Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/fcaf83c1-9108-37e6-8a13-2e8231346c60.roa
File:                     fcaf83c1-9108-37e6-8a13-2e8231346c60.roa (raw, json)
Hash identifier:          30YfzlfhL8jGwWIjLUIcOTIeN3lcka3Cr0p5kmh1IwI=
Subject key identifier:   52:EB:0A:85:35:73:1B:AC:BB:61:C7:BF:29:4E:FB:67:28:EC:00:C3
Certificate issuer:       /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
Certificate serial:       010D0C9F4328584B4D11DD1DAEA4C243A949F800
Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/fcaf83c1-9108-37e6-8a13-2e8231346c60.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     36666
IP address blocks:        2001:19c0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:dd:1d:ae:a4:c2:43:a9:49:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=cdabea4f-949c-4ff4-b4f4-5bc58e53b6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ae:ad:cc:e5:d2:25:88:f0:d7:51:53:01:d6:
                    56:6c:ce:13:d0:63:3d:16:21:11:36:d7:08:9a:68:
                    88:f5:05:8b:a1:09:87:4f:25:4b:20:e6:9b:28:7d:
                    17:80:19:27:2a:96:f4:08:bb:01:cd:c4:e5:c7:dd:
                    c7:9c:b5:d4:35:b3:7b:e6:f0:52:5d:39:08:e1:e5:
                    c0:a6:cd:7c:1d:5b:a8:c3:40:d7:2c:b5:4a:5a:47:
                    5f:76:ba:f2:05:39:ef:3c:60:b2:57:de:8d:16:2a:
                    36:2d:81:ff:a7:2d:cc:85:a2:2c:c1:5e:8c:b7:78:
                    e0:a8:06:e2:f3:75:6a:45:2e:ef:64:46:cf:08:06:
                    fc:80:7a:b8:84:5b:40:e1:77:9c:4e:c6:15:ff:78:
                    77:f9:e2:e4:b9:c1:c6:de:ff:db:95:10:02:26:00:
                    c8:f2:0f:a9:40:e2:61:ac:a6:5b:d1:54:ff:9b:70:
                    e6:1a:c7:bb:f3:49:6d:b0:95:99:a1:d7:6a:4d:39:
                    8e:05:78:1d:e2:c7:21:84:b8:fa:b9:4d:73:ae:72:
                    45:bb:fe:78:85:92:90:4c:a1:69:11:dc:ee:fb:8d:
                    fa:77:1c:5e:02:63:1e:70:ab:ed:2b:ad:13:7a:5b:
                    24:da:ad:2d:03:e8:04:b3:d8:c4:8d:f8:07:a2:95:
                    b7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EB:0A:85:35:73:1B:AC:BB:61:C7:BF:29:4E:FB:67:28:EC:00:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/fcaf83c1-9108-37e6-8a13-2e8231346c60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl

            X509v3 Authority Key Identifier:
                keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:fe:3b:75:a3:a7:10:66:eb:96:14:81:ba:44:56:46:42:cf:
         5c:ba:bd:8e:25:ab:7e:22:0f:c4:5c:5a:10:14:d1:90:e7:37:
         c0:fa:d4:7b:60:ed:29:61:84:63:cd:4f:5c:ff:6b:5d:bc:f9:
         8b:f5:8b:c6:e2:ff:26:41:45:81:75:eb:00:81:d7:68:8f:33:
         ec:cd:90:c3:48:de:44:3b:58:4d:d0:5c:d5:66:4c:21:e2:a2:
         62:41:e5:de:df:d8:9c:f7:26:51:b5:f2:18:b0:c4:01:f0:b8:
         47:96:5c:0e:60:1d:f0:7c:b8:90:ee:9e:f5:67:cb:64:1f:f8:
         cd:a8:6c:fe:3d:47:5a:01:f0:2b:9f:da:cf:95:00:cc:44:c3:
         da:52:7a:79:4c:e0:c1:29:c7:42:89:ea:95:8b:42:ec:26:c7:
         08:24:41:b1:9b:bb:09:94:d1:d6:f6:83:5a:b9:98:3b:90:07:
         7b:a0:71:fc:67:4f:ea:90:9c:8b:05:cf:50:08:e6:9f:c8:85:
         4f:20:46:99:4a:37:ea:aa:e4:5f:be:f9:41:c1:b6:8e:8e:ae:
         54:18:1e:d8:79:ab:98:b2:18:a7:8c:9c:77:dc:0d:59:1a:77:
         50:c6:99:3b:80:2c:96:b4:29:8c:5e:f4:da:14:9f:e7:ef:16:
         3f:a2:b1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:56:02 2025 by rpki-client