Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/b7ed7acd-bfd8-33cd-9d5e-f2308a6c126a.roa
File:                     b7ed7acd-bfd8-33cd-9d5e-f2308a6c126a.roa (raw, json)
Hash identifier:          +huxMe8P7x/0peBgkitUPbMRbT6yt7Jv8bmO24gzhOY=
Subject key identifier:   A6:9E:E4:1A:EA:A1:79:43:27:E2:AC:72:14:7D:2E:F3:AE:12:A0:26
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328584B8EAD0C064745FB20BF093F00
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/b7ed7acd-bfd8-33cd-9d5e-f2308a6c126a.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     14773
IP address blocks:        2620:1d5:ffb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ad:0c:06:47:45:fb:20:bf:09:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=912d478d-819f-483a-9013-b7d2de4a3710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:90:9c:ed:33:2b:f3:99:71:db:ae:53:85:
                    7b:ad:6c:b9:69:d4:0b:d9:27:3c:ed:ae:fe:df:32:
                    f3:58:7d:5f:73:5a:09:f9:4e:f0:20:fa:2d:9e:8b:
                    44:03:00:72:0e:5f:0d:1f:62:69:10:6a:b0:23:87:
                    b2:4a:88:61:15:2e:8f:ba:cb:8e:30:7b:51:da:ec:
                    fb:1c:5b:c0:81:32:c9:59:61:e9:b7:c6:93:c4:3f:
                    77:ae:28:e0:70:10:8e:e1:03:ad:c0:fe:4b:32:88:
                    d1:cc:72:2d:fa:fb:4e:b7:24:8a:03:32:49:2f:fe:
                    54:b6:ad:d3:44:df:32:ec:30:d8:ca:c6:43:46:c3:
                    61:fc:d7:5f:22:60:2a:9b:b0:8e:91:6c:32:d0:38:
                    34:50:e3:ba:c3:96:97:f7:2e:66:37:13:db:f5:69:
                    63:95:f6:0b:33:f2:fd:e4:7b:eb:77:2e:08:ad:12:
                    19:d8:67:2e:65:66:79:61:ec:70:83:a0:9d:a3:12:
                    8d:d4:47:ce:18:97:e5:54:6f:ee:93:fa:fe:b7:55:
                    c4:bd:c0:4e:65:37:7b:9e:b3:a1:20:c7:21:46:7a:
                    ab:e4:f2:dc:fe:eb:44:29:21:fe:7e:09:f0:99:19:
                    7f:c4:4b:cb:b6:22:79:d7:f1:96:ab:77:cb:5d:b3:
                    db:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9E:E4:1A:EA:A1:79:43:27:E2:AC:72:14:7D:2E:F3:AE:12:A0:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/b7ed7acd-bfd8-33cd-9d5e-f2308a6c126a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1d5:ffb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:69:f1:fe:25:21:e4:42:5b:be:70:8e:22:42:c0:56:01:c4:
         33:3d:14:1e:cb:51:f8:e8:3b:a7:37:68:2e:1c:9e:f8:90:cd:
         39:b5:b6:1d:fb:ee:33:8f:f3:23:b6:79:c7:dd:e9:d8:a3:aa:
         99:36:0a:4d:cc:74:fe:b4:f3:e2:ac:a9:74:9e:55:24:b6:58:
         ce:41:89:5c:50:f2:d7:f0:c6:78:0e:51:ee:f4:90:49:7f:4f:
         d4:44:ec:ac:a9:d9:54:fe:a8:96:54:79:4b:45:65:a0:89:98:
         25:1c:b7:90:24:1d:55:49:88:fc:d1:b0:8b:b4:b1:a0:0a:63:
         1f:86:57:7f:7a:87:af:d7:4c:bb:ab:3d:1b:c7:58:d9:9e:da:
         58:6e:69:79:6d:68:67:8b:bb:27:c1:69:31:e9:cb:d0:96:48:
         53:e1:a3:62:ef:d8:3f:1b:3b:72:32:8f:5a:5a:b6:09:cd:b5:
         c3:96:9f:e5:03:f8:a2:b2:3f:a2:5f:74:72:c6:d8:c0:7c:ec:
         65:3d:26:c2:03:c1:cc:7e:1c:80:3a:62:63:e5:3b:a9:91:82:
         a7:94:aa:25:7d:c7:74:d9:f7:b5:0b:dc:b9:fe:4c:77:4f:85:
         0f:dc:d5:43:20:50:29:05:1f:55:4e:e5:6b:6e:48:9e:63:b0:
         f0:27:b5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:43:47 2025 by rpki-client