Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/5d90001b-d20e-331c-8bd3-6c3305994bbd.roa
File:                     5d90001b-d20e-331c-8bd3-6c3305994bbd.roa (raw, json)
Hash identifier:          jPCP6coyTNmJSKOyGh2nKlTsH2Vspapj/HL9+nTDQBA=
Subject key identifier:   56:88:53:00:34:0D:B1:5C:8D:E3:71:79:79:79:CA:F5:21:44:A0:B5
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F4328584AC2E109EEB3411DF6095E5E60
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/5d90001b-d20e-331c-8bd3-6c3305994bbd.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     53488
IP address blocks:        2607:ce00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:09:ee:b3:41:1d:f6:09:5e:5e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=f41661b0-8c70-4f7f-a2aa-fa27a0aa9d90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:47:39:01:85:b1:f7:77:c9:06:fc:df:57:3b:
                    39:de:5a:c5:af:0f:37:22:ac:9f:8f:2f:91:2e:12:
                    1e:8d:1a:8f:33:0c:44:5f:47:69:4d:8e:fd:6a:29:
                    05:ec:a2:f4:c4:39:47:84:5a:4e:ea:67:38:b5:31:
                    60:75:4a:f3:7b:49:af:fd:ac:4e:c5:f6:12:12:9d:
                    dd:c5:f5:b1:4f:52:10:5d:0a:4f:be:aa:86:db:e1:
                    4a:f9:28:33:0e:91:20:21:4b:52:47:1f:ac:d4:2e:
                    73:a6:24:9f:49:bb:3d:83:66:f7:a3:80:6e:09:f6:
                    cd:ca:5d:55:22:1c:7c:7e:85:9e:ab:e2:a2:41:b6:
                    58:a1:4a:fc:ec:e6:67:b2:2d:6a:27:8b:fc:18:5b:
                    db:c0:5a:1c:ac:94:64:20:8c:d8:05:6c:b3:e5:84:
                    77:1d:10:42:ba:da:f3:fb:3b:59:dc:e2:f5:6e:72:
                    bc:19:4b:bd:16:48:31:40:c3:5d:85:92:48:06:a0:
                    84:56:06:8a:ca:d3:e9:c6:e3:20:4e:8b:47:c4:d6:
                    51:f6:cd:be:1c:2d:e6:35:2f:a9:08:95:52:c5:e3:
                    03:52:a0:4b:de:6c:78:5e:03:fc:9f:21:9c:93:25:
                    ca:fa:7c:ee:df:3b:8b:02:4d:5b:ed:11:27:38:0b:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:88:53:00:34:0D:B1:5C:8D:E3:71:79:79:79:CA:F5:21:44:A0:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/5d90001b-d20e-331c-8bd3-6c3305994bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ce00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:91:95:88:24:7e:b1:40:1f:16:09:e7:48:50:1e:86:d3:e9:
         33:89:2b:10:5f:64:db:06:ed:78:6c:f8:e7:9c:43:34:0d:ea:
         fc:e4:44:c3:9a:35:4a:08:fc:58:c7:d9:55:73:8d:14:eb:33:
         1d:c9:cc:de:64:44:0d:d3:20:6e:53:e4:8d:d9:e9:4e:8e:d7:
         84:25:1f:f3:39:c1:49:a9:0f:fc:2d:da:50:db:a0:94:be:21:
         d8:35:d5:cf:8d:d5:56:6a:5b:c5:15:10:ff:c3:7b:0a:e7:00:
         96:12:21:0e:64:6d:ee:a6:c3:1b:02:67:d2:00:ea:8a:b7:f2:
         cb:91:a5:5d:e9:34:07:ed:dd:da:77:51:95:a6:75:3e:e6:74:
         f1:7a:89:45:29:11:d6:b9:ad:a0:ed:30:ee:cb:e0:47:02:6b:
         42:aa:fa:61:c4:81:ce:f9:ab:0f:f8:7d:ea:54:64:69:b2:0f:
         6f:47:4c:83:e5:e8:14:57:2e:19:7a:4d:7d:e0:af:68:f8:a3:
         d4:3f:b9:b8:69:c6:17:cf:af:2e:c8:70:d4:4e:ea:a9:e6:7a:
         60:ee:6c:61:df:f4:69:66:b6:a2:23:de:ea:57:9c:dd:62:d5:
         77:8a:29:c2:19:66:b5:15:19:43:73:46:27:d4:b1:f3:c5:db:
         85:bf:f7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:56:59 2025 by rpki-client