Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/e338e60a-8bf6-32e4-a709-de439e2faa3a.roa
File:                     e338e60a-8bf6-32e4-a709-de439e2faa3a.roa (raw, json)
Hash identifier:          bxfx9RDKdOLcLsuj7bSSrm4r+eQwNaB6btKy5Aq8FOM=
Subject key identifier:   5F:1D:A9:C1:51:BD:3C:20:85:DB:E8:91:09:EF:75:0D:36:35:93:CC
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328584B4A5BE847010DDAC34998D940
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/e338e60a-8bf6-32e4-a709-de439e2faa3a.roa
Signing time:             Tue 23 Sep 2025 13:42:42 +0000
ROA not before:           Tue 23 Sep 2025 13:42:42 +0000
ROA not after:            Mon 22 Dec 2025 14:42:42 +0000
asID:                     812
IP address blocks:        2607:f798:250d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:5b:e8:47:01:0d:da:c3:49:98:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Sep 23 13:42:42 2025 GMT
            Not After : Dec 22 14:42:42 2025 GMT
        Subject: CN=53eef9ef-b052-4fe0-870a-66988a1f9b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c7:0c:3d:db:7a:26:83:ce:8f:7e:5e:30:14:
                    70:f5:c6:0d:15:cd:2a:61:54:fe:e2:89:08:59:12:
                    ed:5a:3a:ba:98:90:31:1f:bf:59:f2:ff:b8:21:96:
                    b9:c2:1b:c2:04:aa:2f:9b:00:3a:b4:9f:98:6e:d2:
                    18:32:ed:02:51:90:b8:59:77:14:27:0e:7c:4f:7e:
                    64:c9:5b:7c:05:8a:30:d0:79:aa:66:f9:48:14:d8:
                    40:21:ad:51:ef:18:de:d4:26:ef:0f:d5:39:01:cd:
                    a5:3d:1e:81:95:34:f2:73:b4:bb:89:d3:c2:f7:01:
                    37:03:df:98:7f:70:76:54:fb:c1:8f:b5:67:01:85:
                    87:a6:af:8c:09:45:5a:e9:00:25:d3:fa:0c:71:9e:
                    99:ea:31:7b:df:dc:3d:d5:4f:54:77:46:bb:11:ee:
                    0c:6c:23:33:74:86:f1:b8:38:f4:50:ea:da:d2:93:
                    d0:60:5e:81:e8:c1:9e:14:e7:83:54:df:99:bf:27:
                    cd:f4:72:6b:0a:1c:4d:ac:fa:db:25:c3:49:44:8c:
                    0f:1e:34:8d:1c:c7:57:3b:5a:a1:4d:98:d9:d5:bd:
                    86:52:a0:41:c2:4d:07:ae:1f:d1:a4:87:00:cd:1e:
                    34:45:f4:40:77:35:26:86:77:41:fc:2f:66:b8:91:
                    af:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1D:A9:C1:51:BD:3C:20:85:DB:E8:91:09:EF:75:0D:36:35:93:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/e338e60a-8bf6-32e4-a709-de439e2faa3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f798:250d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ca:97:e6:aa:51:ed:dc:e7:19:fe:01:84:5f:e1:64:78:69:
         fe:1e:db:66:eb:88:d9:29:18:9d:8e:e3:4a:b7:a7:21:77:59:
         32:c4:c0:c3:dc:b7:5b:ec:a8:3f:ba:e8:35:d1:7b:16:e4:fe:
         37:56:42:e3:97:ff:3f:45:5d:5d:c3:42:80:a6:c8:8e:1e:03:
         b7:98:ec:c0:5f:67:32:a2:50:3b:d7:d7:03:4f:2e:0a:06:67:
         90:bd:ae:cc:cc:f1:c4:69:6d:93:25:d0:05:65:e4:29:9c:ba:
         1a:17:88:42:73:e7:41:53:46:73:6c:34:5f:20:93:e4:84:51:
         c4:c2:d0:21:e1:0f:54:d0:d8:75:28:6a:6d:3a:0c:2f:bc:b9:
         8e:be:9f:5a:90:93:9f:6b:56:c5:97:cc:ba:2e:29:78:56:7f:
         5d:c1:9b:9f:ec:33:a5:f7:b1:e0:a1:30:85:23:9c:ac:9a:d3:
         ec:fe:20:84:d8:14:11:c9:74:80:63:a1:49:bc:ff:55:28:3f:
         30:30:60:4b:88:9a:81:38:7b:3d:a5:86:e9:d5:eb:05:4d:46:
         37:0a:1f:f9:da:b8:ce:03:04:2e:a8:64:35:31:6f:ff:de:68:
         2a:a5:a9:d5:47:64:5c:88:5f:c7:38:a1:a6:38:87:53:82:e8:
         66:19:7a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:42 2025 by rpki-client