Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/c42f0c7a-0df1-3441-a41e-08fc76630161.roa
File:                     c42f0c7a-0df1-3441-a41e-08fc76630161.roa (raw, json)
Hash identifier:          f41xlbqsnS+hRIt7tL0g8w+b2drcnD5QpJxP28FNZPI=
Subject key identifier:   A2:06:31:F0:3D:B9:2B:A2:65:63:41:23:CD:B4:6A:F0:1B:CF:15:AA
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328584B4BAC5CFC12306B1A926F7580
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/c42f0c7a-0df1-3441-a41e-08fc76630161.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     812
IP address blocks:        2607:f798:2502::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:5c:fc:12:30:6b:1a:92:6f:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=a7cd31c5-c369-440d-95a3-2e66367f13b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:d6:3e:df:80:21:94:7a:86:20:73:2f:3f:
                    f8:6e:e8:48:8c:8c:f8:de:c8:c8:43:fe:48:80:b5:
                    b7:d3:df:1d:bc:6c:6f:d1:72:83:d5:5c:a5:88:46:
                    87:c9:c2:d8:d3:c6:51:f6:31:1a:b4:c7:f2:d6:66:
                    59:ce:35:04:08:49:29:12:67:49:52:6b:ee:b4:ac:
                    08:64:7e:b6:07:14:d2:83:6b:0c:39:2d:7f:37:52:
                    61:ca:97:3b:74:c0:2f:16:ce:73:a3:4c:3f:b8:2e:
                    07:e3:e8:e3:e5:a4:0d:75:d6:a3:dc:c4:be:f4:7e:
                    1d:b5:2c:51:dd:ed:f2:03:fb:03:ba:7b:7a:5b:71:
                    f4:89:9c:12:f6:37:2b:12:d5:aa:d4:52:0e:8d:43:
                    31:86:41:41:2d:fd:5c:24:19:10:6c:4d:ab:fd:51:
                    c8:46:e4:e5:ea:bf:b2:fa:5d:1b:23:1b:55:da:c5:
                    cf:c2:ad:3e:64:26:7b:39:11:33:63:92:c3:0e:3b:
                    d2:36:a0:22:be:01:74:1e:2f:e5:dc:d5:8a:88:b1:
                    f2:92:c1:c1:83:80:a8:28:ed:0f:40:82:b5:78:fb:
                    8c:68:3f:f3:37:b1:7d:65:25:61:6b:51:27:8a:f8:
                    eb:d5:54:1e:75:e6:5c:c0:08:8d:cf:e2:4a:a5:ca:
                    7b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:06:31:F0:3D:B9:2B:A2:65:63:41:23:CD:B4:6A:F0:1B:CF:15:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/c42f0c7a-0df1-3441-a41e-08fc76630161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f798:2502::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c7:61:01:99:07:c4:27:70:46:85:5e:8e:7f:f3:77:3b:cb:
         91:50:ff:29:5a:14:ee:e2:0b:7e:d4:f5:80:20:5f:8e:a4:e1:
         dc:36:e0:11:dc:de:ba:6e:e3:08:a7:6d:60:bf:5a:6e:a3:e2:
         9d:71:d1:a3:dd:23:0a:6d:4f:ef:4c:53:d9:de:10:24:8e:77:
         83:83:ea:21:b5:b1:60:74:57:8c:78:9d:2a:dc:fc:56:d2:97:
         cc:50:64:c0:96:23:6a:e5:e7:66:75:c7:18:23:ea:e6:fc:17:
         dd:e2:ad:fc:a7:06:e4:c0:8b:91:b1:12:a1:db:80:04:7d:54:
         d2:9e:92:d4:76:28:bf:4e:86:ea:75:10:f0:fd:68:16:e7:72:
         30:bc:50:f0:a6:ac:66:d2:1d:3c:4b:05:72:f0:f1:1a:a9:ec:
         f3:7b:62:ac:25:53:3d:d8:90:fa:75:94:7c:72:33:0a:46:25:
         27:03:80:81:df:53:11:62:d8:29:ed:bc:6c:ae:27:2a:ee:af:
         5e:41:f3:3c:e5:f0:0d:f8:12:7c:d0:77:5f:33:9d:dd:11:d9:
         76:04:46:7e:2c:92:5e:1e:7a:49:ed:c1:cf:ab:21:42:0d:57:
         1f:c2:8a:c3:a7:40:9a:89:92:e0:a1:bf:e6:e3:a8:1e:28:62:
         bc:ad:03:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:53:39 2025 by rpki-client