Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/3feeeaca-68cc-366d-8054-94f196ab0dc2.roa
File:                     3feeeaca-68cc-366d-8054-94f196ab0dc2.roa (raw, json)
Hash identifier:          WpZumNCR1r/7AljnfwLGlT6nn92AzH9kcgJpLMUwxSs=
Subject key identifier:   95:B9:C8:4A:5B:BB:F9:63:9F:7F:D9:8D:39:0C:56:EC:21:66:D4:AE
Certificate issuer:       /CN=41b3b885-79da-40ed-ab0b-ce4a30f770db
Certificate serial:       010D0C9F4328584B7DECC4974568FCAC1388BB00
Authority key identifier: D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/3feeeaca-68cc-366d-8054-94f196ab0dc2.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     29888
IP address blocks:        2620:109:3000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:c4:97:45:68:fc:ac:13:88:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b3b885-79da-40ed-ab0b-ce4a30f770db
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=59cfdd65-b9e1-4383-823f-ac68cd2c79f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:39:bc:4f:8d:62:48:1d:bf:aa:19:fb:47:e7:
                    56:89:a4:78:89:ee:63:4b:db:e4:22:ef:9f:31:d4:
                    51:27:d0:6c:fb:4c:d8:ee:50:c9:df:0e:55:b1:da:
                    6e:87:43:90:f6:e1:a1:8e:c6:7a:81:a8:a9:29:f6:
                    11:ba:95:09:bc:a4:35:98:34:ab:62:44:09:62:f9:
                    66:a7:51:ea:d5:75:80:61:64:fe:28:76:3c:fa:97:
                    83:f2:4a:32:01:5d:26:85:70:61:8c:ca:a6:51:1b:
                    81:0f:04:70:69:e4:f2:d1:41:33:f1:9a:09:2f:3a:
                    fc:e3:7c:f3:55:07:2a:a6:c3:2f:ae:46:c3:bd:5f:
                    df:69:b6:6d:a8:dc:f3:2f:c6:a7:14:99:ca:30:1c:
                    85:96:ce:d2:65:7d:4e:73:ca:69:4c:14:2e:79:a9:
                    8b:a0:67:72:a0:05:76:5a:f7:39:5c:11:2c:18:55:
                    b5:0a:17:e4:f1:fe:ae:c6:b6:1c:d6:67:e2:66:0e:
                    cf:f3:ed:ec:b4:36:a3:84:6c:8c:72:25:80:fc:6e:
                    c4:f3:bd:4e:c9:82:ce:67:11:c5:9d:3e:14:a9:8a:
                    f2:81:c2:05:9e:65:8d:92:ad:6d:22:6a:60:bf:50:
                    1a:50:b5:9c:64:ec:bd:b7:17:80:7c:70:b8:10:e4:
                    11:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B9:C8:4A:5B:BB:F9:63:9F:7F:D9:8D:39:0C:56:EC:21:66:D4:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/3feeeaca-68cc-366d-8054-94f196ab0dc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl

            X509v3 Authority Key Identifier:
                keyid:D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:109:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:1c:90:23:2b:44:dc:5f:ee:25:04:a8:72:ac:7c:b1:ab:8e:
         0b:2d:0a:40:38:b9:4e:f5:03:cf:04:9d:8e:46:b4:d6:21:38:
         b9:d7:8e:2f:86:79:75:87:b3:aa:3e:32:20:0d:dc:25:d8:d6:
         75:6f:3f:cd:fc:43:35:da:e2:b7:70:32:02:30:68:92:ee:ff:
         e2:d6:8d:6f:0d:f4:9e:b4:cf:5c:81:1c:c1:1b:f4:d7:41:29:
         33:09:dd:ab:82:f7:35:ac:6f:17:89:32:f4:0c:0d:ac:01:30:
         27:dc:b9:b3:ab:9e:dc:4c:a6:d9:7b:44:38:e2:fa:13:93:be:
         34:14:37:3b:b9:06:e0:65:a2:72:34:97:8d:59:a7:ea:da:2e:
         c2:48:b0:ae:95:ea:db:dd:4a:4d:21:01:5d:37:f0:ba:3e:79:
         97:df:bb:a5:9c:db:7a:17:1e:44:00:d6:5f:7b:85:0a:32:86:
         40:83:8b:00:8b:87:2c:6f:e1:10:04:f3:08:30:c8:f9:1c:f4:
         41:2f:2e:e2:b8:a2:f1:50:19:a2:85:a5:2b:90:2c:03:87:e8:
         e7:d1:76:39:f0:74:80:10:68:44:75:a5:0d:76:ab:cc:f9:b2:
         55:a9:97:9c:6c:c7:76:b3:fb:1b:86:be:48:ac:96:c5:d2:69:
         48:b9:5a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:20:51 2025 by rpki-client