Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/474aeac4-4a0f-37f9-af53-a0017b82f404.roa
File:                     474aeac4-4a0f-37f9-af53-a0017b82f404.roa (raw, json)
Hash identifier:          +alsGmlhzuRwBskWP7N9wBfFSXM6gA/t/VnvYinWVzw=
Subject key identifier:   38:AF:21:1B:EF:34:9B:04:8A:A1:B4:78:8F:A4:A9:08:5A:A5:B2:C6
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584B2496D5ADBA4B563BC3F02580
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/474aeac4-4a0f-37f9-af53-a0017b82f404.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     25664
IP address blocks:        2607:cc80:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:d5:ad:ba:4b:56:3b:c3:f0:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=6289ac4a-f598-48cc-92ff-3f73b9e8eb46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:02:50:90:6c:b9:8a:0f:36:22:b7:10:04:b0:
                    47:d9:ee:c2:dd:d4:87:f7:34:ae:5a:4e:5e:7e:23:
                    12:1e:df:89:77:64:d1:1b:45:04:ea:93:44:a9:0f:
                    72:d1:74:1f:07:77:5f:56:4a:73:33:c7:58:82:a6:
                    87:a3:02:f2:af:aa:11:40:53:1a:84:54:0e:d2:7d:
                    37:19:e4:80:48:3c:9a:3e:40:db:05:7e:87:26:df:
                    b5:4b:4e:eb:80:57:3f:96:e1:67:42:05:7c:33:f3:
                    20:3a:68:92:b5:1f:1d:5f:21:cc:c1:fb:f4:5e:f0:
                    b0:05:8d:17:eb:32:ae:09:20:da:6c:59:aa:51:4b:
                    7c:ce:e3:44:ef:bc:dd:d3:20:ac:f3:c9:31:fc:7a:
                    3d:89:6e:db:f7:96:8a:90:34:16:d5:c8:57:74:58:
                    31:72:16:16:17:f7:90:d9:54:cc:33:91:6d:cf:ac:
                    3b:19:9f:c2:ea:4b:e5:fe:9e:cc:9f:ba:d7:5c:e8:
                    58:54:34:56:d5:57:bb:29:6f:6b:bc:7a:06:23:cf:
                    bb:cc:de:08:4a:91:ec:d3:72:e4:b5:43:75:05:3a:
                    c1:8f:e6:ea:2e:4c:72:98:e4:ab:c4:bd:a6:20:68:
                    d2:72:35:a3:8e:48:fa:c0:90:0d:2c:b2:a1:04:50:
                    06:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AF:21:1B:EF:34:9B:04:8A:A1:B4:78:8F:A4:A9:08:5A:A5:B2:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/474aeac4-4a0f-37f9-af53-a0017b82f404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d6:1d:b4:46:d2:9f:49:a9:87:3a:83:b4:a1:63:1b:34:2c:
         f1:ae:cc:66:d3:99:c8:f3:56:88:14:f0:25:61:41:e9:dc:db:
         be:34:51:4d:03:85:ba:ad:94:fb:46:3b:f0:18:ea:9d:fa:5d:
         5c:b8:36:43:fb:d0:1c:7c:27:a5:6a:33:5a:b2:e6:00:d2:a7:
         fc:b8:3c:0a:b0:df:8a:28:dd:99:1a:5b:89:07:1d:89:0a:e1:
         49:4d:aa:0f:2c:53:d3:75:6e:ee:3d:88:59:db:00:2e:95:fd:
         03:af:cc:5d:3e:ce:34:05:b3:ca:41:91:c7:a2:27:b4:fe:a9:
         a1:ed:e4:4e:d6:f2:cc:84:80:2c:9d:8e:2c:d1:ed:70:4e:53:
         4b:93:8f:ab:31:f0:7a:54:03:4b:08:88:38:26:48:b5:5a:78:
         79:6e:4e:a3:29:78:1f:85:98:57:16:d8:b4:5b:ea:c5:92:b6:
         25:d7:19:65:0e:06:ac:84:9d:9e:2b:88:4e:51:1f:dd:d0:b5:
         ab:74:cc:ea:fe:78:54:9b:c9:8a:74:e2:19:93:cf:bd:27:5e:
         81:39:b0:de:79:d4:70:eb:47:97:38:7f:82:6e:d1:3d:fe:02:
         85:c9:23:95:25:6c:b3:48:68:6a:e2:f7:61:2f:10:12:e8:09:
         c2:ca:da:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:35:39 2025 by rpki-client