Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/6c1b2b16-33d3-3207-bebe-9ab4bb7af3fe.roa
File:                     6c1b2b16-33d3-3207-bebe-9ab4bb7af3fe.roa (raw, json)
Hash identifier:          R115r8k4ySUuzN7oBMCXTu/x/NsgdL6xvjZCcKBmI7I=
Subject key identifier:   47:7F:FD:6D:A6:6A:87:C0:D2:BB:3D:A5:FD:62:69:92:FF:BF:CF:12
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B6E91F8A5096D8987EB5EE380
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/6c1b2b16-33d3-3207-bebe-9ab4bb7af3fe.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     22652
IP address blocks:        2607:fad8:1101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:91:f8:a5:09:6d:89:87:eb:5e:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=27d10363-d841-4194-afca-8f01e0e6ff79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:71:69:db:56:6a:dd:3a:2f:79:b9:e1:19:4d:
                    5b:4b:c9:91:4a:8d:86:71:77:d9:5d:dc:a5:d6:40:
                    ba:28:1b:c6:f7:27:c2:04:39:c3:85:b4:3a:2b:f0:
                    24:59:f9:4c:59:fb:c1:16:41:83:5d:34:cb:61:f7:
                    9d:f0:70:73:fb:7b:94:32:68:2d:76:3b:c0:a3:c1:
                    46:bd:f6:dd:25:f0:8a:70:c6:cb:c2:c4:7d:53:94:
                    10:aa:85:11:69:5e:d1:87:3c:c3:ea:07:d8:35:d5:
                    ce:a8:1a:80:99:38:65:9f:c1:37:00:34:b7:9e:07:
                    e3:9d:59:27:78:3c:70:54:2e:61:91:65:f0:42:6b:
                    c5:b0:cd:a6:30:5c:91:44:dd:98:89:11:a2:b0:09:
                    c4:99:f7:9f:54:1c:36:e5:6e:5a:66:f0:d4:3e:ae:
                    24:7d:4e:98:46:01:0e:4d:a9:23:f9:04:ac:9e:6f:
                    c6:77:a1:2c:bf:ad:53:9d:63:ba:f9:8e:b7:64:eb:
                    83:b3:c8:ba:2d:a3:2c:31:06:1a:f6:b1:bf:b9:94:
                    c7:a1:64:30:5d:16:36:4c:05:48:41:27:cc:b9:af:
                    9c:ae:a8:ca:20:4f:b5:9f:6a:5a:29:1a:d2:cf:4e:
                    d6:e5:27:3e:d9:b0:de:c8:25:d3:f9:d0:76:62:78:
                    91:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7F:FD:6D:A6:6A:87:C0:D2:BB:3D:A5:FD:62:69:92:FF:BF:CF:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/6c1b2b16-33d3-3207-bebe-9ab4bb7af3fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fad8:1101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:44:c0:2a:fd:73:fc:7b:a6:e6:3b:bd:9c:ef:8e:b7:25:11:
         69:d1:e9:9f:74:63:c1:a7:46:e3:c2:62:a2:86:ab:65:da:1b:
         36:d0:0d:37:2e:53:ab:60:61:e8:cc:f4:45:4e:8d:ce:a4:41:
         89:72:eb:eb:38:69:15:81:52:16:a9:9d:08:05:db:cc:d0:04:
         f5:cf:84:e7:85:e2:4d:72:49:ff:c9:e1:2b:36:ac:10:6a:12:
         33:b3:bb:ef:53:cc:2a:d5:56:81:ef:bd:71:da:42:85:0f:45:
         58:43:9d:01:24:89:46:05:7b:4f:f0:4f:e0:ce:64:03:1d:8a:
         44:fa:2e:77:24:95:3d:25:66:29:3e:ea:01:e0:49:96:be:7a:
         f9:85:80:9f:9d:03:04:fb:72:f0:40:29:33:27:be:0e:f7:32:
         cb:63:c9:cd:aa:5c:fb:2c:37:4f:d0:e3:22:70:9f:3f:2a:3d:
         2e:25:9c:10:87:25:56:90:d4:76:28:dd:8a:bc:b7:3b:55:26:
         78:75:31:ad:b9:5e:88:e7:4a:51:71:31:4b:e8:7f:2e:12:0d:
         85:19:b4:1b:17:b2:4d:44:6a:18:09:8c:f6:0e:6d:ff:b9:45:
         38:36:80:0c:43:07:79:4b:e0:2d:4b:ca:17:d2:6e:f4:b0:b6:
         38:84:44:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:59 2025 by rpki-client