Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5be2e925-6eeb-349e-ad3e-ab3178d20506.roa
File:                     5be2e925-6eeb-349e-ad3e-ab3178d20506.roa (raw, json)
Hash identifier:          lxDMzX1tmV1mPOuQpDG+JlzPPfzxoxaj4eIky69hRZU=
Subject key identifier:   8C:99:35:1D:D9:4F:1D:20:0B:2C:A0:8A:08:9C:AA:23:E5:7F:49:B1
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584B41E70BF22012FA8606F0BB00
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5be2e925-6eeb-349e-ad3e-ab3178d20506.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     398549
IP address blocks:        2605:dd40:8333::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:0b:f2:20:12:fa:86:06:f0:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=fba130e5-0706-4db3-b8b5-2e9a264b1b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ea:6a:80:bc:4d:32:f6:87:f0:0e:e9:be:a4:
                    89:d5:0a:50:3d:87:9a:a9:47:26:93:29:e1:44:e4:
                    cf:22:7e:b8:22:84:d4:51:06:08:c8:88:ba:87:31:
                    e6:1d:ab:80:05:7f:10:56:c7:38:56:6b:0b:a9:0d:
                    74:c1:9b:d9:e7:e8:e3:ec:7e:52:3b:f6:f5:3e:b2:
                    c9:7d:93:e1:b7:51:a8:df:35:42:de:31:c8:a8:e4:
                    3f:b1:7c:7a:5e:8a:c4:05:9b:21:1e:65:62:35:a4:
                    99:f0:82:40:45:39:01:04:93:99:40:71:ca:38:9b:
                    e5:f3:f1:c0:43:e4:e6:35:20:18:29:70:8c:e1:fe:
                    87:9a:d6:ec:9e:03:2a:e7:10:64:0a:a5:51:4b:60:
                    42:28:1c:f5:3e:38:7b:ad:84:d1:a2:d2:de:4b:48:
                    f3:82:af:2e:49:c9:63:76:45:ab:66:1c:da:a0:46:
                    15:e6:bf:1d:a7:20:5b:2d:2f:30:0a:bc:a6:42:94:
                    ef:4d:ef:a8:a8:26:5d:7a:39:f6:07:c8:b0:8c:6f:
                    2e:12:b2:fc:a8:72:bb:34:9e:f9:1d:5c:17:77:bf:
                    80:6a:0e:e5:f5:e6:64:aa:12:d1:30:20:d3:e1:12:
                    c9:23:a8:16:69:07:d3:58:84:29:d3:a6:48:76:b6:
                    d2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:99:35:1D:D9:4F:1D:20:0B:2C:A0:8A:08:9C:AA:23:E5:7F:49:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/5be2e925-6eeb-349e-ad3e-ab3178d20506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8333::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:78:0e:7c:69:36:43:2b:79:e1:b0:19:0d:a4:73:cd:2b:8b:
         70:15:a7:60:fc:e8:36:56:57:a0:3d:6f:34:91:f6:4e:21:0a:
         ac:c6:83:45:29:18:e7:36:56:c5:0e:57:41:4d:3e:d1:fd:97:
         38:63:14:13:50:a3:95:12:a9:5a:c5:e7:21:87:4d:d6:75:08:
         84:41:41:4f:14:8a:21:1e:be:c9:d9:26:f8:31:f3:5e:42:44:
         e7:6f:07:6b:ec:d5:82:89:b2:a6:c4:bc:b9:a6:b3:20:a0:3f:
         e5:73:8d:0f:6d:de:77:61:63:89:5e:02:b7:61:07:b4:c8:0f:
         5a:43:d5:29:43:5f:d2:f1:3e:0f:71:9b:f1:10:7a:36:a4:e9:
         3c:ba:c5:8c:84:4e:5f:d8:9f:63:80:12:b3:eb:3e:10:9f:5d:
         ad:e0:88:7e:91:4e:18:c4:be:36:36:83:a6:1c:19:a9:ad:5c:
         f1:7e:60:f0:f6:19:21:76:63:df:06:39:97:c4:68:10:fb:2d:
         48:29:b2:42:46:b9:a0:85:29:d2:1a:f0:5f:9f:56:b7:e5:16:
         95:71:0b:af:64:7b:ca:2f:dd:50:e4:a1:bf:b2:21:b5:08:52:
         8c:f1:86:36:43:93:38:72:28:bf:50:49:6c:97:c1:c0:a6:fe:
         46:d9:0e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:00:20 2025 by rpki-client