Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/0fc501a8-9b51-3494-80e1-b539914bd3c7.roa
File:                     0fc501a8-9b51-3494-80e1-b539914bd3c7.roa (raw, json)
Hash identifier:          7OeRX6kq//eiJ/YaOHwACk6PR752cVyMr7qYEvr3rSY=
Subject key identifier:   4F:E8:8C:62:C6:E1:66:F9:A8:D9:DD:51:3E:50:C7:4C:13:48:8A:3C
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F4328584B1D9C1DAF4A697B3C9E106CC8
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/0fc501a8-9b51-3494-80e1-b539914bd3c7.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     26383
IP address blocks:        2605:e440:27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:1d:af:4a:69:7b:3c:9e:10:6c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=2aefd117-6249-452a-9dc7-2797b116baa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:07:ca:68:80:99:67:72:c7:4c:fa:fb:8a:d7:
                    3c:85:1a:46:5f:92:1f:b2:15:31:19:a5:cd:29:a8:
                    58:52:7c:21:dd:d0:d2:67:84:ee:de:af:5e:37:a1:
                    e4:e2:03:d4:5b:7d:a5:c9:e6:14:02:b4:a0:ff:10:
                    d7:9d:09:74:bd:0d:a2:5e:d7:71:15:1f:62:ff:65:
                    8c:21:81:39:0c:b4:36:2a:a5:83:dc:12:b7:1b:b2:
                    56:c4:dc:85:37:27:5d:b9:3e:88:2b:76:7f:d5:c2:
                    13:1d:43:b4:4e:f5:bb:d8:00:db:2c:f5:98:55:4d:
                    c7:38:70:ba:bc:6c:c6:26:e7:84:41:0e:cd:4e:82:
                    95:a9:89:04:df:19:a4:57:0b:58:c3:44:8f:a6:b8:
                    54:9e:c8:4a:c1:42:26:67:82:8a:f0:54:5d:c3:c5:
                    8d:f0:08:28:20:f6:39:fb:06:5a:b8:dd:3c:85:12:
                    ce:32:62:c1:84:c3:49:c4:27:a9:e1:95:d2:8c:86:
                    52:95:6e:0e:e2:4d:1c:3b:d0:d3:21:4a:28:07:2b:
                    85:38:9f:c7:61:12:83:ec:c3:cf:f5:d4:bb:f7:da:
                    66:bb:db:4f:ca:9b:3b:85:56:12:43:31:19:84:21:
                    b3:d3:6b:83:0a:f3:8d:a3:fc:7c:a7:e9:4b:d2:f1:
                    d9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E8:8C:62:C6:E1:66:F9:A8:D9:DD:51:3E:50:C7:4C:13:48:8A:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/0fc501a8-9b51-3494-80e1-b539914bd3c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:7c:74:2b:72:a5:3a:b3:54:36:21:fb:ee:b9:11:44:a0:39:
         68:47:3d:0d:d0:38:37:e7:da:56:8d:c1:48:c1:05:01:e4:a5:
         66:64:dc:08:22:44:06:7b:4e:e3:db:27:6e:1d:22:39:38:ba:
         5d:fc:79:22:a3:b7:6f:5a:9d:99:39:bf:d7:c9:34:1d:de:d3:
         12:ee:bb:83:d3:e7:d7:5f:b3:2c:f6:4d:81:99:30:09:e7:49:
         36:f4:08:0c:9e:95:1b:64:ee:f9:87:1b:06:69:04:49:00:98:
         8c:af:86:6a:23:2c:47:42:0b:a2:c9:06:97:20:fd:cc:71:e0:
         cf:73:ee:ec:2c:61:34:5d:ab:e7:51:a1:d0:40:ed:f1:14:1c:
         0f:08:f6:7d:de:a6:ad:b4:01:c1:1e:d7:15:cb:42:15:7a:32:
         38:f4:03:a1:84:50:37:e2:7b:d5:d3:1f:84:ef:9a:83:a7:26:
         24:bc:a1:a1:59:d3:6a:52:54:f0:1a:6c:8a:af:77:bc:b4:09:
         ec:49:04:9b:cd:4c:1e:eb:4b:a1:64:58:e0:90:5f:31:d0:f8:
         36:ca:0b:f3:48:74:06:8f:84:94:00:79:5a:3f:c3:60:e7:ae:
         08:53:b5:9b:91:88:a2:b1:37:8a:47:42:37:c0:0c:34:5b:d2:
         79:72:0c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:44:39 2025 by rpki-client