Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/d5585992-e680-3e2a-90c5-f5452de158cb.roa
File:                     d5585992-e680-3e2a-90c5-f5452de158cb.roa (raw, json)
Hash identifier:          GBfgqqi8+QxHsbD/kC3KUytiwBq9WTiGUjrOQSOn444=
Subject key identifier:   7C:F9:1B:35:AF:E2:CA:86:BB:CB:DA:98:FA:1C:6A:6E:1F:81:D3:79
Certificate issuer:       /CN=b76a56d7-e03c-4adc-a642-166acb54d72b
Certificate serial:       010D0C9F4328584B715CABA74084F5B980574B00
Authority key identifier: 67:6B:3E:21:02:05:28:69:31:0F:D6:D0:1C:A6:E1:3E:BB:8F:E8:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/d5585992-e680-3e2a-90c5-f5452de158cb.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     32277
IP address blocks:        2605:ab00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:ab:a7:40:84:f5:b9:80:57:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76a56d7-e03c-4adc-a642-166acb54d72b
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=4dfc1045-4d1e-47f9-a460-b8da224d917a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f9:a5:60:bd:39:bc:7d:cf:5d:1a:4c:8f:1b:
                    fd:6a:5b:4c:55:5a:4c:c3:52:13:f1:7e:83:4d:b5:
                    60:99:a6:70:44:55:de:7e:6a:c0:c7:22:ea:25:e4:
                    75:1c:66:92:48:0e:46:25:ac:ab:e6:c1:40:1a:78:
                    85:82:32:eb:fe:7b:66:7e:09:d5:88:ba:81:aa:0b:
                    f1:6c:62:cf:97:1d:a3:6b:aa:94:7c:98:1c:e5:fe:
                    77:00:58:30:b2:77:fa:ba:23:03:32:39:15:90:b5:
                    96:47:c8:d3:1a:f5:f5:91:50:fc:e3:c5:eb:15:36:
                    c3:59:f7:46:70:43:de:6c:af:7d:f3:e2:61:eb:4d:
                    6c:20:9b:8c:52:1a:7d:95:c8:b0:c3:28:72:eb:5b:
                    60:25:90:dd:58:81:dd:0c:4f:52:98:12:c7:42:a1:
                    c3:be:2e:ad:f8:b3:08:1a:40:c4:53:c6:04:1d:34:
                    4b:f8:07:57:22:11:94:ca:f0:8a:da:e1:d2:43:37:
                    01:88:7e:49:c2:b6:e4:1a:84:4b:7e:c4:0c:dc:17:
                    b9:d6:63:6e:e8:6c:ed:da:fe:01:4f:23:ee:ee:75:
                    91:a4:72:7a:d6:c3:e6:40:f0:c3:9e:4f:ad:18:68:
                    9c:21:83:b5:6a:06:ae:15:3d:48:71:84:16:95:e1:
                    9a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F9:1B:35:AF:E2:CA:86:BB:CB:DA:98:FA:1C:6A:6E:1F:81:D3:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/d5585992-e680-3e2a-90c5-f5452de158cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.crl

            X509v3 Authority Key Identifier:
                keyid:67:6B:3E:21:02:05:28:69:31:0F:D6:D0:1C:A6:E1:3E:BB:8F:E8:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ab00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:10:ed:f3:6d:8a:27:4d:b7:2d:75:4b:7b:0e:6a:84:67:62:
         3e:a3:53:9e:ac:e3:f1:a4:75:92:63:a2:85:c3:cd:08:8a:9f:
         df:62:db:c5:60:31:dc:e9:f6:1a:1f:0d:90:9a:7d:ac:7f:af:
         6c:fb:a8:84:1b:4c:50:4b:86:41:e9:e2:95:0f:ec:3d:b4:e9:
         de:b6:1b:25:58:70:b3:32:72:26:c6:40:09:ee:06:16:f6:9b:
         77:d4:cf:44:6c:26:16:14:de:b2:3e:da:8c:0e:02:7d:4d:5b:
         0c:7c:14:8e:79:db:ae:75:8a:94:23:bd:de:37:96:ba:34:81:
         3a:58:98:5f:45:c4:3a:a0:ec:b8:5f:e3:64:23:ea:8c:8c:7a:
         74:92:85:bd:6c:b1:37:09:9a:8d:44:3f:de:28:aa:2c:f9:dd:
         a5:fc:d8:81:51:4f:5d:b0:a6:1d:76:53:f6:98:09:10:92:6a:
         f8:61:9d:52:37:6f:7e:5d:ad:3a:71:9e:1e:09:2c:4e:b0:bd:
         5b:10:dd:8f:dd:66:e4:de:e8:0a:16:1e:77:87:aa:91:79:25:
         75:1a:ef:59:7f:42:31:34:a8:57:f5:d6:2c:9f:bc:2d:b0:7b:
         c6:36:43:4a:62:ad:15:7f:61:c7:86:60:c1:d3:83:d2:09:a9:
         18:fc:54:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:26 2025 by rpki-client