Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/3ad17dd4-fbf0-3240-ab82-33c16fbc1bcc.roa
File:                     3ad17dd4-fbf0-3240-ab82-33c16fbc1bcc.roa (raw, json)
Hash identifier:          xSjkPsFQ+3G6Jj1hfMjtppygNhMD/VtSKgrsT+cty/8=
Subject key identifier:   EB:31:45:E3:A9:0E:AC:6F:B0:6A:BC:0F:37:FE:D5:EB:76:6F:B5:1B
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F4328584B715CA81B3A25A1D232EE29C0
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/3ad17dd4-fbf0-3240-ab82-33c16fbc1bcc.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     26383
IP address blocks:        2605:e440:11::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:a8:1b:3a:25:a1:d2:32:ee:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=6024de9d-82b7-42f2-9e5e-a6de7d1967c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:89:ee:17:69:bb:fb:a9:76:c4:85:76:af:
                    9e:96:22:79:ca:da:00:92:8e:e1:91:fb:00:da:e3:
                    fe:1a:ed:3f:65:4b:0e:ba:63:b7:4e:87:53:66:af:
                    c2:dc:6f:ac:46:f8:f5:7f:27:db:96:ba:2d:5a:ee:
                    7d:63:c9:0b:73:04:12:c6:42:62:51:30:77:a9:c1:
                    be:1e:02:65:6d:8d:ad:e3:cf:16:c4:68:97:e5:0a:
                    28:53:6f:f7:49:ce:e7:b4:22:42:c5:9b:99:30:36:
                    48:2f:05:f1:bc:f4:e2:93:b3:23:5d:a3:47:b3:7a:
                    67:0d:ee:6c:a8:72:5b:1b:3d:09:b5:fb:17:67:4a:
                    62:19:34:be:5d:2f:55:3e:07:40:b9:8e:9d:29:05:
                    9d:1b:d7:5c:8b:9d:48:fc:11:0e:fd:11:b7:68:2e:
                    9e:01:69:18:64:9d:12:4b:78:88:03:9a:b2:c5:49:
                    48:1e:20:28:01:42:2a:c7:31:2d:b5:1f:af:c4:ee:
                    5b:ed:06:64:44:c7:1c:8e:a6:71:57:c8:1c:ae:a1:
                    96:fe:51:79:c7:7a:79:6f:f6:c2:9f:d4:3c:71:e3:
                    2c:7c:29:5c:75:03:b7:de:6f:ce:89:c8:a0:0b:01:
                    03:81:4e:a9:20:71:5e:6a:b0:42:72:a0:16:4e:82:
                    e9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:31:45:E3:A9:0E:AC:6F:B0:6A:BC:0F:37:FE:D5:EB:76:6F:B5:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/3ad17dd4-fbf0-3240-ab82-33c16fbc1bcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:e440:11::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:a0:83:8c:06:46:02:d6:50:d8:f8:c1:aa:a6:f3:69:f6:e6:
         ea:56:c3:34:40:d3:20:7c:ee:7d:46:a2:dd:33:11:5d:6c:82:
         5d:d2:af:bf:b4:a5:38:42:07:ab:b5:d6:9b:b3:bd:2d:af:86:
         a7:ab:02:c0:af:78:ee:2c:40:fe:a3:dd:20:bc:4a:a3:af:05:
         44:0d:70:f5:2f:24:d7:74:8d:cd:f9:a2:32:37:f0:ee:38:c9:
         a9:63:73:48:b1:d5:d8:dc:ea:d1:cf:b6:28:0d:aa:ba:13:aa:
         39:e1:66:49:60:15:01:7f:7b:fb:06:11:a3:b2:9c:0e:19:1a:
         8a:90:b5:af:75:cb:01:21:94:b7:21:1d:db:32:97:27:2f:9f:
         76:84:a5:28:1b:17:e5:82:26:7f:2f:26:97:5c:cc:54:34:d0:
         c2:fb:c7:8c:0a:99:35:6b:dc:8a:20:a7:69:77:98:83:9a:ff:
         8a:91:68:b5:0e:f8:25:af:55:bd:21:39:ad:f7:eb:87:39:6a:
         5a:14:f4:33:ba:0a:25:13:fa:50:24:9d:39:46:b3:9f:dc:fa:
         67:d9:36:d4:fa:85:f3:b9:93:a2:a8:bd:b7:a9:38:66:e3:67:
         dd:37:74:91:d2:7c:69:2b:81:07:15:57:4d:5e:b6:91:4d:53:
         56:a5:43:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:42:45 2025 by rpki-client