Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/c6ff9d55-8f14-36f1-8455-9697eb22b65c.roa
File:                     c6ff9d55-8f14-36f1-8455-9697eb22b65c.roa (raw, json)
Hash identifier:          OQfq9YijlA/aVL1ty9/TbnkXslU0OiYYj8hVvjIEdco=
Subject key identifier:   32:F1:00:EB:FA:D3:F3:B3:36:16:D3:B6:D4:13:65:23:39:74:54:54
Certificate issuer:       /CN=56c0805c-5631-4805-a7f4-dcc62b92b16f
Certificate serial:       010D0C9F4328584B4FDC7AFFE776CDA523129B00
Authority key identifier: C8:3E:94:9F:AF:94:43:DB:C0:D6:17:62:14:4F:4A:58:02:68:35:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/c6ff9d55-8f14-36f1-8455-9697eb22b65c.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     400653
IP address blocks:        2607:f470:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/56c0805c-5631-4805-a7f4-dcc62b92b16f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/56c0805c-5631-4805-a7f4-dcc62b92b16f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:7a:ff:e7:76:cd:a5:23:12:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c0805c-5631-4805-a7f4-dcc62b92b16f
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=6c715798-4a88-43b5-bbac-efdf93081caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5a:c4:78:2f:20:ee:e6:1d:f3:fc:d8:41:8d:
                    86:52:cf:26:9d:b3:da:7b:40:47:6f:2a:87:74:6c:
                    87:e4:f4:8b:c8:95:26:fd:7d:e5:63:c2:e9:21:40:
                    27:bd:41:69:a5:2f:c8:63:ea:d1:4d:ba:d4:9a:88:
                    9d:aa:95:8e:a2:fc:34:1b:9f:8a:fc:48:91:42:c7:
                    8b:c0:32:49:f6:b9:07:60:57:2d:54:74:e7:9c:0f:
                    11:83:4d:de:86:1e:ac:bf:b3:4b:f0:43:31:12:48:
                    73:13:93:9f:be:19:18:35:f4:81:14:d8:46:3e:8c:
                    40:78:bf:1c:b8:08:58:38:64:10:f3:b6:ff:3d:0b:
                    88:b8:d0:9d:86:70:2f:46:0e:e1:01:24:8f:03:10:
                    fa:bb:cf:3a:79:37:3e:5c:d9:78:a6:ee:31:1c:4b:
                    1c:e3:cb:17:03:77:c2:d0:06:72:49:25:1b:65:af:
                    92:e6:bf:92:08:23:93:9f:80:f0:cc:1b:9a:21:50:
                    8c:1a:e2:97:f8:2c:c6:9c:d7:2a:63:72:c1:ba:b5:
                    08:21:79:bb:12:62:2d:e5:94:60:8a:7c:ce:81:3e:
                    da:b2:2c:95:1f:8c:95:b9:6d:1a:05:1b:c4:32:c1:
                    f1:98:bb:61:1d:13:d0:7e:d3:0a:0b:d9:2b:75:ec:
                    04:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F1:00:EB:FA:D3:F3:B3:36:16:D3:B6:D4:13:65:23:39:74:54:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/c6ff9d55-8f14-36f1-8455-9697eb22b65c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/56c0805c-5631-4805-a7f4-dcc62b92b16f.crl

            X509v3 Authority Key Identifier:
                keyid:C8:3E:94:9F:AF:94:43:DB:C0:D6:17:62:14:4F:4A:58:02:68:35:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f470:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:2f:f2:71:f5:9c:23:0c:0a:39:13:99:4e:7a:34:04:20:f4:
         d1:14:c4:73:24:7a:fa:16:16:cb:79:e5:5f:a6:da:f5:6b:a4:
         e1:4d:d5:cc:8e:f1:d5:4c:64:84:53:4c:cc:0d:9b:cb:df:ae:
         b4:7b:a0:49:fd:96:f7:16:39:77:7c:2b:10:f6:fa:2e:e3:a5:
         31:87:26:e9:90:fe:6b:1d:2c:25:ac:3b:10:b5:8c:a2:c3:b8:
         ef:ea:ad:e5:30:ba:3f:46:3c:7c:91:22:8f:4c:5c:06:a5:45:
         67:da:58:60:1b:6c:29:17:29:b9:59:e8:ee:8a:59:00:1e:87:
         bf:d6:b7:27:17:fb:c0:de:a7:5c:65:ca:0d:eb:bb:5f:0d:c9:
         80:f5:a8:8f:28:01:5a:20:f5:d4:72:77:53:ad:72:6b:cc:5b:
         1c:e2:d5:5b:04:7e:7c:90:b8:fa:aa:62:55:69:32:17:ee:ea:
         f5:f2:08:de:e8:a6:98:05:f6:4b:8b:72:8c:c4:f0:25:45:88:
         8b:8b:e8:67:dc:f2:30:d5:e0:6d:80:90:fc:af:12:2a:ea:fe:
         25:0a:3d:ce:82:cf:7d:e1:d7:e4:cf:b5:31:e3:e0:ce:45:d6:
         22:29:e7:65:1c:77:d3:e0:69:90:f1:8d:b5:80:a5:ad:d7:b1:
         ad:95:a4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:53:15 2025 by rpki-client