Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa
File:                     17688313-b672-388e-bef1-cd24e224ed7e.roa (raw, json)
Hash identifier:          rhNm9UU0rgvJEhD5PU7warG6dKsBvsJDRv/fE7AEGu0=
Subject key identifier:   F3:81:19:61:DC:B5:07:A3:27:F9:11:52:A0:6F:86:15:30:17:46:DF
Certificate issuer:       /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
Certificate serial:       010D0C9F4328584B7DECA6600B78072A94DED280
Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     21519
IP address blocks:        2607:4640::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a6:60:0b:78:07:2a:94:de:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=028d2fd5-84f3-49a6-aec6-acd3ac8aad2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:67:ba:7a:ea:f1:63:fe:84:70:31:7c:b4:
                    16:cf:ea:4c:df:f9:70:5c:b6:5e:72:80:2e:00:7a:
                    5b:17:66:9f:be:2d:45:f5:25:8f:22:8e:d2:97:38:
                    0c:d8:7b:b0:f6:21:47:90:59:ef:89:ad:d0:ac:4d:
                    72:9f:4b:86:56:52:fa:ba:80:20:e3:03:be:3c:ae:
                    92:71:f6:d4:4c:3d:bd:f9:61:4f:23:a2:30:31:d3:
                    97:b0:d4:c7:ff:40:45:4e:54:01:23:e5:ef:1d:2e:
                    e4:b7:b0:19:09:8d:63:88:4a:0e:11:aa:b5:a4:13:
                    25:07:ff:96:c7:fd:62:f3:50:4c:de:2a:16:40:c1:
                    b0:0c:c1:eb:1d:2f:af:18:9b:1d:aa:d1:d9:fa:ed:
                    93:d8:a3:d7:3b:1f:53:30:17:e8:ec:b5:e4:6a:6d:
                    e5:c5:0c:3e:8f:5f:75:3e:3d:09:02:dc:dd:19:c9:
                    e3:0f:12:8d:ef:7d:cc:69:ba:dd:cf:eb:5a:2e:5b:
                    e5:c1:fe:6a:f7:eb:cd:2b:b1:aa:53:bf:19:b8:d8:
                    d9:7c:28:e0:8b:79:9a:97:c7:ac:bc:50:c6:98:0c:
                    ae:c4:b4:9c:f6:80:6e:ad:7f:02:5d:cf:3a:5a:b9:
                    48:46:07:19:ed:b5:e8:77:d9:26:4b:8b:bd:8c:f9:
                    ae:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:81:19:61:DC:B5:07:A3:27:F9:11:52:A0:6F:86:15:30:17:46:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl

            X509v3 Authority Key Identifier:
                keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c4:73:aa:8b:e6:49:e2:32:83:d5:7f:19:e6:ac:e9:8b:e4:
         d3:dd:31:ee:61:01:dd:0b:17:ec:96:ae:b3:e7:10:0e:5e:bb:
         64:65:a4:49:78:34:5a:49:44:7c:76:16:5f:e6:74:a1:de:9f:
         ca:c4:0e:03:b9:85:5e:3f:42:4b:23:d0:b1:53:4e:4b:39:3d:
         69:9d:5a:b9:2a:6f:b8:87:30:ef:60:79:c6:60:83:ee:9a:22:
         1f:aa:82:f4:07:1f:be:66:e8:1a:75:45:85:7d:5b:f1:f3:66:
         8b:9d:f2:65:a3:9e:37:31:95:f4:fb:2f:fb:3c:0b:4e:06:32:
         8f:76:b8:e7:36:6e:04:65:46:04:eb:5e:d9:dc:8e:36:07:bd:
         eb:30:d0:f3:79:ac:97:fd:1e:6e:c4:f4:79:b8:4c:a1:5e:b9:
         d6:e4:ac:d7:77:ef:5c:03:24:d9:00:42:6f:26:14:4c:42:9b:
         28:ca:ae:65:ef:fc:5e:c2:bc:3e:99:8c:2c:3a:41:d5:9c:bc:
         d6:d2:e7:ab:54:f4:53:d8:e6:65:1f:2b:6b:ad:d7:8c:bc:81:
         8f:23:9e:77:c6:0f:00:16:cb:4d:a2:e5:44:e2:c3:5a:2a:45:
         cf:8f:8a:9e:5e:03:5f:d5:b5:48:c8:08:0a:e2:fc:fa:73:27:
         cd:23:a3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:20:01 2025 by rpki-client