Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/bc0bb311-9610-3e54-a465-5fec485faa07.roa
File:                     bc0bb311-9610-3e54-a465-5fec485faa07.roa (raw, json)
Hash identifier:          NUYkPD73PkZJmFFA8cwu46UKkSPg3aCeKpV94IaEbTE=
Subject key identifier:   84:85:1A:4E:6A:9A:FA:0F:AC:C2:35:BA:ED:6E:A4:D3:B9:AC:98:66
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B6367510C92324E97FA0AC5C0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/bc0bb311-9610-3e54-a465-5fec485faa07.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     21859
IP address blocks:        2604:980:e010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:51:0c:92:32:4e:97:fa:0a:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=b94c30c1-cb38-43b7-a24c-203d50f06952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7f:c7:c0:84:21:b5:55:f2:f4:f0:62:6a:97:
                    2b:63:6d:6e:5c:e7:6a:d5:44:98:aa:a4:c2:17:4f:
                    cd:7f:f2:8b:57:bb:4a:d0:1a:9b:88:a1:c7:4d:24:
                    be:c9:e6:b0:5d:48:23:a8:da:ad:fd:ad:68:96:19:
                    a0:fa:58:46:9d:0e:74:6f:6a:4e:d3:ab:fd:23:01:
                    b6:ca:42:03:c0:6d:57:dc:e6:30:87:37:20:73:f2:
                    87:de:d0:b7:63:96:40:eb:83:cd:28:ce:04:09:0b:
                    7a:96:32:d3:c3:14:4d:b2:9d:fc:c1:5c:89:d2:e4:
                    9c:cd:f5:58:68:4b:1c:99:9b:3a:57:19:72:a5:2d:
                    65:29:3f:83:1d:8d:2b:8e:be:5b:88:d5:41:e7:0e:
                    8e:1b:1f:8c:7e:a9:22:a5:2a:01:1c:67:5e:ed:89:
                    02:b2:92:02:1a:b5:62:7c:6a:23:a7:8c:9b:f9:0e:
                    e3:f3:c2:8e:cf:05:c4:f8:2f:84:a2:d1:8e:8c:c9:
                    78:27:37:33:09:12:2c:50:55:08:e8:9a:f4:e9:54:
                    8b:a2:1f:8d:f8:b8:20:83:11:91:26:10:2c:47:2d:
                    7e:67:49:77:d1:ee:92:e6:b8:43:08:f5:df:d1:3e:
                    03:bc:9e:a8:4b:00:b0:f9:2a:f3:0d:7e:b4:ae:ec:
                    d4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:85:1A:4E:6A:9A:FA:0F:AC:C2:35:BA:ED:6E:A4:D3:B9:AC:98:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/bc0bb311-9610-3e54-a465-5fec485faa07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:980:e010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:65:60:af:76:34:69:18:b1:ff:85:3d:d1:fe:f9:d9:07:d0:
         79:18:5e:d3:4f:86:0b:01:b1:79:35:83:59:5a:55:b8:0d:49:
         7d:4d:8a:03:98:24:49:3c:6e:70:0f:87:83:d6:37:6b:f2:bf:
         9d:4b:29:5b:d5:89:4f:0b:1f:1f:ac:31:c5:3f:e5:31:8e:15:
         cf:3d:eb:65:71:f0:fc:61:c9:1e:ae:e8:cc:28:ec:66:57:7a:
         f5:fb:b0:ef:0c:f6:2b:15:54:58:e8:28:dc:e6:74:26:b0:1a:
         29:cc:41:aa:53:47:8e:1f:b7:03:9d:6a:14:41:e8:fb:52:15:
         e6:1b:e3:37:a4:1b:2f:7e:a2:ed:0e:5b:57:64:8e:6b:22:4f:
         ca:26:4e:d8:47:9b:15:53:46:0a:7f:18:a7:54:ce:95:16:f3:
         0a:8f:de:63:a3:33:39:c5:93:ac:09:c5:e6:7f:9b:ed:ba:a2:
         6f:d0:6f:9d:b4:25:58:2b:2b:36:86:f6:18:6a:70:d9:d9:ab:
         e8:33:76:f1:7b:8e:ec:9e:eb:60:c7:f2:1d:67:9c:62:3d:cb:
         a0:75:63:7a:7f:c9:a4:74:64:d3:48:3c:b5:1a:7b:35:fd:31:
         3c:ec:36:e4:34:ba:9a:1c:9b:57:ee:fa:f1:97:69:ea:ff:33:
         0f:59:18:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:22:07 2025 by rpki-client