Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/0bae15f7-91c4-3d47-8748-73a43c11976e.roa
File:                     0bae15f7-91c4-3d47-8748-73a43c11976e.roa (raw, json)
Hash identifier:          1KC2j0oZLTSqrRr7zOpaN5wPljxy4uUJvWci9XW0NHE=
Subject key identifier:   F9:EE:77:55:E6:4E:AD:AB:91:1B:69:A2:C0:F4:CC:79:37:51:92:1F
Certificate issuer:       /CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
Certificate serial:       010D0C9F4328584B4FDC7D20B9693FB4E1E47080
Authority key identifier: 06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/0bae15f7-91c4-3d47-8748-73a43c11976e.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     19830
IP address blocks:        2607:dd80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:7d:20:b9:69:3f:b4:e1:e4:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=eadef1dc-b6ee-4efd-8c4a-82623827b20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:37:44:4e:0f:39:86:0c:9a:c8:a5:dd:e3:e2:
                    1b:e9:74:be:d4:74:1e:74:89:00:d1:12:37:e5:04:
                    d6:0f:ab:57:81:a5:49:14:68:64:80:90:5a:81:85:
                    dc:e0:e2:10:80:d3:4c:f9:ea:93:fe:76:b8:50:19:
                    e5:7b:ab:0b:92:d4:1c:8d:d2:bc:d9:d1:d7:ef:56:
                    fe:78:b1:e6:79:da:fd:88:07:19:00:49:62:43:2a:
                    f2:dc:81:e5:fe:9b:f6:5d:de:a4:6a:04:c6:30:32:
                    df:e3:97:8f:f4:8f:99:8c:52:0e:70:25:40:e3:1f:
                    c1:20:83:e4:f7:cd:64:11:66:97:ef:61:e5:22:a2:
                    16:1d:e1:f7:45:03:75:ca:34:03:a4:bd:11:8b:13:
                    31:0b:fa:b2:34:70:6a:a9:a0:7f:91:48:16:03:90:
                    b9:7f:c2:a1:3d:af:6f:3e:b7:f2:f6:92:f0:6c:3a:
                    1e:52:ec:14:5f:f7:81:0a:4e:1a:15:23:45:48:06:
                    06:8a:04:70:49:95:44:4d:bf:e7:8a:30:d7:7a:79:
                    70:f9:f5:18:5b:cc:c2:ac:7c:a4:a1:6f:2a:c6:d3:
                    ec:c2:db:65:0f:b4:82:ca:87:94:10:8d:d1:d9:4e:
                    f9:bd:bd:7b:a4:07:b4:64:87:6e:13:e5:12:8f:be:
                    eb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EE:77:55:E6:4E:AD:AB:91:1B:69:A2:C0:F4:CC:79:37:51:92:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/0bae15f7-91c4-3d47-8748-73a43c11976e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl

            X509v3 Authority Key Identifier:
                keyid:06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dd80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:24:da:2c:11:40:20:2c:18:8c:3b:96:a3:60:71:26:0d:80:
         de:9d:cc:f2:e5:8e:53:9f:7b:64:fa:c1:16:6e:0f:30:fe:d4:
         7d:8d:18:85:39:a1:18:a4:8b:44:bd:5a:f0:b5:0e:9c:08:fb:
         95:8c:0f:7b:ec:4f:c6:e6:7f:5a:f5:21:8b:59:a1:26:65:61:
         25:5c:9f:1b:31:36:7c:3e:bf:b9:68:25:61:1b:d9:ce:ce:0e:
         e0:20:76:b8:0e:5a:cb:52:bb:b7:34:85:9f:97:28:db:38:c8:
         2a:67:5b:e8:d5:9f:55:d9:cc:38:fe:0f:f9:7b:39:63:bb:ac:
         f5:b7:3a:12:fa:ca:0a:38:dc:81:0c:07:81:6d:c9:4f:7a:e0:
         f0:c2:13:82:a0:aa:6e:36:91:18:c4:17:ef:46:47:da:44:82:
         2e:0f:0d:4b:4d:ac:64:54:af:36:44:da:b4:3e:80:32:e8:69:
         37:de:b6:3d:5f:c8:a6:21:9b:0f:88:c5:b0:5f:6a:5b:8e:42:
         e1:8d:7b:2d:11:5d:68:13:2f:da:ed:49:fb:20:13:ff:83:44:
         15:99:e2:2e:09:2f:ac:a5:be:b0:f9:61:51:d2:f3:91:76:03:
         f1:ad:1f:29:07:5c:cb:fa:6a:2e:a3:b3:1d:80:d9:ff:f6:37:
         41:7e:ba:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:49 2025 by rpki-client