Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/0b8dac88-d626-37fb-b9cf-989b3d3c4543.roa
File:                     0b8dac88-d626-37fb-b9cf-989b3d3c4543.roa (raw, json)
Hash identifier:          D/NnaJxovEtV3CY3aWcIVtveR3RzFiyHpLEUSaPwMGA=
Subject key identifier:   AD:5E:6F:AC:F8:00:99:99:AD:1F:B6:17:AA:B5:24:0F:73:D4:E9:20
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F4328584B2A2C2DF0B0F34B85D5C4E600
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/0b8dac88-d626-37fb-b9cf-989b3d3c4543.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     14413
IP address blocks:        2620:119:5080::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:2d:f0:b0:f3:4b:85:d5:c4:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=ddbe0136-bb11-40ec-b521-99a90f2f794c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:13:10:67:48:74:60:80:a4:b2:96:9a:75:
                    06:1b:60:c6:5b:dd:99:a6:32:5f:69:46:aa:97:2c:
                    be:b1:66:64:96:48:19:a1:58:4b:62:02:5c:da:3b:
                    cf:35:f3:a3:6e:eb:a5:02:4a:92:04:48:d8:14:33:
                    10:17:a7:a2:58:5b:76:63:80:a8:83:32:e9:f0:2b:
                    d8:81:c5:55:26:e0:c8:b7:48:8f:58:81:16:5d:34:
                    8b:30:3c:30:03:4b:ce:29:98:eb:88:d7:67:d7:91:
                    ff:16:03:cd:c5:66:13:0d:5b:c5:cf:69:9c:d1:a7:
                    f6:a4:86:6a:6f:40:c9:0e:a4:38:8c:5d:68:9a:6c:
                    2f:03:6b:66:d1:41:3e:c2:c5:ed:59:2e:16:d9:87:
                    63:c3:f7:79:fe:ba:64:99:37:8f:de:e4:2b:56:5d:
                    5a:c7:e9:29:af:2e:f4:0e:c3:cf:e2:be:59:de:31:
                    78:31:68:c4:1a:50:ce:8a:32:09:2c:68:1e:3f:b4:
                    91:f9:f3:e6:25:31:63:59:9c:e3:7a:2c:08:2f:91:
                    7d:1f:94:cf:a4:1b:a2:a6:95:4e:61:d8:bc:27:ea:
                    82:53:eb:b6:f7:9e:99:68:b2:5a:3c:c9:f8:1e:56:
                    7d:4b:d7:58:e2:5c:fc:71:84:a2:09:7b:1c:b3:a5:
                    23:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5E:6F:AC:F8:00:99:99:AD:1F:B6:17:AA:B5:24:0F:73:D4:E9:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/0b8dac88-d626-37fb-b9cf-989b3d3c4543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:119:5080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:99:65:fe:4c:f1:b0:70:70:46:9b:ad:4a:c7:46:02:bf:66:
         1d:cc:7f:71:8d:a5:ba:ec:80:f7:6e:d8:9d:3a:95:74:3c:d9:
         cb:c3:19:d8:6a:e3:c7:b0:1f:7d:9f:92:b1:3b:ac:4b:ba:ba:
         cf:00:95:ae:98:f8:6a:a8:eb:90:26:63:d9:16:7f:0d:46:db:
         2e:d3:7c:4f:bc:46:e6:0a:ff:eb:09:c1:6d:00:7f:ed:c4:0a:
         32:34:1b:a5:d9:2e:bc:6b:8e:7d:aa:72:c6:f3:d0:70:6f:b1:
         59:ed:fc:61:fa:34:18:f7:11:df:8b:97:e2:3f:4d:ca:77:80:
         55:b0:36:c2:79:ab:a1:0d:a2:4f:63:94:7b:60:0c:60:3d:df:
         36:dc:6c:26:03:7c:87:c3:82:8c:6e:47:5d:ef:1d:d4:4f:c1:
         b4:31:b7:95:c5:65:41:c4:f0:bd:3a:bd:b7:d2:91:6c:27:25:
         6b:e5:fd:e0:33:b1:59:e4:2b:5d:85:12:6a:50:3f:a6:ea:22:
         50:17:a3:55:8f:0e:ca:33:dc:e3:b4:0d:62:30:53:60:53:2a:
         bf:2b:ce:48:46:6a:6b:13:91:ca:af:6a:19:22:7a:48:00:79:
         0c:51:2d:c5:67:e3:d0:19:c8:d6:e9:f9:ce:ab:42:f5:da:cf:
         c2:c2:6e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:42:49 2025 by rpki-client