Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/7215f95f-6e55-3b15-8e6e-10d97b2f7823.roa
File:                     7215f95f-6e55-3b15-8e6e-10d97b2f7823.roa (raw, json)
Hash identifier:          /Tgl5mhs8d5WRBiHT0DT6Vh4/xExrHWvz6A1MJ29YhA=
Subject key identifier:   5C:E5:01:A0:15:B3:86:D9:46:9A:97:5F:62:2A:92:10:3E:0E:FB:5E
Certificate issuer:       /CN=4c6110af-3017-4d96-90e3-d18a76894aa0
Certificate serial:       010D0C9F4328584B79BCB8183BD3D270D0856AC0
Authority key identifier: 1D:4E:47:BB:5F:EB:81:68:82:A9:C5:B9:31:12:69:9E:F7:7D:28:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/7215f95f-6e55-3b15-8e6e-10d97b2f7823.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     394333
IP address blocks:        2604:51c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:b8:18:3b:d3:d2:70:d0:85:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c6110af-3017-4d96-90e3-d18a76894aa0
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=592a4a6e-b814-42eb-b13b-7e4d8327872b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9c:5f:2e:58:cb:5a:1d:15:82:1d:20:34:d1:
                    c7:b5:f5:86:ea:47:66:51:ff:6b:ac:e2:29:0a:bf:
                    6f:8a:05:43:00:fe:5c:ad:f5:9f:20:dd:ec:3e:d4:
                    89:86:c6:e0:85:52:61:e2:2e:53:02:2d:0d:93:c7:
                    6f:c5:dc:fc:f1:c9:79:19:90:08:41:93:9a:36:56:
                    27:7b:60:64:53:69:cc:0d:fa:76:29:64:1c:a5:7f:
                    d1:e7:4f:b9:6c:6f:58:e0:8b:52:87:37:1b:b0:4e:
                    fb:7f:cc:ff:3e:61:62:8f:a0:04:95:8b:61:29:32:
                    b0:2e:85:64:59:76:68:69:e3:a4:fd:5a:57:c7:4e:
                    a4:8e:21:50:54:4e:37:24:a4:e4:06:92:89:51:28:
                    94:33:1d:14:f2:d1:85:fd:73:2b:a1:cd:2c:2b:8f:
                    a5:81:e0:28:aa:f9:1a:33:f1:63:79:52:d5:49:5a:
                    25:80:e0:f1:a7:40:ce:82:34:d4:a6:63:1b:fe:a3:
                    5e:4c:a7:79:84:55:ca:d1:90:c9:d6:2b:de:2a:9f:
                    ff:17:d1:f5:51:c0:9a:d9:97:87:48:e0:99:1c:39:
                    4f:92:8f:86:6a:fb:41:83:85:c1:43:50:64:c1:d8:
                    c5:46:ee:d0:a9:b9:fe:3b:eb:55:5c:ba:bb:ce:bd:
                    f9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E5:01:A0:15:B3:86:D9:46:9A:97:5F:62:2A:92:10:3E:0E:FB:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/7215f95f-6e55-3b15-8e6e-10d97b2f7823.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.crl

            X509v3 Authority Key Identifier:
                keyid:1D:4E:47:BB:5F:EB:81:68:82:A9:C5:B9:31:12:69:9E:F7:7D:28:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:51c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:79:03:3b:6b:b1:24:b7:a8:7b:6c:16:10:e6:e3:7f:c6:b9:
         fb:81:1f:d3:11:90:08:e9:87:0c:0f:e9:e5:5c:2d:80:2b:f3:
         c2:b9:f6:dd:9f:6e:d8:ee:0f:85:46:f2:08:e5:ef:b6:f8:74:
         10:59:8d:db:65:ed:d7:58:a6:b1:8c:8b:95:c6:42:3c:c8:8e:
         e1:0a:5d:69:c7:a4:06:27:76:92:85:26:cf:15:cd:b7:de:b2:
         23:2c:77:b8:ae:d5:e7:5b:e4:45:4e:1a:5c:d1:f8:1a:81:c1:
         54:25:bb:e7:68:b1:f2:e0:a2:fe:d3:9c:61:78:d2:4e:38:d0:
         a0:a4:b7:d6:0b:b3:1e:5d:9b:fb:60:21:be:d1:78:44:e6:57:
         a0:05:a2:f7:f1:e1:3f:c3:35:d2:bf:bd:47:84:39:83:08:05:
         79:28:9a:ce:ee:04:00:e0:e4:0b:e1:94:4b:8c:3a:df:44:72:
         eb:7e:3a:4e:af:e2:0b:30:ea:3c:d6:32:53:af:7b:e4:8d:a9:
         27:40:b3:29:ce:e5:93:d9:21:f2:a3:e5:a6:a6:49:e0:3a:0c:
         3c:13:49:dd:a5:5d:0b:66:d7:e2:30:c1:d4:be:1a:ef:08:7c:
         35:80:16:c0:18:d4:fd:51:49:c8:61:c2:82:60:29:1e:e2:28:
         fc:f5:b2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:05 2025 by rpki-client