Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/c2470a94-38a7-371b-81ba-0b3bb349cbdf.roa
File:                     c2470a94-38a7-371b-81ba-0b3bb349cbdf.roa (raw, json)
Hash identifier:          L6ZEn3mOkbj+VVen5VunzNwZKASvQ8K0HYg8Yx9HMgM=
Subject key identifier:   9B:5A:5C:CF:68:6A:C1:42:19:5E:7F:25:59:FD:38:04:0A:05:17:8C
Certificate issuer:       /CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
Certificate serial:       010D0C9F4328584AEE26894CD31F9B264BCD2F80
Authority key identifier: FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/c2470a94-38a7-371b-81ba-0b3bb349cbdf.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        2607:8d40:f20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:89:4c:d3:1f:9b:26:4b:cd:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ade2d5aa-5600-4e0c-9525-24187c0ea66b
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=38a2602b-832b-4478-a07a-939f58e8d419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:18:9f:e8:42:e2:51:6a:98:bb:64:d1:83:
                    93:c7:51:6c:a6:12:fa:6d:30:46:0c:a9:ed:8a:0b:
                    8b:9a:4a:58:b2:dd:36:7c:ea:b3:90:f8:87:2e:c5:
                    11:f2:6e:6f:a4:d2:05:86:ee:7c:1a:39:cc:88:dc:
                    08:86:df:7a:d3:71:b7:98:c7:49:5b:64:5d:a7:c7:
                    26:89:11:45:10:68:b0:48:b4:22:a3:a6:84:6e:ea:
                    9c:9a:f2:ca:ee:ce:50:c1:94:5c:0e:54:f4:a4:e6:
                    75:38:b5:55:89:14:4e:31:ef:29:bc:cd:fe:f6:02:
                    40:56:73:f1:08:53:68:56:29:eb:e9:cd:b3:58:1a:
                    8c:db:d5:c9:85:ea:47:99:4e:ec:8e:ce:01:c5:b6:
                    d5:68:48:41:0e:62:3a:55:38:b6:19:a4:da:5b:c0:
                    7e:ae:66:a7:d9:f6:ff:96:bb:1d:b1:ea:df:8c:31:
                    39:d5:28:84:75:9c:ff:df:4b:b2:8c:0e:c0:d7:d6:
                    cb:12:57:b1:c2:15:eb:8f:d3:2c:2a:ff:bf:f4:0f:
                    ba:b9:d1:c3:06:b3:f4:2c:b1:3c:f0:3a:aa:39:1b:
                    9e:d3:81:3d:75:da:18:e4:7a:c8:49:de:ca:8a:d5:
                    29:48:6d:dd:35:65:8c:09:94:4c:8c:e9:a3:7d:b7:
                    89:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5A:5C:CF:68:6A:C1:42:19:5E:7F:25:59:FD:38:04:0A:05:17:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/c2470a94-38a7-371b-81ba-0b3bb349cbdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b/ade2d5aa-5600-4e0c-9525-24187c0ea66b.crl

            X509v3 Authority Key Identifier:
                keyid:FB:9F:65:66:68:E4:8D:1B:64:71:75:D7:3F:05:00:BB:3E:D4:1D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ade2d5aa-5600-4e0c-9525-24187c0ea66b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8d40:f20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:63:64:8f:f2:8d:f7:9c:9a:4a:d6:53:fb:0c:75:e5:96:ba:
         ef:eb:9f:22:ff:00:ed:2b:eb:63:af:4b:7d:ed:b9:29:0a:36:
         66:83:51:b3:7b:ce:5e:da:26:fc:65:47:f9:5c:e2:ce:54:b0:
         a9:e7:00:31:c0:60:e0:59:24:de:0a:53:aa:f1:6c:62:bb:ad:
         8a:ff:fd:cd:47:a5:e6:76:12:e5:8c:9b:4d:2e:9d:d8:58:d2:
         b1:81:78:41:b3:aa:af:48:ed:ca:2d:2f:46:93:2a:96:73:89:
         5c:b4:93:db:6d:92:91:82:bc:a3:3b:e5:32:47:62:bc:f9:23:
         cf:92:de:99:39:80:86:24:2e:5d:93:31:20:34:4e:bc:d1:ff:
         8c:b9:50:3e:75:78:88:a5:e9:64:dc:18:1e:b4:6f:12:25:6c:
         20:fa:a7:b7:b1:fb:1b:fc:e9:2a:a2:f7:66:b8:7c:cd:34:4c:
         36:9e:ac:1c:6a:09:0a:8c:ee:59:4a:dd:74:ca:cd:40:da:5f:
         88:05:ab:07:13:f2:8a:59:53:dd:a2:ef:82:34:ac:5c:ce:9a:
         2e:14:ff:39:77:5e:f9:90:70:6e:e7:d6:8d:39:51:c7:0d:b7:
         da:02:50:75:82:54:18:dc:cc:a9:b3:15:4a:5b:e7:34:9c:2a:
         7b:c6:68:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:50:37 2025 by rpki-client