Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/cfe2af55-dabf-36eb-aaae-6ca9fd987d77.roa
File:                     cfe2af55-dabf-36eb-aaae-6ca9fd987d77.roa (raw, json)
Hash identifier:          p3mO86Sw5kiG2V7qh9kyhxHhyDaJuQa7DXDWuKvvpS8=
Subject key identifier:   44:D6:42:9A:19:16:7F:E2:C2:9F:6C:00:C9:24:A3:24:AC:D6:CE:2A
Certificate issuer:       /CN=27e2d7ee-d239-4928-9107-ceb95cacd0b8
Certificate serial:       010D0C9F4328584B2FC18507E020160E012C6108
Authority key identifier: F6:CD:25:DF:15:39:74:43:10:7B:B9:CB:3F:43:71:1C:D0:3A:AF:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/cfe2af55-dabf-36eb-aaae-6ca9fd987d77.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     54825
IP address blocks:        2604:1380::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:85:07:e0:20:16:0e:01:2c:61:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e2d7ee-d239-4928-9107-ceb95cacd0b8
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=20d82210-28c4-4079-a63f-f919ec879432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:1c:06:6b:79:0b:3f:58:28:34:ed:18:dd:
                    85:1a:35:57:58:de:ad:07:97:7e:27:6e:04:7b:c4:
                    3f:9c:ad:3a:2e:cf:9f:17:e2:e6:c8:7e:e1:a4:f6:
                    72:3c:4e:09:86:c0:e9:3f:06:3e:2f:2e:7f:b0:1a:
                    31:ab:b8:91:0d:11:bb:71:8f:08:93:62:93:7c:c0:
                    92:15:cb:74:b8:1e:36:f6:86:33:f1:1a:9e:6c:bd:
                    13:41:ca:91:54:2b:ef:2f:7c:c5:be:f3:85:54:13:
                    1c:c4:ed:ce:a2:bc:3a:e3:be:27:82:cd:8c:d4:d7:
                    29:6a:e4:24:be:fa:8f:f7:a6:8d:03:f7:da:c4:64:
                    47:62:a7:f0:4c:8a:af:d3:53:c5:02:0f:d8:c9:64:
                    ce:8f:50:df:4d:6c:c6:41:95:e5:fa:08:f6:0b:65:
                    7d:98:d3:98:94:ee:2b:39:94:7e:91:7f:02:8a:d8:
                    fb:3c:78:69:18:ba:89:37:21:05:4e:70:38:32:21:
                    68:1b:29:9e:35:47:44:f1:73:cf:a1:51:1d:b7:45:
                    e7:71:77:25:58:6f:00:ad:f7:5d:f1:7a:ea:c8:02:
                    62:2b:2a:24:4b:04:16:8b:55:ea:3c:53:64:b7:e2:
                    e8:0a:68:aa:fc:0a:eb:5e:0f:18:e9:f4:92:6a:d0:
                    19:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D6:42:9A:19:16:7F:E2:C2:9F:6C:00:C9:24:A3:24:AC:D6:CE:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/cfe2af55-dabf-36eb-aaae-6ca9fd987d77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.crl

            X509v3 Authority Key Identifier:
                keyid:F6:CD:25:DF:15:39:74:43:10:7B:B9:CB:3F:43:71:1C:D0:3A:AF:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:3e:dc:33:08:67:0f:be:91:52:eb:52:12:53:c5:ba:84:5b:
         fc:e8:3f:5f:f3:1f:e0:fd:d5:f7:ee:3b:9e:a7:4a:91:5d:0c:
         31:1d:02:fa:1a:72:cc:8e:95:db:ab:96:2b:2a:89:7d:a2:7d:
         92:4e:db:49:22:3c:27:b0:74:e7:9f:69:00:a3:c2:16:75:e8:
         59:2e:18:5d:92:73:78:d5:3e:10:e3:78:c1:18:67:85:a8:60:
         db:8f:14:fd:b4:f9:f9:f8:04:72:87:a3:b1:18:6d:f8:9f:ee:
         2e:8d:7b:37:02:16:85:31:e4:b4:85:d4:f7:5d:9b:29:ff:f7:
         4c:3f:0f:fb:34:70:c8:30:a3:64:73:81:45:f9:73:98:93:25:
         9e:d2:4f:7e:26:c6:16:a9:81:9e:b5:38:63:93:c6:c7:c1:89:
         a7:ea:0b:d7:87:eb:78:61:b4:d8:f9:11:26:9f:b7:ce:d0:d1:
         56:0a:29:9a:3b:f4:e0:53:4f:78:7c:0a:12:9c:fa:2d:10:fa:
         9a:02:2a:b7:ef:a4:9b:55:3c:6e:e2:84:71:c1:7b:e6:d4:69:
         68:35:44:db:5a:78:bb:db:b2:0a:28:0e:0a:79:03:f0:c9:42:
         e4:1b:7d:83:47:de:9a:59:33:21:b6:79:53:f8:63:d3:ae:23:
         c9:96:ce:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:42 2025 by rpki-client