Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bac42415-fae2-3af2-804e-7915f8309a0d.roa
File:                     bac42415-fae2-3af2-804e-7915f8309a0d.roa (raw, json)
Hash identifier:          QjBpNylluLapw1Qc4s61ohp+V+DoAQQ/1J3mK4+KORA=
Subject key identifier:   2A:E5:CA:56:62:1F:B9:A4:6D:DC:C3:73:E8:A9:AE:A9:6F:AE:8A:4E
Certificate issuer:       /CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
Certificate serial:       010D0C9F4328584AECC1498A87D02DF8D798B780
Authority key identifier: 95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bac42415-fae2-3af2-804e-7915f8309a0d.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     1207
IP address blocks:        2001:5e8:ffff:3::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:49:8a:87:d0:2d:f8:d7:98:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=c47af692-0f61-4487-b3f3-235b8f5a7f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:32:6b:3b:85:e8:52:05:0f:13:8d:4a:ac:04:
                    5a:5f:cb:7e:2d:78:87:41:36:73:94:94:d2:7e:9b:
                    5a:ca:44:86:55:f7:b6:c6:4e:5c:1d:88:53:8a:e0:
                    b2:00:d8:54:9b:49:61:9a:33:db:74:37:8f:71:83:
                    98:26:49:f7:56:6d:c3:47:1b:e9:e7:5c:3a:71:b4:
                    f3:80:c7:89:bf:c7:0b:77:a3:25:e4:9f:4a:61:f7:
                    82:3d:05:76:be:00:52:d1:b2:49:8e:f0:d0:0c:59:
                    05:fb:98:f1:45:d4:c4:b6:a2:8c:38:3f:b1:60:a3:
                    b3:5a:68:83:2e:71:e5:14:b5:82:80:fb:55:33:a4:
                    8f:9a:46:89:1b:81:bb:1c:48:d3:b7:52:ed:59:d3:
                    b3:4f:f1:a0:66:4a:e8:2e:64:77:c0:44:83:85:77:
                    de:99:4d:67:ad:75:28:c9:fe:d9:b5:56:60:58:d9:
                    c0:e6:39:2b:14:01:3f:e7:fd:2c:66:1c:15:f8:d1:
                    1e:1b:7d:46:c4:b5:e3:50:ca:d0:f5:34:3e:9e:1b:
                    60:4d:1b:89:cb:f9:35:fb:34:c1:ec:8a:5a:c6:25:
                    c1:83:46:d2:8a:79:a0:12:b0:66:da:62:b2:c5:a7:
                    3a:e3:0f:62:4e:d3:9d:6b:fb:1f:b5:bd:17:84:23:
                    48:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E5:CA:56:62:1F:B9:A4:6D:DC:C3:73:E8:A9:AE:A9:6F:AE:8A:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bac42415-fae2-3af2-804e-7915f8309a0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:7A:BE:8F:70:2F:0D:84:54:C8:09:29:F5:57:2B:71:9D:0A:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bc3d8cf0-e8c5-4bfe-a8a7-28ea618bcaf5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5e8:ffff:3::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:6a:c2:80:57:28:4f:65:d5:1a:44:78:b2:e1:53:f1:7e:88:
         a2:18:d2:08:8f:30:69:bf:90:8d:9c:3e:8c:ab:90:9c:c0:f5:
         c2:d9:94:56:ec:f0:2e:ae:13:e3:10:f7:b0:86:9c:2c:dd:2e:
         39:1c:86:8c:3f:e5:ce:ea:eb:81:87:dd:a0:ee:0d:74:25:b2:
         e6:34:39:1a:d2:8c:83:dc:6c:fe:cb:48:62:73:10:77:3a:b0:
         13:24:e3:95:ae:57:8b:b5:43:f6:2f:31:3e:99:cb:43:1d:66:
         4c:cd:43:f1:71:bb:ab:f0:05:fd:e1:19:3a:ff:62:d9:5a:59:
         29:e5:0e:0b:e9:dd:55:39:f4:90:51:2f:4a:e3:3a:b9:a4:2f:
         77:ca:95:23:6f:09:84:a4:5f:65:b9:26:e5:8d:c0:61:43:42:
         4c:53:5b:2f:83:5b:41:44:0f:a2:7d:a5:a8:ed:8b:78:7c:dd:
         07:2e:25:7a:e5:b6:d3:60:e5:7e:8f:69:cc:b9:70:1d:01:5c:
         62:35:0c:6c:7d:b0:cf:b0:a4:cd:30:fc:6c:22:22:c5:01:f3:
         22:f1:b1:42:1a:81:0d:f6:b9:e1:5b:b3:4e:ff:83:60:a8:2e:
         33:d9:99:d1:6a:54:0a:19:69:9e:f1:79:fc:8d:15:17:81:ce:
         20:31:72:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:45:37 2025 by rpki-client