Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/ab502d81-e84c-393f-8f09-d07e38a28a00.roa
File:                     ab502d81-e84c-393f-8f09-d07e38a28a00.roa (raw, json)
Hash identifier:          NTW7Yq6zNHrWII/tiOpZhg4lAKjyR1GMa2T65IVc42g=
Subject key identifier:   92:5F:B0:0C:AC:7C:04:48:C2:0A:14:09:07:B4:90:4E:46:45:8A:76
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584B59A1C85046FCB58A6E0F2900
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/ab502d81-e84c-393f-8f09-d07e38a28a00.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     396948
IP address blocks:        2604:bc0:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:c8:50:46:fc:b5:8a:6e:0f:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=69b24f71-9b0e-4f27-aeca-930ed8ffb0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0d:1c:95:f4:e6:b0:23:61:20:ca:d8:b0:a8:
                    80:32:c2:f3:4c:14:9e:df:c0:d8:f6:56:08:cd:77:
                    4a:8a:3b:83:ac:8d:f8:7c:55:b7:a3:45:82:ab:fb:
                    22:63:9a:3f:16:21:41:e1:7d:17:d3:69:23:e6:24:
                    24:81:59:e4:b3:3c:4e:8b:c9:99:2f:f0:e2:6e:23:
                    f6:06:f6:e3:c2:d9:36:85:d9:ba:3f:96:c5:7a:29:
                    ee:f0:3b:f0:e4:60:b9:99:a8:26:90:c0:69:c0:c8:
                    aa:4c:96:cd:61:dc:55:00:c8:77:10:9d:1b:8e:a9:
                    ce:81:41:db:e3:4f:8f:d5:7a:a7:67:87:8a:87:75:
                    9b:15:1a:e4:cc:12:68:a5:cb:89:6a:26:74:c9:54:
                    98:cc:f4:65:67:a3:42:69:80:97:ee:05:20:96:a9:
                    7e:78:12:38:1d:03:bc:80:c0:0d:c3:a2:31:bf:cf:
                    61:1e:87:d2:71:00:96:08:db:c9:01:47:5c:e6:8f:
                    6a:86:e0:9e:eb:02:0b:43:d3:bf:a0:48:14:f7:9a:
                    7a:41:2c:1c:70:d4:9d:48:1c:d7:a4:18:75:6c:06:
                    54:e5:13:87:20:5d:1d:14:35:ed:6d:d0:81:92:4b:
                    1d:46:0f:1e:80:a0:87:47:d2:ed:69:01:06:2d:c3:
                    c7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5F:B0:0C:AC:7C:04:48:C2:0A:14:09:07:B4:90:4E:46:45:8A:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/ab502d81-e84c-393f-8f09-d07e38a28a00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:bc0:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:3c:79:e5:9f:a2:8d:b7:7e:5a:24:7b:22:be:36:64:f6:18:
         1c:20:0c:28:ed:26:c0:53:56:a2:cf:67:e4:e5:9b:80:e3:6f:
         17:3d:70:43:fa:14:dd:a5:2f:90:62:21:9d:27:03:d0:91:a9:
         d2:61:c8:e0:e7:50:06:e2:cb:3c:85:9f:3e:ba:d9:ba:db:5a:
         d5:51:22:28:2e:05:a1:4a:91:75:10:8e:3f:0c:2f:c0:c7:48:
         7d:7e:e3:4b:2e:72:f3:4e:26:a1:2b:26:19:0b:2b:98:64:34:
         46:29:54:30:d2:ff:c1:26:0c:b3:9f:a2:ec:98:bd:8e:c3:bd:
         0d:d3:01:6a:64:68:9d:9c:24:af:af:15:7d:44:85:ba:4a:2c:
         99:a7:95:61:4a:ea:87:c9:ed:e9:76:75:00:79:d6:f3:44:7d:
         6e:5e:12:39:3d:81:29:6b:c2:ad:b5:40:9d:e1:f6:95:5a:5a:
         fc:50:64:cd:14:e4:4d:a5:88:70:b0:38:85:cc:80:23:e5:88:
         d1:23:2b:2b:36:2f:72:a3:2e:73:16:e9:c5:3c:58:25:cc:fd:
         2f:32:83:ae:bf:4e:fa:ec:22:44:26:1e:98:06:3f:8d:34:44:
         d4:7b:b8:cf:e3:24:3c:15:c2:e1:8c:e4:fe:37:e0:09:76:2c:
         48:18:b0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:06:18 2025 by rpki-client