Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/165deabf-22e9-353f-b895-dadde6e0efa3.roa
File:                     165deabf-22e9-353f-b895-dadde6e0efa3.roa (raw, json)
Hash identifier:          tpyYRUWKvYdU1z+pE3W1SoLxnDphYf5HAa2wPVGsV6M=
Subject key identifier:   61:4E:5D:B2:BB:F3:29:1C:F0:D4:3E:46:51:0A:28:E5:25:68:9F:9E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD0954CC378FA38CF19500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/165deabf-22e9-353f-b895-dadde6e0efa3.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     7016
IP address blocks:        2603:2988:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:09:54:cc:37:8f:a3:8c:f1:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=b6ccec5a-0b34-43e6-bcfd-dc88b5329e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c5:ef:76:6f:87:e1:ea:8f:80:39:5f:85:21:
                    7d:d5:75:a1:1e:3c:27:8f:2c:f0:af:77:c4:dc:58:
                    75:2d:5c:05:77:7d:dc:c7:99:b5:93:29:42:33:6c:
                    78:71:24:4c:52:2c:7e:ac:c0:b9:ee:41:50:6e:25:
                    8c:90:10:55:70:fc:13:5e:79:ce:f1:21:43:d4:4d:
                    57:4c:43:8d:9c:b3:50:72:fa:68:26:53:b1:da:91:
                    a9:71:36:d0:7e:1d:d1:6f:29:fb:e5:a0:42:95:cc:
                    30:5e:33:12:4f:c1:73:86:d0:13:6f:ca:4c:e6:ec:
                    37:10:0f:96:ce:b3:ca:a7:c4:85:68:4a:39:91:4a:
                    3b:35:d3:4a:1a:07:e3:c3:7e:ea:de:5a:c9:33:a4:
                    c1:06:0c:b5:fc:e5:71:83:89:76:08:7c:bc:46:bd:
                    f4:f2:f5:44:18:00:24:1a:47:22:7e:74:9f:b3:a0:
                    04:fe:72:13:7f:50:a7:0e:08:ef:5f:a5:12:11:3c:
                    24:61:bc:7d:ef:22:86:99:2c:e0:17:52:b0:b6:18:
                    08:e9:a3:bf:0f:c9:d4:2b:dc:23:55:b2:23:dd:5b:
                    05:1d:14:7b:d0:38:d6:0d:5f:85:cc:a8:32:35:ca:
                    1a:87:21:db:11:bd:50:29:6d:f7:34:13:07:c3:c9:
                    bc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4E:5D:B2:BB:F3:29:1C:F0:D4:3E:46:51:0A:28:E5:25:68:9F:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/165deabf-22e9-353f-b895-dadde6e0efa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2988:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:00:0d:c9:29:40:d7:42:e7:c2:13:c8:ad:cf:e1:16:53:2d:
         ba:eb:70:ee:da:d2:53:f8:df:d4:be:99:39:1c:2c:99:f9:12:
         fc:b0:3d:84:35:2e:26:95:38:75:89:d5:8e:6e:93:0e:90:91:
         33:62:f2:11:12:2f:a1:50:9e:95:68:ba:7c:c0:90:66:25:ea:
         6d:19:3b:b4:1d:9e:97:55:9a:8f:70:65:d3:7c:3c:79:f7:e5:
         d4:d3:95:6e:33:fe:eb:ef:95:de:a4:32:80:f0:14:0a:bb:10:
         b5:43:92:ba:14:d0:13:68:d2:d1:81:97:e5:27:af:2a:fe:6b:
         6c:6e:70:51:14:f4:0d:b3:c8:ff:e1:2e:45:87:04:6f:72:3f:
         3d:80:ce:b6:4b:35:17:27:14:2a:34:1d:f3:87:60:7e:97:d2:
         36:f1:65:92:52:e3:fa:74:a2:a4:5e:3f:68:a2:39:d1:30:32:
         60:47:8b:d3:f9:92:ad:8c:7a:a5:78:bf:57:2a:b1:23:53:40:
         19:16:fc:b0:ca:77:b8:73:90:af:df:40:56:3f:84:a9:9c:af:
         65:cf:e6:dc:0a:d5:b0:42:5e:d4:0e:b9:e0:43:09:30:d0:52:
         28:ee:57:35:53:33:68:2e:b4:34:04:34:4a:51:96:bc:a1:85:
         35:5b:93:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:47:18 2025 by rpki-client