Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/785f6710-f633-3db3-a800-8dce2275f6bd.roa
File:                     785f6710-f633-3db3-a800-8dce2275f6bd.roa (raw, json)
Hash identifier:          nYPaJYjFic0K0dmW61w907JFU0IQ5JQCbmlPnB7wQpM=
Subject key identifier:   39:41:13:E8:36:1D:C5:2F:DF:B1:83:1D:28:B0:52:BF:32:DF:50:74
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584AEF4FF1CE19737D5FF93D30E0
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/785f6710-f633-3db3-a800-8dce2275f6bd.roa
Signing time:             Thu 21 Aug 2025 23:00:02 +0000
ROA not before:           Thu 21 Aug 2025 23:00:02 +0000
ROA not after:            Thu 20 Nov 2025 00:00:02 +0000
asID:                     400196
IP address blocks:        2607:8240:ff1a::/48 maxlen: 48
                          2607:8240:ff1b::/48 maxlen: 48
                          2607:8240:ff1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:4f:f1:ce:19:73:7d:5f:f9:3d:30:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Aug 21 23:00:02 2025 GMT
            Not After : Nov 20 00:00:02 2025 GMT
        Subject: CN=9d0e413c-6157-4ded-a8b1-de52adc8af2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e5:90:c1:69:fb:53:16:a0:72:a0:b7:ba:c6:
                    7d:1a:92:6f:d3:ff:ea:47:d2:e0:bb:ba:34:0e:31:
                    03:af:04:a2:16:ab:11:48:1d:6b:ce:b9:5c:70:03:
                    dd:97:bc:c2:d9:9b:f5:4d:66:4c:b7:7a:52:ee:8f:
                    6a:be:19:c8:d9:b1:2b:c1:8f:80:12:f5:bf:7d:bd:
                    80:bb:81:22:7c:1d:a7:5d:76:e9:4e:34:0d:3e:39:
                    23:61:ee:48:04:83:1e:c8:c3:df:3b:26:92:2c:1d:
                    45:e6:56:e8:01:19:e3:43:3f:e7:66:56:6d:1e:45:
                    73:cb:e2:4d:f0:a3:db:21:73:67:13:9e:a9:e4:da:
                    1b:fd:f7:79:81:ae:1b:aa:e9:be:71:73:57:5d:d8:
                    b9:24:79:eb:21:f1:75:f5:6c:ef:27:8d:fc:22:fb:
                    66:78:69:ef:10:74:98:02:dc:46:0f:c1:b5:36:23:
                    72:ea:65:f9:35:d8:65:ce:b7:b0:11:e4:1e:36:cd:
                    6a:e7:89:c3:84:3e:68:cb:31:18:42:aa:30:08:d4:
                    dd:b8:7f:35:92:ad:ba:f5:7a:db:50:bb:7e:72:f2:
                    06:42:d3:7c:17:80:9e:c8:49:57:21:09:fc:f5:c9:
                    82:7e:d7:b5:09:9b:b8:27:82:51:1a:4a:c2:57:31:
                    75:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:41:13:E8:36:1D:C5:2F:DF:B1:83:1D:28:B0:52:BF:32:DF:50:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/785f6710-f633-3db3-a800-8dce2275f6bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8240:ff1a::-2607:8240:ff1c:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:20:8d:c5:fb:6b:16:ec:7f:f6:74:10:43:64:61:d2:e7:6d:
         64:66:43:8d:a6:f0:2a:8b:61:e0:99:bd:46:12:e7:04:52:d8:
         43:33:ec:e0:2d:ab:b0:40:d1:13:cc:3c:08:56:9a:ce:4e:b5:
         ef:55:fb:c2:01:d2:2e:78:8b:28:5a:4c:c8:bc:32:de:0e:3e:
         bc:14:b0:cb:7a:d0:d5:4f:f7:95:6e:27:84:1f:eb:37:66:53:
         43:21:0a:79:b6:4b:0f:a4:25:85:91:f5:73:dc:af:52:72:49:
         a5:5c:cd:57:ce:1b:58:14:7f:5d:30:e5:1f:e3:18:b7:16:bf:
         79:9f:75:01:52:84:97:2b:f4:30:74:b4:da:99:36:54:e2:10:
         3d:56:7e:12:22:76:7c:94:0f:3c:23:c0:8f:bc:77:06:8e:16:
         71:b2:2c:68:70:64:ac:16:e2:79:ba:68:72:20:c8:c3:c0:e4:
         eb:86:dc:ee:86:7a:16:dc:7d:12:a4:dd:00:7c:22:f1:39:b5:
         63:c6:4a:79:7d:d2:4a:ac:0e:d6:1e:8e:53:7f:5a:f1:5f:4f:
         5e:80:79:1c:5f:cd:09:3e:5e:6d:2a:ed:e9:e5:47:52:e9:f2:
         64:c9:64:07:2f:c7:c2:c3:99:16:f5:84:6d:40:64:8e:00:79:
         c3:c6:71:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:01:17 2025 by rpki-client