Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/5094da0f-38c0-3760-9e55-99dbeb44e37c.roa
File:                     5094da0f-38c0-3760-9e55-99dbeb44e37c.roa (raw, json)
Hash identifier:          XoB0YyPQ7Zt+vMXBU//luEcNW+6HMPVyB6HuwU9WsQU=
Subject key identifier:   E9:CF:DE:DF:5C:BD:F3:BD:96:E5:2B:93:0B:64:15:39:7C:81:2D:27
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584AF0F1555E41D5F8BF47DF2080
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/5094da0f-38c0-3760-9e55-99dbeb44e37c.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     397849
IP address blocks:        2607:13c0:fff0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:55:5e:41:d5:f8:bf:47:df:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=ab1f86de-38b6-4497-8f73-acbd4ddce1f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:4b:56:18:56:13:7a:ef:70:3a:2e:35:3d:
                    56:e0:09:60:96:00:c2:13:f9:6d:4b:13:62:d7:d3:
                    d8:be:54:61:d4:e8:64:54:7f:c6:56:08:44:ed:d3:
                    7c:81:25:15:ef:2a:ff:b1:7a:25:5f:97:3f:78:c8:
                    24:be:6c:0d:a2:94:8d:50:73:20:02:cb:be:d6:a0:
                    23:e3:dd:70:01:d2:f5:00:70:24:e0:a5:e4:cd:67:
                    a2:09:8b:30:84:7c:18:1f:1e:19:7f:39:b7:2a:07:
                    42:7f:84:bc:9d:60:99:e2:6d:be:1b:24:f8:8e:fa:
                    9b:58:1a:53:01:fa:de:ba:c3:9a:e0:0b:f9:0a:82:
                    9e:81:2d:f3:bc:eb:c5:af:c9:4f:04:ba:5c:b8:45:
                    8a:28:61:52:9e:cd:7f:86:ef:98:6b:d5:ce:93:61:
                    5f:0b:d2:9f:1c:34:18:7a:07:cf:89:4a:b0:e5:58:
                    11:eb:7f:2b:76:62:40:59:5a:a6:bc:d2:c3:e6:8e:
                    e3:90:7d:e0:e0:87:b7:2a:aa:5b:26:d7:6d:3b:f8:
                    73:46:e7:4e:cf:62:d3:82:5c:4e:4c:1f:32:b5:7c:
                    9c:c3:e6:aa:10:e8:2a:92:c8:38:12:72:6e:17:76:
                    b1:4d:95:42:a8:83:52:ca:78:48:35:04:ec:b9:f9:
                    70:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CF:DE:DF:5C:BD:F3:BD:96:E5:2B:93:0B:64:15:39:7C:81:2D:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/5094da0f-38c0-3760-9e55-99dbeb44e37c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:13c0:fff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:33:e9:f6:7e:50:a2:62:64:04:6a:fa:33:84:4a:cd:55:a0:
         df:ad:4d:36:d5:b2:df:fd:ba:b2:72:70:cb:7d:9e:f1:59:93:
         d6:f4:61:ff:b9:d5:34:e3:f6:ae:59:a0:44:a0:70:94:5e:19:
         88:30:f2:42:ae:04:76:79:a0:d6:bf:52:fe:ce:56:16:f5:66:
         c4:3f:34:72:5a:8b:01:2b:d2:a4:10:24:97:f7:b4:89:1e:2b:
         d9:7f:ba:53:cd:d0:62:70:77:9f:83:34:c0:d1:74:c9:e2:eb:
         fd:98:07:8c:8c:23:d2:14:a6:af:89:53:34:2a:1d:65:7e:23:
         08:1a:04:9d:3e:92:f0:84:30:f0:74:40:9b:d9:48:c2:75:7c:
         4d:9b:f6:a2:49:9f:74:d3:f1:4b:43:a9:ac:f9:cb:11:ea:3f:
         75:0f:ef:d6:0a:7c:ec:91:cc:77:39:ba:03:78:fc:57:10:e3:
         d9:4a:25:ba:70:33:5a:33:c6:81:9f:fc:2a:84:28:83:c6:c5:
         33:b6:7d:56:c9:77:fa:31:c9:1f:1a:19:a2:9c:45:7f:8e:27:
         02:53:04:f6:b1:ab:5a:95:4b:74:27:cc:73:b7:20:01:66:af:
         22:af:4e:a9:c5:22:3a:04:2a:b7:6c:c1:cc:5b:13:7b:a0:2e:
         3d:ac:0a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:54:27 2025 by rpki-client