Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/419cbba0-782c-3029-a97a-e2519037390b.roa
File:                     419cbba0-782c-3029-a97a-e2519037390b.roa (raw, json)
Hash identifier:          0+OvW4otKY2IxYW6ULqBgjdo4fJ75eXNnQWyim4sfc0=
Subject key identifier:   AC:7D:C0:2C:3A:96:FF:21:AD:F2:ED:9C:24:FC:F5:7F:39:78:01:5A
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328584B235DD12CC33B04FAC28D8800
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/419cbba0-782c-3029-a97a-e2519037390b.roa
Signing time:             Tue 09 Sep 2025 14:30:01 +0000
ROA not before:           Tue 09 Sep 2025 14:30:01 +0000
ROA not after:            Mon 08 Dec 2025 15:30:01 +0000
asID:                     6327
IP address blocks:        2607:f798:2509::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:5d:d1:2c:c3:3b:04:fa:c2:8d:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Sep  9 14:30:01 2025 GMT
            Not After : Dec  8 15:30:01 2025 GMT
        Subject: CN=c90a200d-ea9c-4b4d-8deb-513bd6b8a5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8d:4d:40:b3:e1:e2:16:3c:48:73:27:9b:73:
                    fc:b8:37:ea:3e:83:c1:ab:87:59:60:07:ac:c0:c0:
                    de:48:aa:56:dc:3c:6f:d5:13:43:57:b1:f4:d0:a2:
                    d3:56:09:4c:56:2d:38:0a:35:20:1f:9c:9d:9d:b0:
                    6a:d7:2f:f8:72:e2:e4:0d:f0:17:b9:ff:ff:dd:e2:
                    73:1b:d6:a8:de:15:a0:0e:6a:6f:fb:41:fd:04:72:
                    2b:9f:fd:e0:7e:92:50:42:95:4b:85:4d:75:87:54:
                    36:c0:51:d7:4f:9d:73:8e:f4:44:61:06:89:8d:2a:
                    9c:c1:8c:f6:a5:09:05:22:b4:74:f3:22:c5:d0:4b:
                    00:33:7e:0e:7b:b3:31:24:57:6f:b7:da:85:77:5b:
                    d8:3c:ba:2c:d7:33:50:06:e8:06:94:e9:71:ea:ad:
                    98:80:00:1e:21:e0:02:70:fa:25:05:13:d8:e4:e6:
                    95:83:47:03:98:ff:5c:cd:c9:91:5c:b3:c3:fa:41:
                    25:09:81:38:2e:c6:06:38:84:d2:53:77:68:21:4f:
                    ca:4b:95:de:3d:df:31:a1:88:0e:78:10:2b:21:3c:
                    e7:60:88:24:60:04:ce:f1:c2:7d:f6:40:3d:07:35:
                    75:67:3c:d3:d6:2b:77:80:c7:df:3a:da:41:5c:29:
                    82:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7D:C0:2C:3A:96:FF:21:AD:F2:ED:9C:24:FC:F5:7F:39:78:01:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/419cbba0-782c-3029-a97a-e2519037390b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f798:2509::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:95:ba:89:81:82:43:6c:ab:60:25:c4:72:15:cf:3f:a2:f6:
         05:45:c0:02:cb:53:7f:e4:8d:b3:b9:c3:15:06:52:af:32:c7:
         af:61:8b:10:b7:5c:d0:e8:1b:4d:04:83:97:d2:46:72:59:bb:
         66:65:11:d2:56:62:ff:65:97:ed:52:86:2c:b4:38:c2:ea:5a:
         73:78:4e:58:a7:74:37:87:ae:19:69:55:ef:f7:d8:f6:6b:99:
         18:29:d8:3c:78:08:59:b5:c4:20:11:f0:cd:f0:87:b5:94:50:
         01:1a:5f:df:f1:aa:15:b9:2d:11:05:7b:88:6f:d5:2b:d1:f1:
         43:bc:7b:8a:8d:6b:78:00:4f:e6:93:64:53:eb:20:fa:86:20:
         9b:c3:3a:0a:44:0f:1b:f0:06:7b:2b:79:98:f8:16:a5:ab:95:
         7b:73:5c:eb:6a:40:26:ea:d1:99:68:91:e2:5c:a4:d7:db:5a:
         72:4a:c4:e7:1f:7a:ca:f7:9c:cb:2b:4c:b3:9d:c3:d4:ff:d4:
         27:2a:3a:4e:13:5c:c8:3b:6c:cd:c7:76:72:4d:8d:af:d4:56:
         ed:08:1b:0d:04:18:17:34:8a:62:d3:2a:ed:5c:e8:6a:fb:ef:
         2f:b9:dd:d5:18:d8:8e:58:4e:19:55:89:c4:25:db:c9:20:b9:
         e2:41:ff:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:34:44 2025 by rpki-client