Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/92aee7d1-3371-3968-b369-67a5425209e6.roa
File:                     92aee7d1-3371-3968-b369-67a5425209e6.roa (raw, json)
Hash identifier:          v0giOt+ucRcqOkHtF0syL6tYEqis/xcsoTX4JxRJIUc=
Subject key identifier:   B5:07:AC:99:19:47:AA:8F:89:98:AF:F8:90:C8:D1:5A:20:D0:96:EB
Certificate issuer:       /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
Certificate serial:       010D0C9F4328584B758C93EEBB59F7DB0EEC8F00
Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/92aee7d1-3371-3968-b369-67a5425209e6.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     1206
IP address blocks:        2001:5e8:ffff:4::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:93:ee:bb:59:f7:db:0e:ec:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=3242083c-2111-40da-8f32-15bb3f3b7377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:80:a2:54:53:bb:48:ae:e2:ef:67:c0:8f:dd:
                    b8:51:44:8c:c6:3f:73:3d:97:a1:a2:84:29:64:45:
                    c3:4f:db:7b:f0:d1:ed:e2:50:0c:11:84:21:fd:b9:
                    2a:8d:57:ca:a4:32:33:62:6a:ff:a9:a8:38:2a:74:
                    c6:c6:79:49:ab:6a:e6:fe:ed:82:22:37:3b:9e:36:
                    57:7b:4d:ae:00:55:1e:e8:7a:d5:b7:76:e8:75:91:
                    0a:cd:c0:2a:c8:ae:ac:f6:57:d9:4e:5c:a3:2a:c5:
                    65:70:54:37:75:5d:62:75:a5:90:b1:c8:52:27:8a:
                    d8:9e:f6:ea:da:56:3e:ed:1e:2e:5a:b5:b6:82:63:
                    6b:f8:6b:dd:ad:6f:84:46:ff:45:ec:6b:54:83:d6:
                    52:8e:cb:9f:7c:b4:be:7d:31:17:e3:35:73:47:50:
                    b8:b0:b2:f8:01:f1:44:1e:70:b3:ef:97:c5:7d:bb:
                    f1:fb:e0:df:4e:5c:28:59:8e:5b:0d:4c:5b:31:c6:
                    52:a4:b7:8f:38:29:b3:71:f7:31:a0:58:7a:8c:5e:
                    0b:c2:a7:94:e5:33:e0:42:11:a1:fd:69:cf:e6:2d:
                    a5:60:8c:28:e3:fe:e6:ec:14:9b:f3:6b:a4:4c:5d:
                    76:5e:fb:2a:2e:2c:49:65:19:7e:a9:34:7d:6c:e5:
                    c0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:07:AC:99:19:47:AA:8F:89:98:AF:F8:90:C8:D1:5A:20:D0:96:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/92aee7d1-3371-3968-b369-67a5425209e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5e8:ffff:4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:de:35:1b:34:02:dd:9d:f9:b0:5b:08:00:57:da:5a:f4:1b:
         2b:8d:12:8f:08:ba:68:12:5b:19:eb:ce:9e:a7:f2:0f:24:78:
         22:d5:44:3e:12:7f:21:20:18:72:3b:4e:9b:4c:ff:26:07:36:
         eb:3b:46:c2:af:bd:65:18:eb:05:a8:00:0d:36:05:3e:0e:9a:
         51:1a:3b:c5:47:1e:e0:a8:89:e8:56:23:4b:0b:47:73:00:c0:
         01:79:2c:a9:d4:00:8b:87:71:6a:fe:4b:41:71:cb:d2:a7:84:
         c9:46:18:d7:35:66:b6:86:72:3c:62:b7:ec:6a:fd:b0:32:6e:
         88:e4:0e:c5:06:74:42:94:c6:42:be:fe:ab:1c:08:d8:49:bf:
         35:6b:a7:ed:5e:28:2a:7c:26:9f:b4:4d:a4:72:dc:4a:3c:d3:
         c9:da:47:da:03:0e:66:1c:ed:dc:9a:d5:d4:17:2c:7b:1a:c6:
         ca:87:58:f8:66:25:2e:f1:5a:79:92:d0:31:4d:f7:d2:05:7e:
         49:17:30:54:61:a1:a3:10:f7:a9:b4:70:4d:f5:e5:d7:14:e1:
         07:7b:0f:21:b0:93:d8:31:d5:7d:9d:e7:1a:87:a9:f7:0b:a4:
         3e:08:bc:a3:08:26:c9:05:bc:e9:d7:dc:93:4a:51:85:cf:fb:
         60:40:eb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:51 2025 by rpki-client