Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa
File:                     d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa (raw, json)
Hash identifier:          o8OfR7TFpe6I0NdhaFHBda93bc/OkJEr0wiqo3vm20c=
Subject key identifier:   DC:1F:CD:E0:B5:41:95:84:CF:61:27:05:7A:52:22:8F:13:8F:97:7B
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584B4FDC779695EB7CBB49E34D00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     62651
IP address blocks:        2604:c980:3400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:77:96:95:eb:7c:bb:49:e3:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=6b4a1522-2330-417f-bdf8-0dbcae2c51f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8b:ef:55:99:fb:b1:10:d1:5d:db:45:3a:6f:
                    46:14:cd:29:e5:32:0f:aa:a3:82:ec:d8:22:79:36:
                    5d:f1:51:4f:50:ff:3e:ca:45:83:a2:43:aa:dd:1a:
                    84:ff:d5:0a:79:e4:1e:6a:8e:d4:39:b4:65:a3:4b:
                    9d:3a:46:4c:3a:32:31:28:44:b4:33:ac:19:1b:c3:
                    30:ad:ad:77:7c:b2:27:be:43:5f:27:6c:15:3e:c0:
                    07:3f:71:0b:23:9c:00:9c:0a:af:30:d0:ea:d0:09:
                    be:99:0d:9b:3d:73:ce:bc:2f:44:46:d3:cc:e4:f3:
                    53:b7:f8:5b:3a:cb:02:c7:7d:16:13:39:10:e8:68:
                    5e:63:0e:cb:2c:ef:81:9d:75:95:62:0d:de:94:d6:
                    87:97:df:19:42:2a:dc:fe:90:3a:37:fb:1f:5c:58:
                    4e:58:0b:65:20:be:40:2f:3a:7b:a8:fc:5c:4f:40:
                    6b:34:fc:af:de:1c:63:ca:a3:cd:94:03:1f:6e:83:
                    49:1a:b6:27:00:36:5a:61:c4:70:d0:2b:0e:11:4f:
                    31:bd:d2:51:a6:83:3e:a0:73:29:0e:24:5e:1e:ab:
                    c7:ed:ba:bb:a0:5e:cb:81:4a:f1:da:c7:0e:eb:ea:
                    d6:69:8f:a6:6a:64:c0:bc:6b:2c:19:e3:e8:77:d0:
                    55:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1F:CD:E0:B5:41:95:84:CF:61:27:05:7A:52:22:8F:13:8F:97:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d48eeb3c-0fe2-3714-b85b-a5fa9fc78aa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:3400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:3d:3c:f3:92:7c:66:b9:06:49:34:e6:0f:32:1e:87:5e:45:
         2f:b7:20:6b:5e:c2:0f:74:28:ce:90:35:fc:e8:f1:54:7f:e0:
         e2:b6:49:83:cb:16:ea:50:be:be:f6:d9:48:c1:ef:53:03:37:
         20:bc:23:2e:af:c9:c5:af:12:ba:ae:88:81:39:df:7e:de:e2:
         f1:9a:13:76:48:87:06:06:be:5b:9c:f1:97:4c:12:2b:91:13:
         9f:5b:aa:6d:2d:2d:ae:4c:46:57:9e:6d:f8:c7:48:20:37:ff:
         d3:2d:e9:ba:a1:14:52:81:ac:7b:b8:96:fc:3f:f3:10:81:1a:
         1b:12:f7:84:82:45:42:ed:55:46:6b:fe:30:dd:b5:3a:72:63:
         49:56:2c:d8:34:37:bb:40:73:d0:cd:05:9f:c7:8e:f7:47:99:
         3b:d8:4f:5b:13:2d:e5:b3:be:f5:ea:0e:48:17:c3:0a:8f:e6:
         df:1d:c7:a6:e9:ea:23:42:d5:dc:22:6f:58:e5:f6:4f:ce:df:
         f8:ea:ba:54:a9:b5:99:e7:a8:e6:a5:6d:1b:d9:21:9a:16:90:
         d0:9b:44:cf:fd:13:c3:82:29:3a:fd:a3:91:5f:28:93:e3:dc:
         ba:0f:3a:7d:dd:f4:c0:20:58:be:6f:6b:df:79:d8:16:b7:d0:
         91:bb:9d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:36:20 2025 by rpki-client