Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/01259f44-7b0a-3214-9e77-66d79c010a77.roa
File:                     01259f44-7b0a-3214-9e77-66d79c010a77.roa (raw, json)
Hash identifier:          EWwX5u21hdVm5EsGS0x+xcvfVRcmOhQRACGGZBPp718=
Subject key identifier:   15:AE:CB:02:F1:AE:CA:3C:78:9E:0A:44:3D:D3:89:07:32:AC:E7:10
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B6BC743ADDDA087034522692C
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/01259f44-7b0a-3214-9e77-66d79c010a77.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     401287
IP address blocks:        2607:fad8:1201::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:43:ad:dd:a0:87:03:45:22:69:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=d9d0bf69-8a50-4279-99e6-9c6ccc897b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0e:e7:73:72:90:54:97:c5:56:35:3e:f7:dc:
                    55:2e:9f:9d:4a:ad:34:e6:b9:07:50:d4:11:6e:9c:
                    28:74:f4:f2:a5:ca:37:b3:3d:1f:01:51:35:ae:f3:
                    54:ac:8d:f5:c0:dd:7c:61:47:0b:17:1f:46:61:54:
                    b8:e9:8c:37:f3:36:e8:76:32:41:7e:12:40:81:42:
                    49:4d:01:4e:f9:51:c0:10:a3:93:ea:65:4c:7e:6c:
                    14:94:e8:1c:a5:dc:4d:55:c6:56:c2:27:f4:b2:6f:
                    5f:4d:be:2e:7d:44:35:a1:46:29:8c:d5:db:21:54:
                    09:fb:55:75:95:95:91:d5:6b:45:0a:0b:9c:f2:a8:
                    42:97:c9:80:74:c3:78:28:2d:35:0a:58:78:39:b5:
                    d4:82:e1:54:16:30:11:44:2e:e3:f4:ea:01:70:2d:
                    c1:da:bf:ef:b5:bc:3d:e1:9d:a6:0a:06:ae:fb:37:
                    5c:3b:92:7f:4b:c8:af:84:17:fb:58:f1:1e:36:d2:
                    02:92:a4:6a:65:17:9c:07:1c:7a:af:83:9b:fc:cb:
                    7b:3e:d4:18:ab:f4:96:3b:91:60:05:20:ee:68:0e:
                    1c:43:09:18:7c:e1:4a:b6:b7:4b:cf:61:e8:0a:ba:
                    58:78:cd:5d:85:db:a1:56:fb:d3:12:08:7e:01:69:
                    aa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AE:CB:02:F1:AE:CA:3C:78:9E:0A:44:3D:D3:89:07:32:AC:E7:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/01259f44-7b0a-3214-9e77-66d79c010a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fad8:1201::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b5:4f:59:3d:2d:f5:cc:55:fd:09:58:9b:8e:dd:8a:e6:06:
         31:b7:d9:74:b7:3c:38:c4:66:13:1a:70:84:96:58:55:70:c9:
         42:c8:b2:3c:e0:41:15:b9:77:95:71:57:6a:ba:91:c3:fe:76:
         34:9f:d9:99:9a:5a:db:8d:64:de:4c:d1:cd:ee:77:9a:5e:18:
         2b:8c:56:96:e3:c0:a9:5b:f2:57:d7:71:54:a9:1f:2e:be:00:
         21:39:73:63:e0:96:fb:6b:03:37:00:1e:43:35:a4:c0:68:b7:
         83:b3:27:85:2f:88:f4:19:fb:7d:c6:0c:f1:48:33:a3:4f:33:
         5d:57:76:ee:f2:2a:4a:2e:ea:06:15:a0:be:91:44:9d:df:3d:
         f2:98:8c:af:ca:84:ea:38:b6:1f:f4:5a:1b:47:8c:33:43:ac:
         8a:b4:7f:36:1c:4c:f3:48:b4:cf:ef:82:d5:24:2a:48:2c:12:
         38:ca:82:49:0a:e1:3d:c6:31:7e:82:62:c5:c0:f2:00:44:38:
         37:c6:7b:c1:a6:6f:24:10:9d:4f:f4:6d:23:06:4c:63:3c:f8:
         46:42:08:a1:4e:d7:7e:48:66:6e:84:86:f1:d6:d0:e7:49:53:
         ea:1b:b1:64:d6:eb:a8:de:69:7f:6c:bd:ec:ad:4f:a5:23:25:
         0c:58:69:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:19 2025 by rpki-client