Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/e33c6a11-ada3-335b-9442-e3f18f2ccd32.roa
File:                     e33c6a11-ada3-335b-9442-e3f18f2ccd32.roa (raw, json)
Hash identifier:          b1nngBl517ftXAoztMg+hWd6OkJkx3TMtQyQcKRuxsM=
Subject key identifier:   60:DF:07:44:44:61:15:77:A3:65:89:46:48:27:71:51:E1:55:2A:C9
Certificate issuer:       /CN=253f385b-feb4-4b22-9447-502d6e3a69ac
Certificate serial:       010D0C9F4328584B3AEC53A2F487495E8D540F80
Authority key identifier: 91:4A:4D:FF:64:6A:DA:27:F3:47:72:92:0A:7D:EE:AF:4E:EE:CD:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/e33c6a11-ada3-335b-9442-e3f18f2ccd32.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     401081
IP address blocks:        2604:ae0:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:53:a2:f4:87:49:5e:8d:54:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253f385b-feb4-4b22-9447-502d6e3a69ac
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=20e5c282-71ea-4da0-8888-2308b15cfbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ce:ed:cc:20:53:a1:6d:2a:c5:f1:b1:e6:27:
                    a2:dc:7e:7a:6c:90:d3:c7:2a:ac:f1:a9:c4:20:52:
                    26:b4:bb:50:e7:a6:64:a5:5e:e2:fa:80:66:1a:d5:
                    be:5e:3b:91:9b:63:29:d1:1e:28:9f:9c:a1:31:a4:
                    a6:1c:6b:2a:7b:23:92:38:ea:db:4b:43:51:b6:52:
                    af:e0:d8:48:c1:87:6a:dd:d0:9e:f4:bc:45:5b:8c:
                    2b:3e:2a:a2:23:f2:46:8c:cb:c6:ed:b4:cd:5a:5a:
                    9b:f5:31:08:3d:4e:63:b8:65:43:3d:02:14:45:99:
                    1a:2a:2e:b4:45:b7:2d:fb:42:52:1e:37:0c:c6:76:
                    7a:77:62:b9:bf:a8:1e:1a:73:11:6e:ce:1d:be:dd:
                    dc:25:81:de:30:ad:3b:f0:03:f9:78:54:0a:95:b3:
                    c2:40:39:d3:c5:35:a7:d7:f1:2f:23:d7:85:c5:3f:
                    a3:02:b0:c6:dd:83:92:4b:b3:81:ea:5a:bf:66:e6:
                    6e:d1:2d:fa:e9:ba:68:bd:bb:bd:b4:7f:5c:92:3b:
                    d9:8d:17:68:74:ab:4a:79:17:19:f5:0a:67:34:7c:
                    d4:47:8c:3a:28:29:81:bb:f6:c7:c7:bc:20:93:47:
                    87:fc:2b:77:0b:d3:eb:f0:46:26:fd:8d:d1:02:86:
                    1d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DF:07:44:44:61:15:77:A3:65:89:46:48:27:71:51:E1:55:2A:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/e33c6a11-ada3-335b-9442-e3f18f2ccd32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.crl

            X509v3 Authority Key Identifier:
                keyid:91:4A:4D:FF:64:6A:DA:27:F3:47:72:92:0A:7D:EE:AF:4E:EE:CD:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:ae0:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:2e:ec:a1:08:15:b4:ec:7a:d6:9b:0d:60:2c:89:15:17:8a:
         0f:80:b5:f4:54:e4:1e:7c:81:15:35:f3:42:9d:47:b4:cf:e2:
         e0:44:01:33:0d:03:8a:9b:9f:d7:9f:b8:01:8d:7b:54:8b:da:
         c7:a2:99:57:e6:10:a1:1f:f5:b1:77:a9:79:08:28:9f:94:45:
         ee:6d:ce:bd:9a:94:b4:ba:ee:d3:cb:bb:3c:a2:db:38:25:22:
         69:33:bd:56:73:c8:4c:76:42:b7:31:8f:7d:c2:c2:25:97:bb:
         49:dd:78:4f:14:74:3e:5b:e5:77:20:08:4d:e9:6b:22:00:8f:
         8b:49:2a:0b:83:1a:38:24:ac:42:a2:f0:6f:33:6b:83:5d:70:
         68:69:1a:de:b7:9c:76:c5:94:25:62:38:aa:66:67:a3:9d:e7:
         27:7c:14:c3:89:ab:a7:d8:71:a4:58:0d:b0:93:71:b1:d4:54:
         72:7c:f5:95:ca:03:c3:4b:64:a9:b8:0c:c4:76:8e:3d:2c:b6:
         96:7f:c9:cb:45:7f:aa:a0:33:0b:b6:29:1e:82:fa:d8:e8:f9:
         5e:c9:0b:62:09:3a:49:32:ff:8d:ca:54:74:f3:e4:ae:2c:28:
         ff:87:8d:bd:4e:07:6c:8a:e5:10:bb:7e:58:0d:61:e2:5b:07:
         1a:85:4f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:12:50 2025 by rpki-client