Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/192515e8-a126-37d0-8568-8560484ba501.roa
File:                     192515e8-a126-37d0-8568-8560484ba501.roa (raw, json)
Hash identifier:          Xu2WmFS9Mu2iX3ZVhl5E7mzrh4iM/DAQZc2gM0Q1FQQ=
Subject key identifier:   A4:B4:A4:EF:6D:53:9C:50:0F:2B:B6:7A:4D:95:98:42:03:67:EF:B8
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F4328584B41E70CBB3E39BAAE4B38B000
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/192515e8-a126-37d0-8568-8560484ba501.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     31786
IP address blocks:        2602:fba3:f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:0c:bb:3e:39:ba:ae:4b:38:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=b41b613c-d504-49c2-9f95-1ca0267a5db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:ed:9c:a2:b1:91:2e:15:9c:a4:50:41:54:
                    cb:4b:77:dc:97:29:33:70:e3:10:55:ea:bb:40:11:
                    a4:cb:ed:11:df:fc:0f:ff:6e:e9:91:c6:ad:60:d5:
                    0c:ba:13:de:8f:dc:0c:9a:33:6e:7c:18:30:77:9a:
                    e9:2c:cf:c1:2e:cd:1c:93:5e:d4:b7:fb:30:f2:82:
                    3e:11:64:3e:89:3e:e5:ce:9d:b2:7f:16:98:e2:f6:
                    9c:d5:e1:5d:d3:51:2f:eb:46:e5:b6:0a:fb:0d:4c:
                    0e:3e:21:a2:5b:d2:8c:31:63:87:b9:f7:0b:70:66:
                    80:4e:5b:3a:c2:86:2e:e0:6a:6e:fc:21:9f:d1:97:
                    3c:99:36:26:20:66:4a:94:d2:0c:db:27:60:b1:8c:
                    5a:81:db:f2:07:db:ac:02:d8:63:1d:e2:75:21:09:
                    bb:31:dd:d0:e9:6b:56:a7:a8:bc:e8:ca:f5:8f:3c:
                    b6:97:df:8e:ca:1e:a0:52:0b:45:cc:c3:36:b9:42:
                    a4:4a:35:eb:f5:30:7a:18:95:8a:a6:2b:90:95:a2:
                    1f:a1:37:81:fb:1b:b2:d0:e9:67:56:f7:39:a9:e5:
                    44:40:28:f0:ea:06:a5:af:88:90:7e:28:a4:9e:b4:
                    49:96:7e:9a:5c:f8:9a:9e:8e:4e:58:8c:1a:c0:8f:
                    fd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B4:A4:EF:6D:53:9C:50:0F:2B:B6:7A:4D:95:98:42:03:67:EF:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/192515e8-a126-37d0-8568-8560484ba501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba3:f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:66:ca:2d:6b:16:d6:21:67:5d:dc:4a:fa:e9:72:68:44:ca:
         da:7b:ef:ac:12:69:be:bd:b2:70:ec:9a:4e:6c:47:91:20:00:
         72:f4:52:68:2f:5b:ba:49:ea:cd:d7:61:dd:bc:47:32:5c:51:
         0e:8d:c1:81:2f:56:a7:29:79:eb:fe:0a:1e:6a:08:c6:14:6a:
         6b:5c:13:92:c4:3e:ad:83:a2:77:0d:ff:a3:09:34:e3:11:06:
         cb:37:e3:48:23:d7:23:27:86:f8:eb:c1:ab:dc:ef:8a:35:de:
         62:b9:e8:0f:29:4b:17:32:29:8f:7c:d3:e9:9c:83:14:5c:33:
         4c:38:d4:e6:c3:5c:d5:ab:4a:45:be:d4:ce:6b:5e:9c:de:31:
         7f:28:41:55:c4:64:a2:5d:39:70:38:88:3e:c0:a5:25:7d:cb:
         4d:3c:7b:f1:bd:c3:f9:48:6d:8c:6a:c9:c1:a6:a1:ef:99:2b:
         ae:a6:94:cf:ee:47:91:2f:16:0c:f3:67:2a:70:9f:b3:1b:90:
         11:67:ca:71:48:a3:29:60:f6:ab:ed:90:81:88:bd:87:ff:07:
         46:dc:53:f2:16:24:29:59:be:44:a2:34:ee:41:10:74:e8:01:
         f7:d8:82:66:99:7b:38:b5:22:a8:df:cf:57:8e:7d:16:e1:63:
         50:31:e4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:50:55 2025 by rpki-client