Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cc0a5f14-0f4f-3a8b-ad60-c6e64446b7da.roa
File:                     cc0a5f14-0f4f-3a8b-ad60-c6e64446b7da.roa (raw, json)
Hash identifier:          y46votbj/RyfD9pfyrv+Ls6WemhX+B7Orx/dFSZxtF0=
Subject key identifier:   69:05:B2:C7:87:74:0B:06:1D:71:7D:8C:19:98:17:26:2D:BB:A1:32
Certificate issuer:       /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Certificate serial:       010D0C9F4328584ADA9BC96228C23AE69CA7C4C0
Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cc0a5f14-0f4f-3a8b-ad60-c6e64446b7da.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     23158
IP address blocks:        2606:d580::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:c9:62:28:c2:3a:e6:9c:a7:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=72361654-6a3c-4305-8eaa-d40955eab7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ef:07:9a:4a:9f:98:b3:0d:e7:00:1a:c9:e4:
                    5d:7b:51:38:d9:7b:8f:de:82:3a:b9:47:21:be:93:
                    fc:52:43:ae:02:97:33:6e:4c:39:e3:0a:8a:30:ab:
                    89:ad:86:bc:a9:ff:c5:85:91:78:02:c0:58:00:2e:
                    50:96:28:19:c8:77:22:b2:a8:bb:32:39:db:e0:12:
                    ac:4f:c2:65:2b:9d:75:ce:9b:81:9f:0e:dc:de:44:
                    9e:0c:90:f9:3a:94:70:07:d3:35:2c:69:b7:00:91:
                    75:52:50:79:0f:79:83:de:f7:ee:f3:89:31:92:e8:
                    1d:10:1d:7d:70:5d:9d:55:b3:9b:59:3c:34:40:96:
                    34:bf:3b:d4:dd:9f:6b:c2:c9:2f:af:03:0a:4e:6d:
                    4c:b6:58:c4:e0:fc:8b:d0:b2:2d:2c:4c:95:7c:43:
                    2c:78:32:96:a9:74:a7:25:7d:8c:2c:82:b0:21:84:
                    bf:ee:c5:68:8e:e6:2b:16:0f:97:de:6e:57:4b:ee:
                    df:a7:83:c8:d7:80:8d:05:83:0c:6f:02:14:80:cb:
                    9a:9f:7b:0b:98:4c:7f:90:28:ac:3b:6a:b8:42:75:
                    f1:d1:43:8c:6a:8a:c6:0c:34:88:5e:df:16:3d:d7:
                    cc:c0:4d:78:14:07:ce:7b:50:70:c3:00:fd:f9:8d:
                    dc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:05:B2:C7:87:74:0B:06:1D:71:7D:8C:19:98:17:26:2D:BB:A1:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/cc0a5f14-0f4f-3a8b-ad60-c6e64446b7da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl

            X509v3 Authority Key Identifier:
                keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a6:92:01:a3:7b:42:67:3c:2e:71:0d:c0:b7:04:a1:a6:57:
         ff:cc:71:c2:9a:a4:63:b2:3d:96:9d:7e:4a:17:4c:0e:ef:22:
         18:db:50:96:8a:77:85:2c:92:f3:42:95:ec:59:8f:10:47:28:
         6b:1f:7e:71:a9:3a:f7:b7:63:4a:eb:ba:a7:b1:ff:dd:4f:d4:
         bf:7a:dc:2b:a1:8a:f8:40:52:df:7e:9c:11:09:38:e1:e9:72:
         01:2e:d8:2a:fa:a0:5d:bf:71:54:93:2c:f2:2c:1e:24:6b:50:
         96:c2:b5:30:e9:9c:bf:55:18:e2:c5:7c:85:12:68:82:28:00:
         7a:6c:9c:b0:bd:77:68:59:70:2a:02:52:8b:91:66:1c:ae:27:
         1e:b7:78:32:55:e7:2b:33:f2:07:5e:16:65:96:af:60:16:27:
         f1:9c:da:7f:96:09:11:f1:ac:78:74:66:9e:d2:c0:d0:1d:ea:
         ad:7d:76:3e:9f:fc:29:e6:be:18:7a:3d:2b:38:36:24:28:e7:
         cb:1d:f7:df:27:1f:fa:c9:a8:45:bb:5b:37:1d:7a:3b:25:2c:
         7c:ba:55:9e:57:39:eb:c9:a7:10:a6:90:97:4e:1a:06:84:48:
         75:32:e2:15:2a:f5:d7:b4:0d:7a:8e:be:1f:7e:73:80:7c:18:
         97:64:b1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:17:12 2025 by rpki-client