Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/094a52c0-3cf2-3dc5-9242-e0e5db445d48.roa
File:                     094a52c0-3cf2-3dc5-9242-e0e5db445d48.roa (raw, json)
Hash identifier:          9J71il1TNZ6E8nI3kiKDwv0xfa+YVvfVF6gs81swttM=
Subject key identifier:   CD:38:A6:DD:08:25:B9:91:43:E9:05:87:79:7F:2D:8C:62:62:CC:76
Certificate issuer:       /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
Certificate serial:       010D0C9F4328584AC016553CFCA79EAF2EB32B80
Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/094a52c0-3cf2-3dc5-9242-e0e5db445d48.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     14434
IP address blocks:        2607:8580::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:55:3c:fc:a7:9e:af:2e:b3:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=e699db31-487e-4526-a553-e305c21b1023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:01:55:79:c9:0d:00:22:85:49:0b:c4:d2:
                    fa:dd:af:3a:87:62:23:e6:98:f6:93:75:52:71:15:
                    cf:c0:da:44:4a:0d:7e:a8:89:f3:15:1b:db:91:d1:
                    86:31:78:05:c6:64:95:4a:71:3e:63:e5:fc:54:58:
                    21:c6:99:dd:59:d9:a2:83:61:f3:5f:a5:97:ed:29:
                    be:3b:33:46:cd:25:7f:9b:9a:03:e2:45:5f:dc:46:
                    73:eb:0d:15:dc:88:be:a7:18:15:e6:9d:a2:5a:45:
                    b0:6a:8d:a7:c8:50:cb:79:e6:0a:1b:09:9e:bc:96:
                    e5:00:54:d4:70:7f:dd:fb:3f:7b:88:7a:dc:88:89:
                    7c:7c:95:9f:91:d8:94:95:8b:e2:fb:3c:bd:75:19:
                    0d:59:7f:a0:74:dc:58:c8:8e:da:9f:6d:6c:eb:05:
                    8e:2e:d3:0f:55:75:9b:96:fa:b5:33:a1:4c:e4:e7:
                    46:44:aa:e8:d7:c4:ac:9f:92:f4:01:c1:b5:eb:ff:
                    9e:b3:42:e0:e1:18:8e:30:95:3b:d3:8b:06:26:58:
                    0e:51:4c:03:ad:a0:d5:37:ea:ce:6e:c7:79:d0:dd:
                    6d:04:49:ea:4f:28:54:9d:dd:0d:b5:31:d6:e7:3f:
                    fb:64:5a:e7:a6:d9:b0:cb:c3:2a:a7:f4:17:c1:e2:
                    f4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:38:A6:DD:08:25:B9:91:43:E9:05:87:79:7F:2D:8C:62:62:CC:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/094a52c0-3cf2-3dc5-9242-e0e5db445d48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl

            X509v3 Authority Key Identifier:
                keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ae:2c:17:18:b2:88:0f:31:c2:16:ef:be:9a:f6:1e:dc:c6:
         db:5a:80:48:bf:03:7c:b8:54:73:b8:12:5d:ae:b9:6a:6f:5a:
         6f:4f:bf:a3:e1:2a:65:4f:a9:34:a9:64:70:89:e4:24:e8:40:
         f6:5f:e7:70:fa:f8:7f:06:e1:67:a8:f6:4c:74:33:30:38:a5:
         61:92:a0:17:f7:9b:c7:7c:65:74:b1:0b:68:55:8d:93:8a:42:
         bc:6d:3c:c7:22:33:3f:80:99:e8:20:e5:63:da:4e:8a:bb:9f:
         5c:37:6e:46:15:41:da:37:34:ed:e3:c2:cd:af:70:91:4f:47:
         d7:84:85:80:39:ae:96:dc:5d:b5:7f:15:2a:e1:89:63:0f:83:
         5d:5a:59:fc:dd:e7:36:73:fa:e8:24:cf:cf:e3:82:04:40:d5:
         6f:e2:89:7b:8c:f5:ed:fc:9c:91:ec:18:d7:e3:b5:99:29:80:
         b8:39:0c:33:bb:8f:cd:e7:54:c6:7d:33:19:2c:0b:61:b9:fc:
         78:99:6d:4a:a5:97:4d:ba:af:61:c7:44:b8:2b:78:bc:5f:9d:
         bd:d6:67:31:d8:7b:45:02:06:6e:31:c3:4f:12:6c:fc:7d:84:
         7e:cc:9f:c1:62:4a:f5:9b:90:71:56:92:79:0a:7f:c8:f0:2e:
         70:59:8f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:39:46 2025 by rpki-client