:6c:47:ab:0b:1f:38:3d:50:
         9f:75:c9:28:db:e9:b4:79:53:9e:2c:bd:92:3f:aa:56:06:1c:
         99:6e:04:81:23:6e:90:21:e5:f0:8f:44:9f:d7:63:31:99:8f:
         92:9b:2e:28:4f:05:b8:49:00:61:5f:4f:3d:a6:88:f6:1d:c2:
         22:01:65:fe:e3:1f:f7:20:a1:73:fa:c3:70:32:cc:2f:6b:d2:
         3a:4c:49:04:ba:d8:a3:4a:d0:6e:b1:23:67:1f:f6:9f:0b:59:
         81:b7:65:4b:a0:83:ed:9b:fe:08:ae:7d:3f:e5:84:b8:f3:72:
         2d:68:1e:a6:67:76:6a:8b:69:41:46:52:c8:9e:fb:f0:f3:f7:
         92:21:5b:0c:f4:b7:73:6f:c0:36:bd:5c:54:79:0b:9c:63:59:
         36:9b:f5:87:86:c1:c6:85:fb:52:21:53:2a:42:cf:e6:2b:65:
         6e:e6:13:ff:17:78:33:d7:30:63:a5:04:42:f4:1b:d3:6d:76:
         2f:b0:a0:80:47:47:e5:7b:b0:e0:bf:f7:1c:1e:cd:ed:d4:b3:
         f4:dc:d2:7e:ff:17:de:eb:d2:4f:d9:82:9b:73:ad:1b:fc:60:
         06:7f:df:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:24:38 2025 by rpki-client