Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa
File:                     ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa (raw, json)
Hash identifier:          fIxlDGoROz/VTB6064CoRJhSOx7riT1Ce9mjrvzn8+A=
Subject key identifier:   A2:D7:D1:22:D5:DB:18:38:80:86:78:1D:C1:7B:DF:7F:91:B0:F7:1A
Certificate issuer:       /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial:       010D0C9F4328584AD23BD403E17A9ACA2086B510
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        2607:d540:fc0::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:d4:03:e1:7a:9a:ca:20:86:b5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=750d5816-b3ae-448d-8370-2969caa009ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:30:a0:34:f1:f3:3d:d1:94:8f:47:50:cb:7b:
                    25:0f:6d:f7:dc:ff:77:ba:47:8e:14:af:6c:e0:2c:
                    7f:69:a3:20:3c:21:19:e2:e4:1b:3a:d4:71:bf:c1:
                    16:89:8f:5a:a9:a6:f5:f0:95:88:ce:43:ae:3e:30:
                    ac:ad:f0:5f:90:11:31:dc:64:0d:3d:2a:f4:77:04:
                    f0:ed:04:26:43:69:c4:f0:01:25:1f:c7:78:84:cf:
                    b7:a8:f6:fa:32:e1:6f:a3:ad:a9:6f:66:49:00:a8:
                    15:96:8d:75:a3:da:d5:32:d1:3e:d6:00:02:d7:37:
                    7d:cf:d2:88:28:b2:a1:a5:38:0a:d9:0e:42:00:76:
                    45:d2:73:0a:7b:b3:84:a2:29:75:53:9d:7b:e6:c9:
                    fa:e2:e1:1e:81:c1:34:68:06:9c:9a:84:b2:f6:27:
                    30:15:13:4e:7c:23:e6:76:e1:7e:60:8b:80:66:1d:
                    05:1f:47:21:1a:10:c3:55:72:28:20:e6:04:7b:9e:
                    20:43:5f:f3:08:5d:b8:0f:79:f5:5f:5b:41:55:ac:
                    96:a4:39:5a:c8:94:f9:ca:fa:24:a8:29:ba:07:c8:
                    e7:bc:7e:52:17:f5:e1:27:48:ec:5e:e5:37:d1:ad:
                    f0:89:71:83:74:15:86:0f:14:ab:b8:cd:d6:38:9b:
                    6a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D7:D1:22:D5:DB:18:38:80:86:78:1D:C1:7B:DF:7F:91:B0:F7:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ceaf5b6c-7659-3afa-b35a-011fd1d7aac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl

            X509v3 Authority Key Identifier:
                keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d540:fc0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:bb:3f:40:4e:c9:4f:67:bd:34:a7:20:18:53:1d:cb:e9:8a:
         1d:09:6f:47:2b:99:b0:da:2c:26:a3:02:cf:5d:3e:a2:68:05:
         ea:b5:17:02:69:20:df:57:28:3a:cb:a3:ba:d0:8c:ef:6e:3b:
         ce:fb:7b:9b:62:eb:a6:64:12:fb:4e:b2:fb:15:29:28:27:98:
         48:38:ce:43:65:00:19:ce:1f:24:13:d6:17:16:8d:83:d9:91:
         08:9d:bb:f3:fe:03:e7:c2:42:f6:80:54:04:2b:e2:3e:25:88:
         78:40:41:78:91:43:02:8a:55:6b:27:4c:eb:37:1e:f7:13:03:
         c7:6d:64:b4:72:fb:f9:e2:5d:78:cb:db:59:e5:8b:3f:4a:58:
         45:68:72:56:6c:98:b9:19:57:ee:06:5f:b0:70:3c:0c:6c:01:
         2b:cd:ee:92:00:06:42:1d:f2:50:81:da:1a:e7:ee:c6:d2:7f:
         2e:32:a5:f9:f1:9c:ca:ca:e2:6f:24:70:39:cb:6b:84:18:b5:
         df:21:5a:5c:f1:f8:6f:fc:ba:ab:62:98:8a:4f:a5:fd:72:e4:
         dc:9e:70:98:31:c4:44:76:be:80:b0:ed:c8:f5:ec:c0:a5:82:
         40:d8:d9:e3:f7:73:0e:4d:bb:6f:11:88:b2:d0:3c:01:24:dd:
         03:57:4a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:38:21 2025 by rpki-client