Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/5447fca3-a5a8-3b61-90b0-e825d8612614.roa
File:                     5447fca3-a5a8-3b61-90b0-e825d8612614.roa (raw, json)
Hash identifier:          6PzfZKRbrOzqag9UXnx5/8XyRQln3pA4kUoBJ/WzCpk=
Subject key identifier:   C8:7E:2F:4D:D3:6E:0E:B2:D0:C3:A0:8F:7F:87:3F:35:86:BC:3D:F0
Certificate issuer:       /CN=ab48051f-b089-4872-acc6-a73a442e9736
Certificate serial:       010D0C9F4328584AE0311C2B486BCDBA154A8D80
Authority key identifier: 2B:54:20:F2:AF:8F:AF:36:32:D0:F6:01:84:AB:37:C8:43:29:28:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/5447fca3-a5a8-3b61-90b0-e825d8612614.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     401008
IP address blocks:        2607:ad40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/ab48051f-b089-4872-acc6-a73a442e9736.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/ab48051f-b089-4872-acc6-a73a442e9736.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:1c:2b:48:6b:cd:ba:15:4a:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab48051f-b089-4872-acc6-a73a442e9736
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=47eda10e-1543-4cfb-aeab-515b68708039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5d:55:3c:b3:b7:fa:25:38:19:f8:e9:e2:09:
                    a5:20:9d:70:37:da:d0:89:70:33:4a:6f:75:60:3d:
                    d0:de:3a:8a:d2:79:1b:9e:c8:21:c1:dd:3c:b5:d8:
                    53:1b:49:37:3f:a2:71:9e:91:4c:2b:04:ac:51:2c:
                    86:19:f6:97:49:30:6e:37:32:5d:bc:94:e1:68:c9:
                    6b:dd:20:18:87:9f:2d:d0:8e:00:4b:74:8c:b8:9d:
                    7a:ee:76:18:be:9d:1b:10:95:4c:3d:4c:40:bd:c0:
                    2c:56:42:b4:cb:6c:5b:ae:a1:92:74:86:a6:37:df:
                    45:d1:ee:59:6e:64:c1:d6:bb:63:61:e6:4b:8e:e4:
                    0f:da:5e:3b:8f:0f:97:fc:f8:68:f7:aa:31:7e:59:
                    60:de:ee:e4:22:b2:c2:51:7b:59:71:06:69:63:fe:
                    01:dc:5d:ec:f1:e7:0e:2c:38:c2:0a:f1:6f:f6:a1:
                    55:7b:e6:b2:90:cc:db:4c:0f:35:fa:b6:a2:92:5f:
                    50:dc:e1:63:03:4f:07:c7:e9:94:03:23:30:d1:45:
                    f3:98:5d:43:60:1f:5e:d8:0e:5d:18:fe:5b:15:b8:
                    ff:b4:71:aa:75:37:c0:2a:ad:3e:ea:3b:68:2b:33:
                    86:43:f3:d2:80:48:e7:89:44:1e:fe:c5:ce:77:87:
                    cb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7E:2F:4D:D3:6E:0E:B2:D0:C3:A0:8F:7F:87:3F:35:86:BC:3D:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/5447fca3-a5a8-3b61-90b0-e825d8612614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/ab48051f-b089-4872-acc6-a73a442e9736.crl

            X509v3 Authority Key Identifier:
                keyid:2B:54:20:F2:AF:8F:AF:36:32:D0:F6:01:84:AB:37:C8:43:29:28:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ad40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:bb:65:fb:7c:ab:02:3a:5a:e7:0c:56:79:d7:63:3e:dd:a1:
         b6:45:a6:40:20:df:9b:6f:c2:e2:5c:c2:a6:71:77:3f:69:0a:
         6a:bd:dd:e3:3f:0a:de:a1:a2:17:ee:d6:2d:7f:fc:05:80:25:
         a3:10:47:ad:e3:0c:d8:d6:51:d1:52:f4:3c:99:d8:0c:48:c6:
         6a:c4:c1:80:ed:bb:be:f5:f3:7b:4a:ca:1a:fa:78:34:be:7d:
         77:80:c9:d1:03:66:e1:96:aa:97:17:df:0b:53:a5:a7:9f:55:
         8c:51:84:9e:58:99:1e:41:57:79:9e:72:8d:78:2f:5a:a1:7b:
         6c:8b:36:a1:f2:3a:0c:58:12:30:40:38:98:78:97:85:d7:f3:
         e7:e5:b1:6d:27:1d:bd:c3:75:9b:46:85:84:27:39:e0:2a:64:
         00:c9:d2:77:fc:0b:e7:8e:be:27:41:89:eb:a7:2d:3f:bf:e4:
         05:a6:82:52:c8:0e:38:97:bd:5d:df:85:d8:1d:39:7f:5e:a5:
         09:99:86:d2:b9:8f:ca:bf:82:48:7f:43:45:25:0e:14:a3:ac:
         f6:cc:e6:5c:c1:6c:3d:c8:2d:79:c5:93:a0:9d:fe:9d:22:55:
         70:9f:35:22:c0:8e:d9:af:cc:58:aa:5e:2e:05:f9:f0:d7:90:
         17:aa:bd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:52:05 2025 by rpki-client