Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/9c288285-892f-3b71-b073-ac54e51371cd.roa
File:                     9c288285-892f-3b71-b073-ac54e51371cd.roa (raw, json)
Hash identifier:          Sb6bHWNA/c5IQKscrxgqdexJBeQ2tU1KLKGvIcA2n1Y=
Subject key identifier:   EB:54:66:71:F5:85:0A:1C:30:EE:B8:CC:8F:78:C4:C9:2B:6A:55:3A
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584AE89122746533D53E0DBE7600
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/9c288285-892f-3b71-b073-ac54e51371cd.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        2605:dd40:8570::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:22:74:65:33:d5:3e:0d:be:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=175fbb36-cea3-4ab8-82c4-ef807ea26e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:56:fd:13:ce:2a:65:69:9f:bf:79:d6:39:ba:
                    cd:e1:b9:ff:1d:88:ba:fd:cc:3b:7b:31:66:36:e6:
                    d5:96:1f:b9:df:2a:4e:e4:7e:ca:ee:b3:6a:b3:e2:
                    99:20:63:8a:0d:fb:db:64:ed:0a:4f:42:56:ee:0a:
                    94:50:c8:bb:df:84:fb:d1:9a:97:ea:96:ff:02:85:
                    b9:78:c2:73:a4:1c:34:ee:ae:74:28:a6:01:ca:5d:
                    3d:82:5c:81:5c:44:f3:c5:a6:59:af:3e:67:34:65:
                    e0:3d:47:14:7c:31:5c:64:5c:a0:76:8d:d2:b6:0e:
                    ff:1e:69:8f:19:94:0a:85:3e:5c:d3:48:75:e7:5c:
                    1c:98:53:a8:6e:fc:ad:7b:93:7a:d6:fb:cf:1f:3d:
                    3d:81:ae:9f:03:40:38:05:23:d8:cd:da:5a:73:8b:
                    88:bf:56:c0:02:06:82:f2:d8:28:6a:0f:60:45:ff:
                    18:40:f2:e0:58:fa:1d:03:0a:e2:2e:c7:d7:6a:b6:
                    dd:92:53:53:fe:73:5e:79:8e:09:54:99:c3:22:da:
                    de:a5:41:0d:16:1f:8b:c1:d8:23:94:8f:ee:82:b2:
                    2f:22:c2:1b:3b:da:3a:46:71:51:fb:75:26:3d:73:
                    66:82:17:54:a6:67:ea:4f:25:db:9c:0e:c6:87:50:
                    04:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:54:66:71:F5:85:0A:1C:30:EE:B8:CC:8F:78:C4:C9:2B:6A:55:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/9c288285-892f-3b71-b073-ac54e51371cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8570::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:8c:aa:c5:55:d0:08:25:3b:28:59:a2:3b:27:49:46:a5:ee:
         2c:50:f1:18:43:c7:8a:21:b7:06:e6:1f:b3:11:9a:65:6e:7a:
         8a:b9:3c:34:90:5b:d5:86:06:b3:7f:c1:78:65:fa:5c:93:ba:
         c7:26:96:d0:e3:85:7b:78:75:e4:93:9c:91:f0:7f:5b:02:ac:
         28:d0:c7:ac:61:72:d7:57:30:0f:1f:a6:00:e2:d2:81:1a:50:
         09:e1:cb:22:c9:97:d4:17:c6:8c:44:67:b0:75:d5:45:cf:00:
         92:b7:14:18:b9:37:d1:23:8d:db:05:f1:d0:c9:44:3d:25:4a:
         e2:35:df:6d:22:4c:d6:a8:2f:b1:f9:16:fa:6f:0d:05:df:26:
         1a:90:fa:d3:2d:17:23:64:c5:72:37:89:a8:0a:1f:65:f7:be:
         db:7a:8c:92:55:39:d3:00:0e:6b:8a:a1:33:44:6f:dd:53:e8:
         18:e4:fc:b5:67:5e:2b:01:7f:59:e4:a8:04:c4:a2:1c:a5:a5:
         62:9c:07:a8:10:12:ac:d6:35:8d:bd:ac:5b:e0:52:35:a5:ca:
         6e:20:cb:8b:b0:f6:e9:b5:bd:b7:82:a3:65:88:f6:11:76:c9:
         76:24:62:ce:aa:91:f5:1b:57:81:1b:9f:7a:ac:aa:72:d6:4c:
         0a:cf:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:10:42 2025 by rpki-client