Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f791ccf-fcc1-32c2-941f-d9b54f5689e4.roa
File:                     2f791ccf-fcc1-32c2-941f-d9b54f5689e4.roa (raw, json)
Hash identifier:          OizIAyscOm4PW0118jVfLV89u1pPuwhr4q860bixoqA=
Subject key identifier:   CC:B8:21:84:B7:77:90:28:79:28:FD:C8:87:00:C4:FA:6E:44:00:65
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19676E86BF12FA9809EB800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f791ccf-fcc1-32c2-941f-d9b54f5689e4.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     855
IP address blocks:        2001:4c0:2001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:76:e8:6b:f1:2f:a9:80:9e:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=9ae9016d-db5c-4626-84f9-7d8b9c7f7e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:71:06:e2:42:f4:a2:28:dd:28:06:81:db:
                    c4:06:ab:8d:35:cf:52:cf:a9:83:fe:d1:9f:40:cc:
                    59:aa:09:48:29:d8:a0:5e:85:63:b4:1b:6e:a3:48:
                    98:0b:6a:16:ad:f5:97:64:1b:cb:27:ba:4b:7d:b6:
                    27:b7:6a:46:7e:c9:d8:21:cf:24:f6:60:dc:c8:fe:
                    40:09:c7:53:cf:9d:26:3b:11:cd:29:3a:f2:2c:7e:
                    2d:d7:b2:34:6c:b5:53:fb:ed:62:5e:ff:72:5f:7a:
                    0b:3d:bb:ad:ce:bb:b7:f4:27:fb:08:46:61:1a:32:
                    55:2e:69:76:c3:c7:00:d9:d2:4f:35:b8:36:23:53:
                    bc:f3:19:b5:76:bc:59:60:83:c5:08:f3:0b:bf:d6:
                    c5:a8:42:dc:0e:67:76:69:ed:6d:a5:38:58:40:54:
                    09:9c:f4:38:a0:3b:76:2c:06:a9:94:75:c5:dc:e9:
                    f3:79:13:a2:c2:f9:52:ac:21:cc:40:7b:e1:71:23:
                    a2:43:13:b3:95:36:9e:bc:6b:11:a4:5c:07:22:9e:
                    61:30:35:10:81:6c:6f:9f:b4:20:b0:83:0e:c5:2e:
                    71:68:c9:77:02:45:e5:dd:f1:8e:18:ac:5e:81:f4:
                    46:56:da:81:fe:d2:0c:3b:8f:df:5f:79:67:8a:d6:
                    a9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B8:21:84:B7:77:90:28:79:28:FD:C8:87:00:C4:FA:6E:44:00:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2f791ccf-fcc1-32c2-941f-d9b54f5689e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0:2001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:4a:bb:3a:6f:bf:fb:e5:b2:ff:6b:d0:d4:26:69:06:8d:d5:
         5d:42:ed:14:43:82:cd:a7:e1:f8:5a:0a:0f:18:3a:e8:4c:f7:
         96:2f:db:87:33:5c:b8:1f:0d:ee:89:23:ac:55:24:fa:71:50:
         d6:7a:32:2b:84:07:d4:d1:f6:7f:32:b5:57:5f:6f:f0:22:dc:
         8b:9d:4a:fd:ae:64:e6:39:89:2b:b7:1f:8e:dd:70:25:a5:6d:
         5f:38:84:bf:ef:e4:44:45:c1:5f:5b:b0:12:52:70:eb:bd:51:
         96:4e:9f:c0:79:1e:f8:9b:fc:d9:3d:88:d8:f1:15:ee:a3:39:
         cb:f5:47:02:65:ab:db:86:b8:77:28:69:08:31:3a:e6:a3:05:
         e2:87:a2:51:7b:58:3c:ef:50:d3:69:1a:6a:51:46:4d:bf:98:
         b3:99:c1:6a:6e:03:32:3c:47:fc:b7:fa:af:d6:72:b5:85:e0:
         51:bc:3e:5f:d2:3e:d5:b7:81:b7:81:dd:b3:c4:71:22:70:16:
         f8:94:c4:f5:5c:eb:8d:cb:3e:4b:c0:1b:d4:1b:95:bf:d6:77:
         5f:be:49:73:2d:c1:de:8b:9a:4b:b8:63:65:4d:48:99:af:2e:
         9d:b3:55:e0:73:c6:0f:d9:eb:45:7c:43:2d:53:a5:c6:f8:72:
         58:e1:b6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:58:19 2025 by rpki-client