Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/1defe652-8137-3aca-948a-42e69cc5dfc9.roa
File:                     1defe652-8137-3aca-948a-42e69cc5dfc9.roa (raw, json)
Hash identifier:          BSkJKkDA7CF6SQTUFHcG3ngF5t6kuVjmgf4/u9yaBgI=
Subject key identifier:   1A:CC:F9:FA:F9:8D:32:C8:F4:48:23:04:09:43:04:AE:4D:39:E0:53
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584B2CF6DE100B125A4D9E76C800
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/1defe652-8137-3aca-948a-42e69cc5dfc9.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     6453
IP address blocks:        2001:5a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:de:10:0b:12:5a:4d:9e:76:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=bb67346a-b154-4037-93e6-00064c6fde18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:52:ef:ca:ad:1e:0f:6d:95:21:56:b5:41:c4:
                    06:9a:6b:89:6f:85:22:62:ed:1d:b7:4c:5a:93:35:
                    a6:5f:74:0f:ae:07:29:6f:78:5c:cf:6d:c6:98:5a:
                    6c:3d:2b:b0:65:f4:77:74:ab:8b:3a:c5:1f:71:b2:
                    56:7a:33:f1:98:7f:30:b0:f2:0d:df:58:9d:68:10:
                    2c:1d:77:a6:14:0e:ec:51:91:b8:ce:a9:fa:d1:42:
                    47:10:13:90:fc:df:91:73:9d:84:b0:78:72:06:0c:
                    9b:7f:5d:1b:7a:f8:3a:cf:ec:f6:59:e5:20:a7:34:
                    11:b1:77:e8:d3:50:50:e0:cd:75:2e:76:3a:1f:3d:
                    82:db:1c:eb:c6:71:2e:12:9a:2f:f8:41:93:87:9a:
                    a2:2c:25:ad:15:fc:ea:07:d2:46:e8:0c:aa:02:55:
                    7a:37:bd:8a:aa:64:cc:d6:85:bc:c4:5a:bb:db:7e:
                    a6:c8:33:e1:a2:a4:c5:5f:ba:16:65:d6:49:2c:4d:
                    56:b5:a1:5e:67:40:6e:0a:19:d3:1b:72:b5:59:13:
                    f5:bd:6e:79:50:7a:da:57:0e:fd:8a:fa:44:90:b6:
                    67:6c:60:0c:a5:70:79:66:47:dc:ba:25:13:cf:b7:
                    5d:2c:ec:54:7c:f1:9c:e3:33:50:98:d3:bb:f3:95:
                    47:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CC:F9:FA:F9:8D:32:C8:F4:48:23:04:09:43:04:AE:4D:39:E0:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/1defe652-8137-3aca-948a-42e69cc5dfc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:5a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:1b:cb:47:5e:ae:10:0b:9d:ae:df:e2:a9:a0:72:a9:aa:3b:
         6a:0e:49:fe:8f:5c:72:90:62:db:9a:be:2e:4b:ab:76:d1:70:
         74:af:af:ee:8a:72:7a:f4:9b:4c:dc:a5:29:99:fb:7b:6c:bd:
         0d:64:27:6b:ed:ee:d9:2e:b1:3d:43:93:a3:1d:6e:e7:31:78:
         b8:f5:5d:44:e8:2b:26:7e:68:c7:fa:9b:e7:90:ce:b2:d7:bc:
         7c:f5:77:19:a7:41:66:72:14:55:76:a4:45:71:cb:94:71:b9:
         f0:94:bd:05:aa:d5:bf:30:ee:8f:a1:59:da:4b:a9:25:f0:4c:
         b2:e2:d1:0c:f9:64:c9:e7:cc:0d:01:ba:62:c5:9c:d6:ec:18:
         75:94:70:0b:39:e0:e2:24:b9:66:df:61:7d:3f:9b:66:6d:30:
         6c:73:16:76:53:ab:28:cc:de:1d:0e:0c:17:e3:89:56:2d:23:
         34:c8:8f:40:dc:2a:11:6f:ce:27:ce:29:c4:06:27:6f:dc:f4:
         96:a7:d8:b9:d2:1e:dd:2e:86:ea:b8:88:c2:69:61:11:c1:ee:
         06:e9:c5:14:b9:b2:23:05:a8:24:44:9a:98:2d:c0:97:16:92:
         18:79:93:5d:1b:17:9f:75:bd:4a:dd:4c:55:6b:82:31:80:d3:
         01:c9:02:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:35:35 2025 by rpki-client