Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/3c215373-ba4c-387d-b2fe-0739ac64f909.roa
File:                     3c215373-ba4c-387d-b2fe-0739ac64f909.roa (raw, json)
Hash identifier:          EhSGZztcVOvWq38w3HeFACq+ZkY/BZhxSCk9I6u4yYo=
Subject key identifier:   5E:58:84:E0:D7:E8:F9:8C:1B:AD:F9:CE:AF:BC:7E:F0:16:18:7F:0F
Certificate issuer:       /CN=ad6e5ddb-03ff-4139-8a51-b918bc84f732
Certificate serial:       010D0C9F4328584B047C1283430BCC9C60DD3C50
Authority key identifier: 7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/3c215373-ba4c-387d-b2fe-0739ac64f909.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     53823
IP address blocks:        2606:48c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:12:83:43:0b:cc:9c:60:dd:3c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6e5ddb-03ff-4139-8a51-b918bc84f732
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=03e60eed-018e-4932-9975-5903843a054e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4e:1d:68:dc:9a:e1:94:a8:dc:c1:95:d2:dd:
                    87:ea:bd:f4:22:e8:54:08:ad:f9:ca:f7:5b:b9:30:
                    75:df:3a:d4:46:e4:05:ea:c4:04:54:e4:73:8a:ad:
                    2a:e3:75:11:9d:0c:e2:50:bb:35:fd:bc:4c:00:c5:
                    b1:99:90:63:48:88:1a:88:72:ae:31:51:c1:ff:35:
                    ac:73:1d:7f:2a:2a:bf:b7:59:6b:de:73:16:fe:fe:
                    18:65:33:cb:07:89:ac:15:b8:7f:46:5f:03:75:2f:
                    f4:a2:3c:6f:d5:18:6b:b5:4f:11:05:e0:ee:cd:e9:
                    42:15:40:82:ec:d9:64:a3:74:d1:9e:40:d0:a8:4a:
                    44:2d:2b:8f:fd:c6:63:99:4a:ca:38:e7:69:40:42:
                    4d:04:7b:5a:7c:a4:c0:2d:70:b0:62:18:ad:a0:d0:
                    24:2a:05:b3:39:12:f4:4f:a0:ed:d3:78:b4:a0:69:
                    19:c1:b0:02:7f:28:6d:63:97:04:df:4f:3d:fb:e6:
                    d7:73:0d:99:24:de:56:83:2e:2f:92:66:e6:a5:e1:
                    87:01:a2:1d:6b:4f:84:7b:42:47:2a:98:98:6d:b2:
                    1d:0b:7b:12:59:aa:72:6a:86:0a:5a:0e:4a:a2:a9:
                    e6:1a:1c:56:73:95:d2:1e:6b:38:0a:e8:da:8c:0b:
                    60:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:58:84:E0:D7:E8:F9:8C:1B:AD:F9:CE:AF:BC:7E:F0:16:18:7F:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/3c215373-ba4c-387d-b2fe-0739ac64f909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732/ad6e5ddb-03ff-4139-8a51-b918bc84f732.crl

            X509v3 Authority Key Identifier:
                keyid:7F:6C:84:47:49:A7:3C:4E:55:73:9F:5A:46:17:24:28:F8:2B:77:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6e5ddb-03ff-4139-8a51-b918bc84f732.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:48c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c9:a1:62:51:79:e8:40:92:95:f2:3a:79:65:d2:03:36:2d:
         f4:8b:3b:91:d7:bc:28:a1:12:71:ee:ed:03:7f:bc:2d:13:9f:
         d5:50:7a:7e:c4:94:b1:bd:00:bf:f3:d8:63:df:8c:14:f4:be:
         c1:9c:92:bf:26:d7:fc:f2:c5:dc:a7:5d:91:78:bd:b5:13:c0:
         4b:34:0b:1b:8e:9d:47:31:6e:d8:93:a1:a0:8c:46:7a:78:08:
         02:34:ab:05:42:a6:b5:0e:72:78:59:3a:67:5e:06:e9:81:44:
         75:8d:3d:96:de:3d:f4:20:07:b0:65:12:16:2c:20:cc:5c:0f:
         40:17:e1:40:05:d4:b7:c2:6e:b2:4b:c0:b8:4b:74:5a:21:eb:
         8d:ab:dc:f9:79:81:9e:d3:fd:5c:fe:d8:97:b5:1d:2f:e6:50:
         e4:3b:e4:bd:7f:45:79:bf:ec:ff:09:3d:a3:9b:17:bb:f7:79:
         43:7f:77:c7:77:58:63:11:6c:8e:07:bb:07:68:87:c8:eb:bd:
         e8:fd:63:05:2e:65:1a:c5:38:d6:34:43:07:ef:a9:fa:2d:57:
         ea:c3:2a:9a:ef:bf:56:00:aa:32:d5:c0:f8:c8:b8:17:9e:aa:
         a0:ae:3e:85:02:2f:f8:f6:c2:81:2d:38:92:23:00:69:f2:fb:
         5d:a1:a1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:27 2025 by rpki-client