Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/0ae8cf48-86d9-36e8-89bc-09c423ad3e07.roa
File:                     0ae8cf48-86d9-36e8-89bc-09c423ad3e07.roa (raw, json)
Hash identifier:          7qHnmaY3c6Fpq0uR6FTxtNyFu72tP+Rr2nICWPhwm00=
Subject key identifier:   9E:38:AD:F4:49:6C:EA:DD:6C:69:2A:E0:10:52:5E:E1:19:5E:FF:B9
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584B2496D5C36E5DF02F58941D00
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/0ae8cf48-86d9-36e8-89bc-09c423ad3e07.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     25664
IP address blocks:        2607:cc80:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:d5:c3:6e:5d:f0:2f:58:94:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=e0a591a6-b53f-4b53-8763-d0958b7b1a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:57:b1:1b:13:f4:24:db:b2:9e:f0:0d:0c:
                    82:fd:cf:2c:60:1d:2b:59:eb:b8:6e:54:45:2a:0f:
                    2f:1f:0d:12:20:63:55:3d:76:fc:06:32:5c:c1:95:
                    ce:f5:d8:87:da:09:8f:4f:6b:0c:ca:88:6d:18:6f:
                    3c:9f:a3:3c:00:f5:e3:14:2f:7b:87:c6:02:26:c7:
                    a8:55:ed:98:c0:30:cb:33:90:27:73:a4:46:34:eb:
                    4f:87:0c:7f:0a:d6:3e:40:4d:1a:3e:fc:a8:07:5c:
                    2b:de:37:01:03:37:ed:aa:f1:5a:e9:27:9c:81:6c:
                    9c:82:64:5d:04:77:6f:91:e6:f0:85:ee:a6:3e:73:
                    f9:75:9c:2a:b6:6c:88:f8:02:ad:fa:38:fb:e6:ab:
                    96:c3:94:29:3f:44:e6:f2:ee:7c:66:2c:15:15:db:
                    52:a7:de:2e:e2:cf:59:d5:e7:b3:57:b4:fb:70:29:
                    4d:47:26:6c:9b:87:af:a8:5a:3a:96:75:3c:24:89:
                    6e:43:b9:e7:62:b3:95:3e:4e:d2:72:8e:e4:f0:2e:
                    e0:c0:d9:a4:02:4e:af:50:54:5d:b2:8e:25:73:52:
                    57:2f:2d:95:9f:45:a5:a1:13:4f:d1:1a:4a:99:98:
                    0a:9b:91:40:aa:eb:b6:05:b2:57:61:21:68:d0:26:
                    e6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:38:AD:F4:49:6C:EA:DD:6C:69:2A:E0:10:52:5E:E1:19:5E:FF:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/0ae8cf48-86d9-36e8-89bc-09c423ad3e07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ad:62:37:80:1e:75:9f:bf:be:62:49:80:4d:43:a1:e2:d2:
         d3:2e:05:69:a1:ab:2b:7f:63:9b:2f:16:48:22:e6:b1:bd:f9:
         25:a8:3f:d2:a1:5c:ab:33:d8:a8:ca:9d:bb:bb:30:b0:e2:cb:
         c6:3d:4f:3a:3a:ec:56:ea:be:be:7e:b4:44:54:d8:a0:4e:43:
         31:dd:0e:28:25:ce:fe:10:c7:5b:b2:4e:88:5a:66:0a:59:da:
         e5:97:7d:c9:e0:d1:b7:f8:b8:99:7f:5b:6a:d9:49:a9:bd:f7:
         10:17:fc:90:93:e7:b9:66:b3:84:cd:a7:57:4e:aa:f0:88:4e:
         06:c5:54:b8:fd:0f:34:eb:d0:fa:3c:d1:14:be:8a:e3:d9:d1:
         ba:57:18:73:1b:61:c2:2f:c6:e3:77:f1:5a:dd:b9:21:0f:00:
         30:88:5a:af:62:00:bd:db:43:c9:51:b8:8e:5a:68:8d:6f:87:
         f8:d2:9a:d1:31:06:90:ce:85:f8:93:70:56:25:5b:1e:f1:e6:
         17:54:72:6d:69:b5:f7:6a:46:e9:88:22:c7:b0:58:b7:a9:89:
         a0:5f:85:4d:64:2d:f5:3d:ae:8c:3f:92:d1:64:46:a9:29:59:
         7c:7a:23:48:a7:8a:bd:11:d2:8c:c3:7b:89:7c:5d:f3:de:f3:
         91:96:de:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:21:11 2025 by rpki-client