Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/5031f8d3-aef9-35d0-bafc-1b400ddb8d88.roa
File:                     5031f8d3-aef9-35d0-bafc-1b400ddb8d88.roa (raw, json)
Hash identifier:          wWdT9fHlc00HWLF4Nqjea5MxBSKQVixa1DhiCtJyk6c=
Subject key identifier:   77:3B:E9:75:43:4D:C0:4C:B0:BA:26:A0:0B:A3:72:FB:F6:6E:A3:B6
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584B679734E79A6E700E59CAEC80
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/5031f8d3-aef9-35d0-bafc-1b400ddb8d88.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     54994
IP address blocks:        2607:b300:fd04::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:34:e7:9a:6e:70:0e:59:ca:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=7de7060d-a0ec-4101-a52c-be5889385cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f0:30:e3:57:2b:a0:a7:c5:fa:9d:7c:25:68:
                    a7:e4:75:1a:ad:29:d0:7c:78:e5:cd:df:81:8e:26:
                    7a:54:9f:10:d4:ed:ac:93:56:e2:11:24:86:6e:5e:
                    4c:0b:4b:5f:80:da:2e:82:b9:ee:b0:75:5f:30:ac:
                    8c:ec:99:22:f7:9d:d4:8c:dc:86:e9:87:5f:fa:08:
                    20:0b:5f:cc:84:21:66:9d:26:a9:26:c6:e3:eb:de:
                    bb:83:39:f2:5d:54:ad:d1:11:ed:c7:b9:d4:30:78:
                    21:bf:fe:86:3c:8d:d8:07:e3:bb:46:f5:30:6d:6e:
                    ab:d3:a0:aa:64:09:db:b4:41:2f:d3:2c:df:26:03:
                    fd:94:93:5a:91:8a:ec:7c:6a:63:5d:34:52:81:a4:
                    d0:c8:18:09:c7:66:c7:45:0a:a8:94:99:0a:06:5f:
                    fb:20:23:53:70:f9:fd:67:7e:b6:8c:f6:a7:aa:f4:
                    75:72:04:80:6a:d6:31:20:35:09:b9:81:4d:05:c0:
                    73:03:d4:a1:6b:73:d3:42:ff:23:b2:81:11:e8:83:
                    84:7f:9c:68:f3:8d:62:67:e5:7c:8f:2d:7f:ce:8d:
                    23:7c:3a:ed:9e:68:cf:6c:e1:b8:90:3e:63:f8:af:
                    7a:7f:9e:e5:6f:ee:6f:b8:b4:e1:6e:f1:13:46:59:
                    94:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3B:E9:75:43:4D:C0:4C:B0:BA:26:A0:0B:A3:72:FB:F6:6E:A3:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/5031f8d3-aef9-35d0-bafc-1b400ddb8d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:b300:fd04::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:f9:47:26:73:d9:e8:ea:13:cc:5c:07:21:cc:67:35:07:66:
         eb:e3:76:fb:fd:3a:43:c4:ad:6d:08:bd:80:62:e1:a2:85:f4:
         92:f5:8c:ee:2e:49:40:d2:c5:ce:5a:5c:1b:bb:13:ac:9d:77:
         d3:e0:03:27:0a:26:6d:74:bd:6c:42:99:8a:36:84:48:c5:e5:
         ce:6d:9b:48:b8:ea:75:61:33:eb:d3:97:76:a8:b4:bc:96:03:
         6f:69:a1:8e:b8:e5:71:d8:c6:fc:50:24:e3:15:b2:29:0f:20:
         a4:a7:dc:a2:8d:4f:47:37:3f:6d:50:42:f0:da:db:94:85:f2:
         fe:e3:ca:c7:56:f0:47:3a:ec:0e:55:20:a0:9b:e3:e6:8a:7c:
         3e:1c:23:49:4b:51:f8:a8:9c:16:d9:bd:14:2f:45:3d:5e:1a:
         bb:74:c7:f5:8a:e5:8a:08:0e:4c:07:45:a6:ce:bd:6f:c9:02:
         6b:bc:65:45:40:f7:63:35:88:11:d2:b7:24:a6:cf:94:1e:c4:
         b8:88:e9:95:c3:f8:68:31:41:27:a2:76:ed:ca:e3:52:19:8c:
         ff:08:6a:d7:e0:83:ed:5f:7e:dd:11:42:ae:0a:9d:70:31:58:
         9a:0e:5f:c9:7d:7f:a7:23:9f:bb:4d:79:e7:14:9a:11:36:9f:
         95:cd:ed:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:16:36 2025 by rpki-client