Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/578adb16-4a4b-32cd-8347-9e1f27e38740.roa
File:                     578adb16-4a4b-32cd-8347-9e1f27e38740.roa (raw, json)
Hash identifier:          76oY+w+NgfplRoNpFSMggQpzRb1hZDrbpnx2T0f8xhI=
Subject key identifier:   FE:63:C4:D3:C5:4F:9D:20:DD:8E:64:E8:36:A3:B6:F5:01:7C:8C:1F
Certificate issuer:       /CN=6f599815-aa39-4cb1-86b8-df65da50cb35
Certificate serial:       010D0C9F4328584B3AEC5563C9060ECF41233820
Authority key identifier: 00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/578adb16-4a4b-32cd-8347-9e1f27e38740.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     214189
IP address blocks:        2607:eb40:beef::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:55:63:c9:06:0e:cf:41:23:38:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f599815-aa39-4cb1-86b8-df65da50cb35
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=cca42586-4f35-4b79-a64d-ebff296b6bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:78:05:c0:1d:42:5e:53:3e:3c:34:45:3e:8f:
                    20:a5:e5:ea:ef:6c:ee:9b:40:03:58:43:29:09:ec:
                    1b:1d:e2:12:55:19:45:8e:96:ca:a6:d2:d5:d5:7f:
                    ca:0f:41:82:27:ac:a0:01:d0:46:a6:20:6a:f9:67:
                    a3:24:f2:28:1a:bd:1a:7c:63:2e:26:ed:9a:f7:c5:
                    01:ec:8d:28:f4:85:28:88:2d:7d:ae:5e:c2:e2:57:
                    fd:0b:c8:3f:f6:f9:0f:52:aa:79:83:c6:41:13:d7:
                    74:de:6a:0c:5f:f1:a2:b0:c4:58:1b:05:a7:30:28:
                    59:8b:c0:97:ef:5e:e9:58:fc:ad:15:fb:f5:39:78:
                    80:f8:2f:b2:b7:b9:7d:ce:30:e4:05:30:e9:a9:54:
                    62:68:b4:9a:50:3d:58:da:12:ab:3f:bc:8e:a5:50:
                    3f:de:53:80:99:e7:72:44:6b:c6:34:e0:61:7a:e4:
                    33:33:25:bf:47:5f:d9:2d:fb:ba:9c:6b:aa:0b:14:
                    2e:2b:30:c2:f3:14:c2:c4:ab:b9:ea:ca:f0:de:08:
                    b6:5a:52:a4:f5:d6:b0:89:e8:32:88:bb:46:22:8a:
                    d5:d8:cc:b2:7e:5e:81:54:49:48:80:66:fd:60:85:
                    b0:d4:ee:96:76:77:5d:f8:f0:46:40:05:22:66:a5:
                    94:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:63:C4:D3:C5:4F:9D:20:DD:8E:64:E8:36:A3:B6:F5:01:7C:8C:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/578adb16-4a4b-32cd-8347-9e1f27e38740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl

            X509v3 Authority Key Identifier:
                keyid:00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:eb40:beef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:e4:d9:08:17:67:61:1b:28:a5:71:14:1c:93:30:1e:01:15:
         59:fd:80:b5:f1:3e:e2:14:d3:32:62:b9:63:8c:f1:fa:62:6a:
         aa:94:7f:24:4b:a2:7e:da:ec:00:c7:25:eb:9d:38:e2:bf:a3:
         cd:6f:27:86:e3:50:08:fd:98:69:5b:81:29:13:b0:2d:c7:5c:
         16:ec:7c:44:fe:cb:23:49:c9:bd:23:3b:f3:04:73:4e:e2:16:
         52:39:18:d9:b1:78:30:7d:e1:23:19:f9:a7:6e:31:07:7d:16:
         42:6e:3a:4a:6b:82:89:48:61:f8:dc:2b:1a:d7:82:0a:b4:28:
         bb:de:20:9e:b7:7a:8c:6e:86:75:a6:78:43:a7:a7:a3:5e:ef:
         7b:3a:f4:63:38:55:69:bc:40:cf:60:47:c4:ac:9d:81:c1:dc:
         6d:37:a3:e6:b2:e3:07:e9:74:d2:f0:40:e6:1f:e6:dd:4b:99:
         5c:ad:b0:43:fb:0c:7b:12:ed:c0:9a:f0:e7:0d:a5:2a:18:9d:
         1c:e1:44:79:cc:b5:b7:a7:57:00:6d:f5:4e:a7:1e:54:13:51:
         88:c8:fc:8d:d1:4d:c7:9d:f4:4a:76:0b:98:23:55:c5:7e:0b:
         10:1b:4e:dc:92:95:c7:3e:88:c9:00:e0:a0:a4:87:69:9d:1d:
         83:e4:a8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:25:28 2025 by rpki-client