Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/8875e656-b8ed-32bc-80da-dad0eca39778.roa
File:                     8875e656-b8ed-32bc-80da-dad0eca39778.roa (raw, json)
Hash identifier:          iPHQ6FMAz++Qn1tRBOuefG7H02Q5FLQng8cak8tNCl4=
Subject key identifier:   C6:76:6B:22:0B:6B:33:03:CF:3F:EE:5F:2C:BA:5A:A7:BB:66:EE:AE
Certificate issuer:       /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
Certificate serial:       010D0C9F4328584B25FC309164C88E5E010F4880
Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/8875e656-b8ed-32bc-80da-dad0eca39778.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     198949
IP address blocks:        2607:cc80:5000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:30:91:64:c8:8e:5e:01:0f:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=2b3c274a-919b-469a-9638-d2218655f294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b6:70:3c:2d:7e:39:c3:11:6e:4d:7e:ed:c8:
                    60:00:4c:1e:98:89:33:14:71:d5:bd:99:ad:6e:c6:
                    7c:bf:04:fe:57:7e:5c:d1:07:04:92:4b:f1:52:a4:
                    fd:0c:37:47:4f:60:eb:26:d2:6e:62:2b:6c:2d:5f:
                    13:51:26:5c:70:06:c8:7e:ac:b0:88:3a:03:08:5c:
                    db:1b:cf:af:a1:45:d0:fc:1b:c6:1c:d2:93:72:b7:
                    0a:a3:96:83:c2:d5:6e:c3:bf:ec:99:69:33:cd:03:
                    b0:3a:90:ae:2e:f6:35:88:0a:85:35:92:b7:77:d5:
                    0a:cf:0c:7e:40:09:ef:96:1a:32:b8:30:ef:a2:c3:
                    69:b1:cb:a6:dd:29:f3:ee:d7:17:9e:df:af:a5:f5:
                    e4:99:2e:7e:46:52:f0:c4:28:2f:9f:db:fb:7b:f1:
                    52:32:76:71:b1:85:82:e3:ce:54:10:46:14:46:1d:
                    35:25:b7:ff:80:9f:3e:61:09:f8:32:4d:3e:3c:e7:
                    95:d7:3d:bc:06:34:5e:18:4e:c9:a0:35:27:ab:3c:
                    89:c0:60:11:b3:98:4f:2b:5e:16:31:56:d1:e5:4c:
                    18:9c:03:99:7b:03:f1:1e:a1:02:97:ae:f9:99:82:
                    f1:95:5e:e4:7c:67:f2:19:98:82:93:9a:3f:a1:60:
                    78:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:76:6B:22:0B:6B:33:03:CF:3F:EE:5F:2C:BA:5A:A7:BB:66:EE:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/8875e656-b8ed-32bc-80da-dad0eca39778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl

            X509v3 Authority Key Identifier:
                keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cc80:5000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:8b:50:2b:3f:72:ea:1b:87:b4:1c:7f:21:e8:ee:10:ec:5b:
         83:3e:ea:83:72:db:1a:f3:d6:f3:bb:16:a1:9d:2a:24:84:d6:
         c6:90:62:31:9e:ab:17:97:a7:7c:af:ef:07:12:e0:70:1d:78:
         d8:41:1f:f5:d4:35:d7:94:90:ec:94:4a:1f:91:37:7a:d6:33:
         1d:6c:80:db:4e:58:69:90:e6:0d:2f:58:3b:f8:b9:71:df:40:
         80:69:6c:47:d5:88:a4:d9:af:2a:18:55:e0:f2:a0:ca:08:ed:
         56:fc:e4:d7:9e:14:4c:7f:bc:41:f5:88:23:fa:6c:c0:30:3b:
         02:9e:a9:f6:25:59:cc:0e:a3:7e:92:3a:f5:de:c5:bc:e1:f1:
         bc:ea:fa:4b:a1:55:01:1a:c8:92:95:f5:63:26:30:9c:c8:c8:
         18:32:d2:61:48:06:c5:91:34:de:12:f2:a5:4d:25:91:73:21:
         3f:1b:5b:96:3e:4f:fb:39:7d:ff:d0:ba:23:7e:42:a9:7e:3f:
         b9:c9:91:20:19:93:39:7c:38:70:57:0b:49:2d:4c:10:bb:4f:
         c9:e0:a0:b4:da:c2:41:70:7d:ca:68:76:59:0b:ac:df:51:0b:
         8b:7f:0e:60:d3:a9:92:4f:1b:4f:88:d3:58:67:3e:dd:bd:00:
         71:4b:a7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:40:46 2025 by rpki-client