Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96905238-1ee7-3d96-af1f-4c0726eabaf2.roa
File:                     96905238-1ee7-3d96-af1f-4c0726eabaf2.roa (raw, json)
Hash identifier:          Dxz8I9zCRUp3i+jmxZK7t+cT7y6esD1fiOwhdVs68qU=
Subject key identifier:   10:A7:C1:6E:C2:37:04:6C:43:DA:04:D6:10:38:17:DF:5B:BA:3E:80
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AC2E0E0A9B19A5DE42C3C8580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96905238-1ee7-3d96-af1f-4c0726eabaf2.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     34164
IP address blocks:        2001:4878:c254::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:e0:a9:b1:9a:5d:e4:2c:3c:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=3cca7be6-589c-4030-928d-12297cc2a204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6e:81:b0:67:db:7f:a0:b2:a3:a3:35:a1:5f:
                    30:47:4d:64:dd:13:45:c8:3d:72:6d:7a:99:3b:5c:
                    aa:4c:71:ee:4c:26:d9:88:df:eb:2e:59:59:9e:5b:
                    fd:34:ac:af:af:35:b8:95:58:39:00:94:a7:81:e0:
                    23:22:e0:86:92:02:78:72:9b:84:62:7d:f7:39:73:
                    71:b7:91:34:6f:50:fc:ee:04:32:eb:17:f1:70:b0:
                    b6:08:a6:8e:0d:6f:3a:e0:c9:b4:29:6e:71:c7:35:
                    f7:24:e0:64:a7:bb:a8:61:36:4c:79:62:f8:31:bb:
                    bc:49:8b:28:4d:c8:f9:08:9f:16:e6:af:43:82:03:
                    d8:85:84:4e:44:e8:fb:c9:e2:7d:f5:54:56:2f:b3:
                    2d:87:ab:ba:2e:10:19:8e:6a:6e:5e:8e:00:a5:13:
                    87:c1:63:b7:d1:ff:e7:9a:d5:fe:c5:20:1a:09:f7:
                    e4:0e:cc:be:d1:b0:6b:d9:28:7c:77:26:c6:3e:10:
                    d3:cc:75:6d:47:d0:cd:a1:1a:f4:20:5b:28:75:bf:
                    ca:d9:99:ff:21:df:23:9e:c6:b7:93:88:d0:92:ec:
                    a0:55:3f:d8:e9:22:69:d9:bd:d4:91:66:7e:b1:b4:
                    62:e1:c1:72:64:0d:65:36:54:7a:6d:06:22:59:a1:
                    2f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A7:C1:6E:C2:37:04:6C:43:DA:04:D6:10:38:17:DF:5B:BA:3E:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96905238-1ee7-3d96-af1f-4c0726eabaf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:c254::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f1:32:4b:55:70:35:4d:de:e2:98:60:6a:4d:ab:e5:0d:a1:
         24:ea:ee:da:01:e4:eb:5b:55:ad:71:33:d6:64:11:d8:39:45:
         64:bc:94:a8:73:78:72:a7:d2:58:ff:bc:a0:e6:cd:5c:1a:13:
         f8:58:e7:22:20:31:93:42:f1:ce:20:50:67:a3:8b:bd:5d:d9:
         4d:b0:e4:58:98:f8:cd:0e:92:10:f6:0d:cf:78:c7:7f:5f:98:
         85:f7:cf:c4:62:1f:ca:dd:e3:11:e2:1c:48:12:64:65:b1:22:
         38:5b:ae:64:43:4e:54:3f:d1:ec:87:e2:6c:66:62:71:94:6a:
         9f:a9:a1:1f:14:49:30:63:fc:de:41:f1:ed:54:1f:b0:4b:fc:
         32:fc:82:d9:42:9b:09:7a:c8:19:39:c1:b4:b8:c7:f1:1b:00:
         38:88:96:5e:06:93:cb:c6:86:aa:b5:52:f8:2c:ba:7b:a3:9f:
         b2:88:a9:fd:7d:84:3b:ef:2d:56:a7:bd:bd:f8:a0:fa:3b:0a:
         d6:52:42:9b:97:42:64:f7:7b:7e:af:47:1d:ee:01:b6:00:89:
         2d:8a:0e:cc:b7:9e:3a:7a:b1:12:6e:42:72:9a:6c:f6:8d:17:
         59:ef:62:3d:8d:22:86:8c:e2:df:45:39:49:48:06:de:b4:dc:
         63:f9:a2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:01:44 2025 by rpki-client