Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/84250925-d88b-39f6-8710-7f8465ac6236.roa
File:                     84250925-d88b-39f6-8710-7f8465ac6236.roa (raw, json)
Hash identifier:          jg+8UfDUD3AW+A9Q9+1q0sqf1O2e0eaRBUPf0Mg+3P0=
Subject key identifier:   B5:EF:5C:F2:6B:5A:13:EA:AD:25:D7:59:7E:44:29:EA:0A:94:3C:D7
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584B25FC337217D601842263B100
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/84250925-d88b-39f6-8710-7f8465ac6236.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     198949
IP address blocks:        2607:cc80:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:33:72:17:d6:01:84:22:63:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=5536d507-a598-464b-80a5-25a2d1348e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:14:b5:0e:c1:58:25:00:db:9a:da:89:ce:
                    12:dc:a7:32:97:47:19:5c:b8:61:10:8f:db:99:73:
                    98:fb:96:fb:c5:e4:3d:9f:0a:56:ed:e8:5f:7a:17:
                    1b:8d:92:4a:ae:55:21:e2:46:8c:91:ab:d4:15:59:
                    bc:fe:e8:b3:5d:ee:43:54:7d:6f:33:9c:16:9d:da:
                    f1:b4:de:97:4f:15:3b:d3:26:f6:c5:9f:85:8e:3b:
                    83:8c:4a:a7:2a:ee:07:b4:ec:c3:18:07:9c:84:76:
                    59:71:ce:09:ed:85:0c:11:c2:72:bf:0f:b9:ae:1a:
                    7d:ab:ec:39:e4:ac:08:35:13:a7:1f:36:a8:83:cf:
                    b5:a6:33:50:1b:ae:24:9a:d0:65:a0:1c:ea:ab:2f:
                    54:2c:b9:ef:fd:72:05:57:99:ad:48:ce:f0:b3:9e:
                    e6:68:ac:96:ec:e0:7b:f8:d9:b3:8d:df:cd:14:45:
                    e3:e9:70:df:de:94:53:eb:2f:eb:48:c8:ea:6f:bf:
                    e3:2c:68:68:59:45:43:a7:7e:5a:75:b9:75:86:88:
                    a5:a1:84:db:09:75:3c:be:42:c6:62:9e:7b:c4:b2:
                    d0:2b:25:4c:f8:a0:00:57:82:44:b1:df:54:69:12:
                    f4:29:8c:fa:6e:cf:82:ad:d5:e7:74:9a:03:b3:62:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EF:5C:F2:6B:5A:13:EA:AD:25:D7:59:7E:44:29:EA:0A:94:3C:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/84250925-d88b-39f6-8710-7f8465ac6236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:fa:60:3f:a9:9f:58:b0:6c:99:aa:53:0c:fb:21:2d:67:b6:
         44:55:9b:74:cf:cd:13:c8:5b:00:26:75:25:26:86:73:9e:c2:
         18:39:99:29:e0:c8:eb:ba:3b:ae:e6:2e:36:06:70:88:af:c7:
         31:7f:1e:f7:e9:2c:61:cc:9f:bb:8b:db:0f:fe:4f:4c:e8:86:
         2f:b8:6a:94:d6:88:e8:d5:f5:5e:b5:a1:32:04:c3:0f:0c:b4:
         b8:dd:af:95:07:f2:6e:9b:64:f1:e6:63:26:18:8b:e5:b3:8e:
         36:de:13:08:f5:b8:a4:30:22:ee:18:96:fe:71:b0:72:78:89:
         55:a3:2d:ac:9f:ee:56:d1:bf:c2:88:e1:4d:62:b5:d0:66:ac:
         76:b7:66:f0:76:80:7b:8d:de:39:1a:2c:02:93:91:bc:d2:84:
         0d:ae:f5:38:ce:bd:d0:dd:b8:48:25:9a:a6:65:4f:fc:19:96:
         d6:e6:43:db:4e:49:79:5c:59:ab:95:27:f6:9a:7c:c7:9d:36:
         ca:2a:7f:ed:a0:a0:b3:a8:ab:fe:58:2f:62:19:37:bf:96:fd:
         54:93:29:a2:ea:2b:e1:08:e0:07:6f:7e:e1:29:d9:83:7b:26:
         f8:bd:b5:f1:8d:cc:eb:55:8f:79:da:08:b0:a8:5f:0f:df:08:
         ba:72:1b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:40:09 2025 by rpki-client