Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/27b18fe8-7c72-374b-b454-5e9f4b2fba4e.roa
File:                     27b18fe8-7c72-374b-b454-5e9f4b2fba4e.roa (raw, json)
Hash identifier:          3KdN6DLrlWhn1IwaeW2jeKnjV0qdyKnmj2HCh6hBSz4=
Subject key identifier:   94:53:28:7F:7D:0F:8F:B3:90:95:A6:43:EF:78:66:38:7B:90:77:F3
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F4328584AC876337AEA29C1F8612EECF6
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/27b18fe8-7c72-374b-b454-5e9f4b2fba4e.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2605:a7c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:33:7a:ea:29:c1:f8:61:2e:ec:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=f809ba5f-1414-446c-a686-8ad37a39e486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:00:d0:cd:b3:83:db:50:00:b7:81:02:ef:a0:
                    19:f4:18:7b:40:38:60:af:2a:1b:be:aa:cd:4f:db:
                    3b:c7:fc:1c:26:3f:3c:5d:92:05:b4:75:cd:81:2e:
                    b0:db:de:8d:37:6f:ad:22:0b:43:72:dd:37:a0:15:
                    bd:bd:32:7b:94:dc:17:01:ab:16:7e:2f:1e:1e:31:
                    27:8a:3d:7d:42:14:82:31:46:b9:09:7e:bb:a2:1a:
                    18:22:a3:71:cc:a8:89:cc:84:55:1c:d6:67:b5:ae:
                    ca:38:9d:dd:9c:61:a9:a1:fe:80:37:26:6d:3b:12:
                    69:5e:95:67:da:2d:b7:9d:f5:da:ef:ed:c9:92:b2:
                    0e:1f:ee:7b:80:5d:69:c1:73:da:01:cd:c7:d2:cd:
                    44:ed:2f:a4:79:b7:15:f6:9d:28:87:81:ee:d4:7e:
                    9f:fd:8d:59:f0:e3:51:83:b5:b2:6f:0c:f3:c3:0e:
                    e1:1d:57:a5:3e:be:56:b8:d5:16:d2:d1:15:1d:25:
                    14:50:fa:58:4c:fc:b7:cb:06:94:37:00:bd:e3:66:
                    f6:12:d8:bc:5a:b3:30:ec:b0:58:f6:c5:64:8e:90:
                    6c:7d:f2:75:ce:62:05:63:ea:a3:bd:5f:4e:3c:87:
                    ad:15:76:98:e3:a9:7d:f1:80:4c:3e:9f:fa:30:1f:
                    1d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:53:28:7F:7D:0F:8F:B3:90:95:A6:43:EF:78:66:38:7B:90:77:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/27b18fe8-7c72-374b-b454-5e9f4b2fba4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a7c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:4a:64:02:52:81:af:86:14:cc:bc:75:56:f6:87:32:b6:d5:
         c0:64:c3:b7:f6:d0:dd:c3:c3:81:3b:94:8e:bf:d0:ce:13:85:
         dd:e0:86:9d:ee:73:1e:9e:47:c5:c1:4d:29:10:4d:fc:7f:87:
         ef:25:b7:81:f4:18:4c:8b:d7:d5:92:a6:e6:fd:59:99:5e:24:
         de:cc:cc:a4:f6:5f:43:00:6d:e9:17:6f:84:bd:63:a4:c7:e5:
         bc:17:0b:a6:ee:aa:af:15:a6:3b:0a:0c:1e:d5:b0:46:e0:24:
         38:11:b7:87:d8:3f:13:77:86:b7:ef:cb:44:d7:ab:ae:33:cf:
         bb:ba:1c:93:3a:bb:72:49:45:cb:98:35:3e:6f:8f:78:55:48:
         6a:6e:f2:bd:b9:a5:c0:43:12:07:cb:be:0b:a7:57:ba:bf:9f:
         8c:bc:00:97:e8:c2:0d:15:7a:86:c3:58:0c:bc:ae:34:be:99:
         3a:43:53:e5:e7:fe:02:e5:1c:52:34:1c:28:20:e0:12:df:e5:
         b1:76:03:b9:2a:0c:ff:2a:cc:68:b9:b5:1c:cd:ae:69:15:81:
         18:35:0e:37:11:ba:a9:b6:65:39:55:6d:29:53:d4:8b:39:e0:
         63:69:0d:72:24:c7:70:69:4f:65:c7:73:e2:4c:6c:d8:c8:0d:
         95:98:fc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:53:16 2025 by rpki-client