Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03d804a7-add0-3e8d-9de7-c0484cd77160.roa
File:                     03d804a7-add0-3e8d-9de7-c0484cd77160.roa (raw, json)
Hash identifier:          ETLgtXPuR5FAXT1JvI4EJC9oeEN8+c/sXh52rlI0mgg=
Subject key identifier:   53:87:93:AF:35:6D:36:0D:85:16:1B:CC:24:09:A3:8A:46:F5:A1:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD0340F94AA179F4756600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03d804a7-add0-3e8d-9de7-c0484cd77160.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        2601:3ca:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:03:40:f9:4a:a1:79:f4:75:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=42f4a84c-0a4a-4718-970c-2b4f5cc9e647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:91:48:4e:2d:3d:0e:f7:34:cc:ac:b0:1b:
                    3b:95:2c:16:0e:17:b1:86:42:86:dc:d0:da:91:99:
                    0c:2a:e7:8b:b5:a4:76:5a:e1:7e:cd:11:90:b6:56:
                    f1:c4:95:58:6e:d7:4f:cf:21:0e:32:52:51:bb:7c:
                    71:1c:ff:fc:96:9c:56:0a:d9:c0:d8:da:b2:63:c4:
                    60:e2:2a:76:06:a8:98:15:bf:01:6a:85:76:46:56:
                    9a:ed:ca:11:a3:91:13:e9:72:38:5c:be:14:b1:b9:
                    77:46:ee:18:05:5b:b2:2e:17:42:9e:5c:d1:32:7a:
                    ca:57:d7:41:fa:df:38:db:9f:64:c2:65:ce:c7:ff:
                    94:ed:a1:85:bb:9d:70:78:49:33:8a:a9:c7:6b:3a:
                    71:54:80:a5:d6:23:1d:8f:72:1d:9d:f1:a8:69:f6:
                    32:b5:15:33:38:37:f9:22:93:72:df:d2:25:07:a6:
                    41:74:80:86:e5:c0:a8:e2:66:11:d8:42:fc:0b:da:
                    2f:ae:c0:1e:58:4b:ee:79:17:68:dc:ef:71:9a:61:
                    61:17:bb:cc:78:6a:d3:c6:03:c1:88:a5:a7:90:a0:
                    40:97:9e:dc:78:0e:01:1a:50:73:9f:ae:4d:b7:de:
                    b5:55:17:9d:32:24:4d:70:9f:10:c3:91:60:40:48:
                    1d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:87:93:AF:35:6D:36:0D:85:16:1B:CC:24:09:A3:8A:46:F5:A1:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03d804a7-add0-3e8d-9de7-c0484cd77160.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:3ca:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f0:2c:ef:45:9c:65:da:62:e4:72:71:6e:b9:35:55:95:91:
         fa:74:2d:56:9c:b8:9d:dc:00:7c:3c:87:8f:be:fe:d4:c3:1a:
         c2:99:da:f7:b9:94:9f:99:e8:29:b0:01:c9:3e:26:a4:34:8d:
         54:a3:dc:e4:1b:82:47:c6:dc:e6:38:68:d8:e8:1a:67:ea:d4:
         cc:46:d6:52:63:b2:e6:9b:17:f2:b1:e2:fc:1f:25:d4:cb:70:
         6d:0a:d1:b7:3d:52:2c:9d:d3:32:0e:00:72:63:49:cf:71:3e:
         2a:fe:39:83:5e:42:3d:81:d4:13:66:ce:a9:1a:e2:b7:92:c7:
         9b:eb:1c:16:46:f9:03:13:bd:ce:f0:a0:13:fa:50:b2:31:e5:
         c9:d3:3b:cd:8a:9d:d4:87:b3:26:6c:ed:dd:7d:f7:48:13:c0:
         1b:c4:b2:5c:18:a2:f3:ab:9a:05:bf:03:75:52:94:9b:e0:49:
         1e:e7:b8:7c:bd:31:86:41:29:c5:35:2a:6b:04:f6:d5:ae:66:
         33:2a:17:fa:06:1b:fa:c4:61:a5:08:51:7b:72:75:84:9d:74:
         5f:7e:1d:64:c1:f2:98:c2:ee:a2:ad:be:50:7a:d0:b9:81:70:
         31:bf:00:25:50:2a:a2:0a:0b:c2:fe:f9:fd:aa:b2:45:8d:14:
         d5:3b:f9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:24:35 2025 by rpki-client