Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8f0456f3-3176-30ae-a3f5-5d46d9143ec4.roa
File:                     8f0456f3-3176-30ae-a3f5-5d46d9143ec4.roa (raw, json)
Hash identifier:          X4Xx+GwZtCBQX7x9tu4Go3fqjSNLsbTnTTLoMO4tlXw=
Subject key identifier:   55:97:79:C3:67:A3:14:A5:C1:0A:13:6D:E0:E7:3D:88:13:8D:F2:FD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19716D615F2E25809EA7E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8f0456f3-3176-30ae-a3f5-5d46d9143ec4.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        2607:ca00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:16:d6:15:f2:e2:58:09:ea:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=232efa5f-0680-497e-824f-ac47fbcf0973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1d:c2:50:8a:3b:c9:e9:bf:8b:b1:77:34:77:
                    cd:6f:cd:30:23:89:b8:15:1f:54:b2:6c:07:b9:d8:
                    6f:7d:6b:2c:de:5b:51:cf:30:b9:9a:27:2c:f7:7e:
                    f5:9d:00:74:12:3b:22:3d:4c:b5:0d:20:34:a4:45:
                    b5:1b:12:a7:46:35:a6:62:e3:1e:dc:c8:cd:34:d6:
                    3d:43:54:90:d8:17:8b:41:a7:d6:db:22:1e:88:48:
                    f9:b2:d2:c2:7e:8d:9d:a3:2f:e3:c0:ca:55:db:a9:
                    97:5d:4a:05:df:df:4f:6e:15:46:9c:2e:54:dd:7c:
                    e5:ce:7a:78:af:aa:3e:ad:90:4c:31:21:46:c2:0d:
                    46:26:04:ad:5c:8a:1f:2a:78:87:09:62:4d:9c:77:
                    46:0a:53:f9:26:f5:55:64:47:1f:07:f2:57:ab:a0:
                    03:e1:01:f7:d4:de:53:80:99:88:81:5b:28:b2:d0:
                    7c:f5:78:5b:71:cc:fa:0a:35:0d:29:a8:0e:47:ab:
                    77:59:7e:87:40:07:18:02:9d:7a:e9:ea:f3:8a:21:
                    79:34:00:56:57:c0:64:24:02:d3:eb:78:82:2f:56:
                    69:cb:e7:f9:ec:d4:eb:58:17:33:68:4e:d4:83:25:
                    ea:3f:06:1e:fd:1e:25:7b:93:f6:68:2a:60:5e:64:
                    dc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:97:79:C3:67:A3:14:A5:C1:0A:13:6D:E0:E7:3D:88:13:8D:F2:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8f0456f3-3176-30ae-a3f5-5d46d9143ec4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ca00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:be:09:a9:48:c9:3c:28:cc:9f:bf:84:6e:a7:77:89:27:aa:
         f3:14:51:26:37:13:5c:9e:2e:47:87:41:d8:66:62:1d:5f:f6:
         bd:66:03:87:00:9c:1c:97:79:1b:0c:49:7d:11:54:9f:9b:fb:
         2e:73:65:53:b6:9b:b7:51:1f:83:3b:be:52:e1:57:bb:0b:cd:
         fa:8d:d5:96:52:a4:4d:39:fb:95:ba:b6:90:d1:ee:d7:9c:55:
         b1:97:ee:e9:60:51:59:49:d3:96:dc:af:39:22:19:3c:51:ba:
         f1:6f:89:19:15:ea:8d:f7:64:cf:51:ba:e5:1d:2b:aa:e4:9f:
         de:60:17:81:1a:2a:7f:57:42:69:38:80:05:93:40:14:fa:1b:
         43:8f:fe:5b:0c:ea:9b:ab:c5:ed:e3:40:fd:89:16:d5:66:a5:
         24:8b:81:8a:cc:0b:84:5c:e3:72:1d:85:eb:95:d1:04:e6:44:
         2e:db:78:ce:66:4c:79:08:84:90:76:a6:9a:a7:ad:94:ae:33:
         48:db:6d:a9:28:67:09:0d:ba:e5:9d:a9:ed:e9:03:f6:f1:bd:
         09:c0:02:6d:e3:6f:53:ac:e7:4d:f4:42:f8:3e:dd:d9:f2:57:
         d3:69:a5:69:5a:84:0c:13:f3:83:c9:50:03:7e:1a:08:08:91:
         c7:0e:04:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:11:01 2025 by rpki-client