Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/1085d183-4a39-3c43-abf3-8719482aa95a.roa
File:                     1085d183-4a39-3c43-abf3-8719482aa95a.roa (raw, json)
Hash identifier:          c4DH3S5WJsC2YVQDNJjrUdxh6ION5p1oLVbM41BRDw0=
Subject key identifier:   AC:B4:73:FA:8A:85:D1:4B:32:4F:86:7E:72:5A:A3:1B:68:A3:46:A9
Certificate issuer:       /CN=f16b1ed2-491f-4ed7-be99-59b20310c475
Certificate serial:       010D0C9F4328584ACE0B9F0536D80F4563A13600
Authority key identifier: 10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/1085d183-4a39-3c43-abf3-8719482aa95a.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     11924
IP address blocks:        2607:faa0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:9f:05:36:d8:0f:45:63:a1:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b1ed2-491f-4ed7-be99-59b20310c475
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=dc20753b-2415-47e0-bc81-bfd78f299428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:f8:8c:cb:2a:0c:eb:41:ed:b3:a1:d3:6b:
                    fa:4e:95:01:80:6d:fa:d3:3d:82:b8:27:72:67:a1:
                    ce:eb:fd:7a:2c:eb:6e:05:b3:e8:d7:9c:ff:90:ba:
                    aa:dd:9a:f1:15:60:29:b0:d8:ac:9d:8a:15:2a:8e:
                    c0:78:d7:dd:a2:c4:bd:e0:3b:9a:47:eb:ac:c0:ed:
                    ff:c7:eb:ca:f7:ee:13:5d:e8:7e:7f:4c:64:c6:f7:
                    8b:9e:5b:ba:15:9a:e5:3d:7a:41:e7:94:db:9f:55:
                    18:c5:39:95:9f:ad:d5:39:f7:cc:97:e8:bf:7c:64:
                    f1:f2:2a:3c:94:6a:aa:8e:c0:5c:61:b6:82:86:58:
                    71:c5:2b:a2:e2:56:fb:1a:00:d3:3f:7c:2c:b9:aa:
                    1b:6e:1a:68:4a:c2:a2:a9:bd:14:7b:a7:e0:e8:d9:
                    74:cb:ad:66:28:6e:85:0e:6f:67:11:0c:09:ba:65:
                    7c:31:05:87:d4:19:e3:6e:6b:0f:4b:49:ce:28:6c:
                    18:8c:8e:f1:d4:39:af:8f:91:37:45:16:83:0e:30:
                    84:24:94:bc:2b:1a:e2:b9:d4:e0:91:97:58:8a:ab:
                    64:21:63:f6:a3:e0:cb:64:c1:fa:47:41:50:84:6d:
                    20:3f:20:54:76:15:38:d8:86:44:b9:ca:f8:14:5e:
                    f1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B4:73:FA:8A:85:D1:4B:32:4F:86:7E:72:5A:A3:1B:68:A3:46:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/1085d183-4a39-3c43-abf3-8719482aa95a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl

            X509v3 Authority Key Identifier:
                keyid:10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:faa0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:cf:e8:58:37:e3:eb:34:de:96:72:e1:00:7a:d8:aa:78:47:
         05:02:cb:90:ac:93:77:42:28:df:5b:9c:a2:7c:9b:01:6a:07:
         49:a7:87:40:09:5c:1a:a2:92:99:b5:81:06:16:43:b6:aa:79:
         f1:28:73:0b:70:07:bb:95:5d:f9:0a:d3:a2:03:84:f6:9e:ae:
         66:0d:32:3e:b3:54:1d:a8:65:0b:a0:9e:bd:cc:45:e9:67:9d:
         af:c1:cb:00:64:94:5a:8a:d8:65:82:20:6e:81:b0:9e:f9:35:
         3e:e7:60:dd:f7:e8:b1:92:fd:e6:e0:ec:61:22:07:4d:cd:b3:
         10:24:c8:a7:77:7a:20:a7:78:54:4c:af:6e:67:94:3c:a6:81:
         99:ef:ff:75:72:ee:bc:04:69:09:07:61:62:5b:b3:6b:a8:61:
         2c:34:c1:91:73:bf:c1:cd:93:47:c5:a3:10:97:76:f0:e5:ca:
         24:31:b1:64:a0:63:a3:01:a3:be:3f:70:c7:20:54:3d:a0:bb:
         94:8c:ae:23:2b:0a:b9:9e:f0:ad:e9:a8:af:3c:1d:ff:cb:b0:
         04:c0:43:9a:e4:b5:74:f2:ae:c7:d5:62:bf:a6:4d:1a:75:f8:
         9f:5d:5a:85:e2:68:b1:90:3f:3c:0a:ce:d5:85:e3:f5:f1:11:
         a7:79:91:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:12:04 2025 by rpki-client