Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/290c88d5-ffb7-3c6e-a7cc-361231ad99bb.roa
File:                     290c88d5-ffb7-3c6e-a7cc-361231ad99bb.roa (raw, json)
Hash identifier:          RYvwj2pTHRany0vzoheiRsepliUMVoajbGauifUq0Ks=
Subject key identifier:   BF:ED:D4:37:BB:8E:51:27:31:EF:F7:D6:3F:ED:2B:97:CF:48:0C:8A
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F4328584AD936605240B6ABE26B3CF500
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/290c88d5-ffb7-3c6e-a7cc-361231ad99bb.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     22925
IP address blocks:        2610:f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:60:52:40:b6:ab:e2:6b:3c:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=709bf0e1-f220-41f5-8f43-29e014942762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:56:fe:9c:aa:a3:60:0a:e3:75:4c:66:4a:58:
                    30:92:b3:91:67:a2:4a:bb:2d:66:f0:cd:3b:34:8b:
                    b9:13:bb:3f:52:c7:81:7d:c4:97:b1:32:8b:81:d8:
                    22:31:0f:c7:c1:75:cb:85:2a:60:6b:27:ab:58:72:
                    25:f9:af:8b:fb:84:bc:54:67:a1:7d:df:cf:11:90:
                    d1:ae:03:cd:08:92:d1:df:e1:30:38:a4:20:e4:eb:
                    5c:ba:b7:b5:e7:8c:12:52:d5:34:41:4c:a8:89:c9:
                    35:0b:9e:92:51:d5:41:65:2b:24:96:f2:18:0f:df:
                    d6:e2:e7:9f:be:82:34:40:64:f1:02:56:3b:ef:94:
                    33:20:a8:d2:20:30:6c:2d:0d:d1:30:fa:8f:f3:ab:
                    76:2a:81:24:d8:e7:a9:f8:5e:fb:0f:31:c5:97:fc:
                    ac:14:e2:81:67:6e:3e:28:25:71:87:b0:1c:8a:c2:
                    7e:86:e3:91:e5:e9:09:7e:ee:5d:11:2b:f0:9b:c0:
                    c5:f3:2e:78:84:e2:d9:28:c0:06:e7:47:35:a3:82:
                    7e:2c:fd:70:75:8b:c8:5c:45:3c:3f:f9:ae:be:63:
                    60:81:0a:55:57:ef:44:a8:2c:4a:0e:e9:d9:45:be:
                    8b:a2:45:fd:84:5d:f4:f1:87:b0:71:2e:12:8f:32:
                    33:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:ED:D4:37:BB:8E:51:27:31:EF:F7:D6:3F:ED:2B:97:CF:48:0C:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/290c88d5-ffb7-3c6e-a7cc-361231ad99bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:f0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:01:e3:bd:a5:ee:48:06:c4:36:0f:d7:23:66:0b:d2:4b:c4:
         f7:a3:a6:d1:39:95:c0:bd:6f:90:ff:bc:f0:50:01:ed:2b:8a:
         10:8d:92:b1:0e:52:2a:22:92:ec:91:05:6d:4b:14:6e:80:7e:
         ed:55:ba:55:9d:43:58:4b:f5:59:cb:8c:04:25:55:d8:16:45:
         15:27:f7:04:a4:0a:29:d1:9a:43:df:62:bc:7a:80:f7:23:99:
         57:06:68:fb:a1:3c:5b:ff:8a:7f:2a:8c:b2:74:0c:c2:05:13:
         ef:6b:14:bf:b2:a7:08:4e:0d:2b:a7:00:91:7a:7d:8e:d7:c8:
         0e:d9:db:11:6a:d2:d4:26:f5:a2:d4:a2:20:cf:85:84:4d:97:
         b3:45:35:e2:2b:db:1a:6d:a3:c0:ae:5e:8e:17:29:fb:9e:01:
         d6:c8:1c:16:38:b7:cf:91:cb:fd:fb:2c:88:0d:f6:37:b5:66:
         fc:5f:b5:8e:47:af:07:78:1b:fd:f1:77:20:a4:f2:2d:17:8a:
         24:66:b8:4f:3d:81:78:ff:bc:a3:60:cb:bc:74:4c:ea:76:ef:
         68:06:84:2a:8e:fd:36:3a:2f:56:8b:d0:94:21:ce:15:23:f5:
         90:e3:3b:f6:38:f5:d3:89:77:99:0c:6b:10:86:16:96:f9:a4:
         22:7c:b7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:46:25 2025 by rpki-client