Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/8812799f-a40f-3a70-8dce-9bf172d21bea.roa
File:                     8812799f-a40f-3a70-8dce-9bf172d21bea.roa (raw, json)
Hash identifier:          v09ie4YHr91d6kTxuRDPqeD6tVKavMwEdlphtWemW7c=
Subject key identifier:   82:CF:38:40:D3:78:61:A4:A5:71:38:9A:37:EA:5E:B9:FE:97:FB:5B
Certificate issuer:       /CN=5482ccc0-e4dd-479e-a029-460a79acc9cc
Certificate serial:       010D0C9F4328584B1F016995F8F59D0FE7DD3640
Authority key identifier: 69:9D:15:4F:E0:F2:33:FA:3E:5F:B7:BD:22:BF:A1:B0:3E:95:8D:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/8812799f-a40f-3a70-8dce-9bf172d21bea.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     32809
IP address blocks:        2607:f0f8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/5482ccc0-e4dd-479e-a029-460a79acc9cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/5482ccc0-e4dd-479e-a029-460a79acc9cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:69:95:f8:f5:9d:0f:e7:dd:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5482ccc0-e4dd-479e-a029-460a79acc9cc
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=66206e80-b336-454d-8238-7c4184802713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:82:ef:ab:fc:85:61:cf:46:be:8e:20:7a:ba:
                    de:c8:56:45:ce:80:93:5e:1c:83:eb:ad:2d:1b:16:
                    80:ec:fc:14:fd:25:09:d0:cf:3c:74:37:1a:ca:3a:
                    a3:c5:bd:e7:fd:57:7a:b6:40:7c:a1:a4:0b:7b:18:
                    78:53:1d:dc:0c:7a:79:2f:88:42:e0:30:f1:5a:59:
                    09:c3:22:97:c1:d1:6c:ce:6b:fd:98:2b:d6:15:7e:
                    04:56:d6:ea:97:f9:1a:e7:09:1c:5d:c2:f7:35:4e:
                    f8:21:95:89:5a:b6:d1:79:a0:ca:fe:0a:d3:b3:88:
                    be:64:62:37:06:4e:fd:5c:09:36:6a:b8:ac:af:5c:
                    7e:42:1e:7a:f0:5c:74:84:61:54:4b:6e:1d:d0:fb:
                    74:f5:3e:52:10:2c:ac:c1:8c:71:f2:03:7d:ee:dd:
                    44:34:8b:ca:d7:f3:05:8f:18:ef:07:32:66:b3:df:
                    2a:88:de:82:6a:37:b5:46:ee:ef:2b:d9:d1:3c:88:
                    c7:85:bf:65:85:67:c2:ae:ae:e1:a1:3b:a2:17:50:
                    db:d3:cf:ed:c5:c1:03:f8:7f:37:43:be:68:45:22:
                    2f:d5:da:62:06:b7:a2:db:0d:5d:db:a1:d5:01:88:
                    ad:95:59:17:cc:74:b1:58:a8:cb:3d:40:48:46:ac:
                    d4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CF:38:40:D3:78:61:A4:A5:71:38:9A:37:EA:5E:B9:FE:97:FB:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/8812799f-a40f-3a70-8dce-9bf172d21bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc/5482ccc0-e4dd-479e-a029-460a79acc9cc.crl

            X509v3 Authority Key Identifier:
                keyid:69:9D:15:4F:E0:F2:33:FA:3E:5F:B7:BD:22:BF:A1:B0:3E:95:8D:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5482ccc0-e4dd-479e-a029-460a79acc9cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f0f8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:da:97:24:6e:e0:7d:6a:fa:b2:7f:85:cc:39:0b:ca:a2:49:
         ca:61:38:7c:c3:f9:10:20:94:95:2b:d5:52:d0:0e:35:ca:95:
         bf:d4:78:9b:3f:de:df:55:6a:b2:c0:85:ed:8a:e3:39:05:fb:
         76:82:45:6a:9a:7d:3f:a3:cf:7c:7d:af:21:63:61:8c:f4:c4:
         8f:df:00:24:69:b1:10:57:15:c3:b3:cf:11:32:0c:d7:f8:1c:
         f2:b8:19:6b:21:37:21:db:c5:74:ae:1a:8d:a0:77:5e:c3:c2:
         1c:11:33:19:ab:e1:74:8a:38:79:ff:d3:e8:32:78:04:ec:0f:
         74:be:0a:4a:67:5b:60:06:d0:6d:2a:5d:3c:71:a7:57:76:48:
         09:61:c2:58:56:92:4c:71:2a:1e:d1:35:76:3b:d5:ba:cb:ad:
         be:d3:83:b6:13:eb:1e:92:ed:57:26:b5:cf:77:9f:cc:d6:f5:
         84:0e:b1:28:f9:8b:61:57:7a:3d:38:d3:58:58:c8:51:bb:38:
         81:14:e4:df:4f:d3:9d:07:c0:0f:ed:dd:a9:1f:fc:0a:36:82:
         14:9d:88:c5:ab:4e:fe:35:4f:2f:84:5f:74:ce:81:0c:13:47:
         43:36:fe:ec:c2:05:f3:f3:c7:a6:38:02:e0:b2:6c:ca:f2:46:
         5d:06:d3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:07:25 2025 by rpki-client