Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/7472e233-c3ae-37b8-a8be-ec2b234930bb.roa
File:                     7472e233-c3ae-37b8-a8be-ec2b234930bb.roa (raw, json)
Hash identifier:          wrZqIyvyaPU1RTjadvXoTd7PDkXgCTd0wTWnpAZgYvI=
Subject key identifier:   9B:67:F5:00:66:16:C7:2B:37:BA:A5:2A:E2:1E:55:7C:3A:7A:08:E0
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584B25FC3E6F12E55703FB0A8C00
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/7472e233-c3ae-37b8-a8be-ec2b234930bb.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     46450
IP address blocks:        2606:3580::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:3e:6f:12:e5:57:03:fb:0a:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=ba282072-309f-4772-bfdb-ddc27a04a9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7e:fe:08:3b:4c:3c:d1:dc:ec:30:91:20:02:
                    85:6f:40:1a:94:43:31:18:0f:38:57:9c:06:fd:44:
                    7b:40:2f:55:4e:0d:9b:2a:1e:df:03:5d:ca:ac:21:
                    73:9b:4a:b3:e3:fb:6d:2d:cc:f6:d6:50:71:8b:cc:
                    d9:7f:d0:0f:70:3a:39:2b:7d:b1:2c:aa:3f:fb:a2:
                    fc:7f:01:62:09:5f:12:c0:cf:4f:14:cf:fd:57:a9:
                    dc:b2:e7:f4:ce:0c:fe:93:85:f6:f9:1f:20:e6:1f:
                    a8:f5:52:59:fc:a6:38:2c:bc:d2:15:73:58:92:1a:
                    8d:13:63:50:fe:b6:ec:de:e2:4c:bb:25:7e:05:ba:
                    92:d0:52:79:ca:fc:6d:ed:6c:2d:cc:5e:be:0f:4d:
                    cd:86:09:fe:f3:8e:57:4a:f4:be:18:a3:eb:ae:0d:
                    1c:0e:04:fa:c0:b1:38:9e:35:5b:41:fd:b4:ec:cb:
                    ca:f5:53:22:46:5c:f4:97:4d:3d:c4:e4:38:4b:3f:
                    a2:98:64:65:db:86:28:06:e8:eb:61:5a:5b:fa:48:
                    9b:e9:3d:5b:e0:7c:13:ec:64:2d:a1:ee:55:e6:b0:
                    c0:90:11:7d:e0:83:52:d5:2c:28:3a:e0:d3:ce:e4:
                    36:97:1c:ec:29:63:51:b6:ee:58:76:80:eb:e3:bf:
                    69:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:67:F5:00:66:16:C7:2B:37:BA:A5:2A:E2:1E:55:7C:3A:7A:08:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/7472e233-c3ae-37b8-a8be-ec2b234930bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3580::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:6c:58:97:0f:aa:6b:6a:9f:39:22:32:75:ab:c9:91:84:05:
         9d:45:e3:bf:e2:29:3a:6c:b9:4f:7c:c2:21:34:8c:06:42:fb:
         2d:fb:75:56:31:b7:50:eb:1f:c8:a4:d7:5e:e3:a7:db:00:51:
         5c:ee:e8:29:92:67:e9:15:3e:c9:90:7e:34:6e:d9:65:40:b5:
         ac:c0:46:16:1e:f4:b2:8a:3e:05:2a:de:7f:9c:c3:d6:66:57:
         0e:8a:4f:58:ac:a2:2a:b4:b3:af:71:9f:66:1c:55:72:7e:c5:
         c5:a6:ec:30:de:45:6a:90:77:f7:4b:0b:27:52:1a:58:32:d4:
         ff:93:92:6d:6f:5a:ce:44:dd:7c:ce:7f:f6:da:2e:8a:de:63:
         1b:5f:58:e0:68:71:43:32:3c:00:7f:9d:8d:b4:12:cb:b8:54:
         3b:57:a9:0f:5b:c8:b6:37:ef:cc:fd:89:8c:27:39:6c:b3:9f:
         09:74:10:6d:44:3d:ff:24:44:c9:74:57:91:f2:c8:bf:2c:b7:
         d6:5c:b2:a0:51:30:cd:d9:59:9b:b2:8e:6e:da:df:b7:93:93:
         be:c1:0c:12:17:7b:96:d3:cc:59:27:ce:c7:42:1e:b7:ac:69:
         98:7c:29:3b:3b:39:b7:14:96:82:f1:3c:1b:73:95:ed:71:94:
         a5:71:b6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:49:27 2025 by rpki-client