Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/0dcce072-7067-3363-a617-b24b130d5077.roa
File:                     0dcce072-7067-3363-a617-b24b130d5077.roa (raw, json)
Hash identifier:          B5eKs2+TGPd4FtVdNMizP8sta8XDbQQ0SLLOF2XraIo=
Subject key identifier:   CE:A9:54:25:AF:A6:5A:4E:FD:4D:2F:92:C1:06:AC:50:E0:00:45:65
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584B715CB84A874ACF8A10104000
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/0dcce072-7067-3363-a617-b24b130d5077.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     14031
IP address blocks:        2001:468:1f07::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:b8:4a:87:4a:cf:8a:10:10:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=b452b3a0-f91d-4a9d-89ef-f7148600f8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8e:21:6f:dc:e5:8c:8c:34:96:3b:04:a3:6f:
                    cd:8b:2f:20:04:ef:54:aa:20:54:bc:78:cb:50:d3:
                    e1:4d:e8:62:b0:70:f7:b6:ec:09:e9:40:b9:72:0f:
                    00:c7:b3:c2:6d:0b:bb:e7:83:65:09:17:cc:d6:0f:
                    3d:4d:62:52:e1:62:80:88:0e:48:64:35:9b:81:7f:
                    0b:eb:81:8a:4f:63:e9:80:69:cc:a2:b2:4d:f5:21:
                    57:e9:76:5a:16:3e:63:b8:af:25:d9:3d:da:3f:0f:
                    35:a3:f8:ae:3c:ef:0a:89:79:d4:50:d4:42:5c:1c:
                    5e:d4:2b:83:c0:d3:65:08:8e:11:b5:9b:97:15:a4:
                    d1:d5:fd:b9:03:26:37:90:54:b2:4c:94:0c:45:b6:
                    c6:18:c5:1d:8a:59:11:e0:d4:10:32:8a:ea:66:bb:
                    71:57:1d:6a:c3:fb:90:ae:c0:ff:9b:49:cc:ea:18:
                    91:6a:c9:c1:ca:01:69:60:df:8d:9d:00:00:55:e0:
                    bd:00:a1:3c:e6:16:c3:94:00:fc:b7:b2:73:06:8a:
                    3c:fd:45:0f:08:7d:f0:b9:39:1f:88:f6:77:ba:55:
                    dd:20:8a:dd:a0:36:05:e9:a4:d7:3c:95:48:7b:7c:
                    68:09:96:7a:ad:17:10:ed:ad:1e:fa:f2:21:7d:2a:
                    5a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A9:54:25:AF:A6:5A:4E:FD:4D:2F:92:C1:06:AC:50:E0:00:45:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/0dcce072-7067-3363-a617-b24b130d5077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:1f07::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d0:cd:36:b9:a8:42:af:a1:95:63:d1:d4:ed:b7:8f:7a:49:
         20:ee:8c:81:9e:02:4d:43:40:82:ec:fd:0d:ba:bb:61:d1:86:
         b5:59:66:74:f8:3c:ab:4c:71:98:64:aa:8d:1f:9b:be:2a:59:
         bc:00:d3:68:f4:85:32:e0:25:42:d9:23:78:ff:4a:7f:4f:f6:
         09:05:94:a9:35:a6:78:ea:33:34:10:42:0e:1e:ca:8d:1b:90:
         ab:10:45:70:6b:16:e2:a4:20:85:59:93:8f:fb:9e:f3:a9:f2:
         9c:0d:1b:fc:de:60:86:85:27:20:1f:2d:c0:af:c7:c7:da:ee:
         1b:36:20:2f:0f:b4:96:98:41:8d:20:96:5f:f5:67:4e:2c:49:
         85:92:e0:60:35:04:60:aa:c2:03:6e:74:4a:36:44:5a:a9:ad:
         52:03:5d:78:df:61:6c:e8:9a:38:69:5d:44:ec:c1:dd:65:93:
         48:e8:b4:10:f7:be:5f:f3:3c:1c:60:26:f2:1e:79:b9:4b:5d:
         8a:ff:68:dc:fb:50:82:a8:0f:b4:f4:86:c4:28:0e:8f:dc:6b:
         dc:5f:91:3f:93:7c:df:81:59:71:3f:7c:2c:64:f2:21:b8:53:
         0c:4e:5d:09:d5:d9:10:a3:d3:53:77:ae:17:07:06:9e:69:09:
         66:27:b4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:03:22 2025 by rpki-client