Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/e7280f71-9f38-3a78-a817-bbd05358fa36.roa
File:                     e7280f71-9f38-3a78-a817-bbd05358fa36.roa (raw, json)
Hash identifier:          UaBYJlKex82SCl6t+I6vG/6t316HyMmr/jEIAjwXjQc=
Subject key identifier:   D1:2E:A5:B0:E0:55:B7:A4:7D:A8:A5:17:30:B9:C2:A1:EF:A6:06:C7
Certificate issuer:       /CN=ca388b18-5cbc-482c-bac3-f729d5c2e4dd
Certificate serial:       010D0C9F4328584B8EACD857C0BDA8426F1EA480
Authority key identifier: D9:2B:8A:38:99:14:2B:2A:73:4F:7E:5A:30:14:CD:BB:FB:0A:D6:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/e7280f71-9f38-3a78-a817-bbd05358fa36.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     6597
IP address blocks:        2605:35c0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:d8:57:c0:bd:a8:42:6f:1e:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca388b18-5cbc-482c-bac3-f729d5c2e4dd
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=2d832c68-566a-4206-925e-cea2b3ae789f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5e:7f:99:e7:5e:cd:41:02:8f:1c:8f:a6:28:
                    a8:60:c4:bb:9d:b7:4a:f3:76:6f:5b:cc:21:b1:10:
                    61:9e:64:0b:2b:60:dc:80:9f:d6:dc:ce:7b:91:18:
                    7f:29:c3:44:7b:ac:d1:ac:72:e7:f1:dc:5d:49:39:
                    9e:d2:29:35:5d:f6:ba:e3:54:9d:7f:63:91:9a:25:
                    58:1f:0b:7c:ed:7d:fe:49:7d:87:03:4d:8b:6c:9d:
                    b6:52:63:2d:f2:83:bf:4c:48:2c:b2:56:67:4d:d5:
                    cc:6f:e4:c5:3e:1d:7b:7b:f9:ba:18:5a:1b:4c:ba:
                    35:fb:57:a5:04:15:19:90:4d:08:2a:dd:88:fb:fe:
                    49:bc:51:c7:a1:69:6b:2a:5f:2c:78:50:59:9f:5e:
                    78:c6:83:c8:50:ef:ac:55:ff:f3:86:db:74:99:2e:
                    15:ce:01:2f:7f:2e:ed:d8:ad:4a:fa:3d:1b:b8:dd:
                    66:18:a3:3e:af:c8:5b:41:e6:1b:b2:ae:81:73:57:
                    0b:e2:f2:be:de:2e:6a:56:6d:d8:1e:69:66:fd:93:
                    d9:d9:15:23:9d:28:ff:76:ee:81:bf:e7:dd:9e:50:
                    da:db:78:2f:4d:a1:80:61:73:bc:ce:b3:6c:05:e6:
                    3e:f2:d6:78:2e:c0:35:1c:6b:b6:b1:d7:1b:ea:26:
                    c7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2E:A5:B0:E0:55:B7:A4:7D:A8:A5:17:30:B9:C2:A1:EF:A6:06:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/e7280f71-9f38-3a78-a817-bbd05358fa36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:2B:8A:38:99:14:2B:2A:73:4F:7E:5A:30:14:CD:BB:FB:0A:D6:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca388b18-5cbc-482c-bac3-f729d5c2e4dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:35c0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:77:83:c5:97:b1:eb:7d:77:bd:b8:bd:a2:9c:39:50:c7:98:
         34:f4:f7:d3:eb:85:54:5b:77:d3:7b:44:9b:d8:28:d0:11:63:
         ea:65:f1:92:2d:49:b2:bc:8f:05:3d:7e:37:34:0b:b8:18:f2:
         49:80:35:0e:50:b7:a8:78:77:cd:28:54:09:42:67:27:99:36:
         ab:cd:a2:27:49:c0:ea:c0:f3:f5:68:07:25:a6:86:a3:cf:f0:
         67:37:c8:e9:c0:8a:64:23:0c:0a:23:bf:fe:75:a5:cb:5a:ba:
         14:13:2f:1f:6c:40:8d:7e:3f:9f:2b:60:69:1b:4e:2e:7e:17:
         61:78:31:ec:dc:07:f2:6c:fb:2d:e5:10:77:79:4d:49:4e:79:
         e0:9d:e5:9a:ef:0f:6b:21:cf:d1:95:be:8d:35:4b:5f:70:26:
         f0:cf:85:a9:19:62:10:7a:dc:74:b4:0d:15:ad:0e:92:c7:62:
         9b:00:06:38:08:27:b2:1c:09:87:9e:7e:3d:22:4f:36:0d:81:
         a2:32:a2:9e:a7:9e:72:ef:cb:ff:f5:d3:13:2f:48:83:01:32:
         70:1d:6a:17:a3:23:27:a0:fe:c1:56:4a:cc:44:db:48:7b:70:
         fc:b3:f7:98:ea:33:c7:dc:b2:ff:f6:32:80:d9:35:e4:47:35:
         39:0f:0e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:20:34 2025 by rpki-client