Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1963be32-fe8d-3812-a6ee-1ad089fa67a9.roa
File:                     1963be32-fe8d-3812-a6ee-1ad089fa67a9.roa (raw, json)
Hash identifier:          dtICudzapRNYEL+JF15xQYD4T4DZRU/bbrKpS7gwSmI=
Subject key identifier:   C0:97:07:72:8D:87:E0:8A:C9:41:36:DB:14:91:6A:32:29:F0:60:90
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19678C348B7290F2966447C
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1963be32-fe8d-3812-a6ee-1ad089fa67a9.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     855
IP address blocks:        2001:4c0:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:78:c3:48:b7:29:0f:29:66:44:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=bf624330-93a0-457a-816a-508554e29091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:c5:4d:cb:6e:b1:16:65:7f:9b:e2:67:b9:
                    66:82:e0:8a:b7:55:10:82:d1:4b:81:99:c4:e9:0c:
                    78:d7:c8:e4:4a:0a:00:77:ad:03:c5:e0:ce:a5:f1:
                    0a:88:57:b9:4e:b2:be:10:51:bb:ff:6f:47:ff:aa:
                    3c:46:59:78:4b:f2:07:46:03:d9:df:c4:56:44:de:
                    c9:82:ac:96:a4:76:3b:7c:96:67:b8:07:ed:3c:a3:
                    e1:71:ef:b1:d5:1f:34:8f:eb:21:33:35:bb:7e:b9:
                    6c:0d:d0:6d:5d:21:67:11:8f:99:f6:e9:7a:48:fe:
                    e9:c2:28:36:50:88:8d:a9:53:d2:e3:37:c7:0f:54:
                    93:40:80:f3:98:fe:73:57:7b:9a:11:b3:61:67:e9:
                    51:72:da:3a:70:b5:ce:1a:1f:83:ec:bd:2d:f2:a7:
                    e4:40:34:55:47:23:5d:56:e5:c5:9a:b9:08:b8:66:
                    f6:4c:5d:c0:2d:ba:b1:7a:a2:1c:cb:24:05:fb:1c:
                    e8:f0:a5:43:d0:a0:1b:d9:9e:1f:ea:1a:6f:bb:3e:
                    1d:36:0e:74:3d:77:bf:d4:ad:ea:19:d2:50:a5:53:
                    3e:5b:24:5d:c0:d3:da:3b:ca:3c:ca:65:02:ec:eb:
                    81:40:df:d2:92:f9:88:0f:79:1d:e2:81:46:18:a5:
                    c5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:97:07:72:8D:87:E0:8A:C9:41:36:DB:14:91:6A:32:29:F0:60:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1963be32-fe8d-3812-a6ee-1ad089fa67a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ea:a9:42:39:f4:7a:f7:4a:3d:9f:00:66:7c:97:16:68:d2:
         31:39:51:8b:1b:88:99:4a:0c:e8:4e:06:6f:2f:a6:d0:6d:da:
         a4:fd:12:09:5c:05:a7:eb:0c:e6:3a:3f:6a:1f:60:ed:d6:99:
         83:40:3f:77:13:59:64:b1:f2:5c:a4:b8:20:c1:d6:de:ec:3b:
         87:8d:ee:df:b8:57:d7:28:68:a2:da:5e:65:7d:be:e7:9f:9c:
         cf:41:f7:ba:2c:e6:d5:27:d9:5b:d9:a8:7e:ad:eb:34:39:85:
         44:78:f5:69:21:33:e0:6e:5f:b7:69:c0:d3:05:6c:9e:64:af:
         ab:71:48:28:96:a2:22:c2:60:60:9c:d4:46:44:51:3f:33:08:
         a5:a6:48:1d:e6:75:39:2c:be:0c:1e:a3:8e:c4:6e:06:22:b2:
         97:c3:9e:be:be:28:4f:13:95:81:b6:25:8d:7c:36:46:fa:14:
         10:7c:e2:c8:cf:85:26:75:cc:ae:e1:6f:a6:55:73:8b:e6:b1:
         38:f3:f8:88:bc:13:20:90:69:50:a8:38:99:8a:c2:74:18:17:
         1a:2c:36:f8:dc:c1:d4:f2:4b:48:b0:dc:c5:36:b6:9e:ea:57:
         df:fe:1d:ea:76:58:69:09:04:ca:b3:96:ea:83:0f:82:04:95:
         28:10:37:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 10:59:39 2025 by rpki-client