Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b0971a8-0112-3e7e-b910-d2d9fa8532ed.roa
File:                     9b0971a8-0112-3e7e-b910-d2d9fa8532ed.roa (raw, json)
Hash identifier:          /X0eVmr55GhCdPr2C3TM4QYUNwTrQ/1WpbwCsifSLs0=
Subject key identifier:   51:7D:C5:B3:CB:C3:62:72:B3:4C:A4:C4:56:4F:3E:84:31:A1:68:C8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B92DD4DB6D4ED841533B385E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b0971a8-0112-3e7e-b910-d2d9fa8532ed.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22258
IP address blocks:        2603:23c3:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:4d:b6:d4:ed:84:15:33:b3:85:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=957e8645-a2a7-41ed-b07a-daaf30252c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0e:0a:20:d1:db:54:e8:b1:b5:da:7c:02:62:
                    eb:05:49:29:e5:04:6f:30:60:f0:7a:5e:bc:4a:75:
                    0b:06:42:ad:07:fe:21:3e:50:45:f4:b6:fc:62:5b:
                    2c:ae:17:89:1a:3c:da:3a:99:ee:94:64:6c:8e:27:
                    1a:60:61:1f:03:71:26:c4:94:60:5f:ff:fc:d9:cb:
                    33:39:2a:4d:a2:64:6b:1e:45:d9:32:2e:93:f1:06:
                    28:ee:ab:f5:24:db:3a:88:b2:89:57:58:66:03:73:
                    6e:fd:08:9f:49:79:f3:03:c4:fe:6a:af:43:10:c5:
                    42:b3:9a:74:8b:78:d9:e7:4e:5c:ee:3e:45:43:d9:
                    0f:fc:48:e3:09:ba:c0:68:59:9e:37:7d:8c:a3:29:
                    51:8a:03:9c:0a:88:9f:b6:c0:f2:0b:58:6a:d9:37:
                    90:7e:30:18:5d:27:d0:f9:c9:b3:70:c4:d3:e7:d5:
                    08:fc:79:7a:24:18:58:c8:0b:cc:20:53:1e:a9:ab:
                    fa:96:96:50:22:ac:56:2e:d0:35:07:0a:50:23:65:
                    97:56:cb:b2:fd:8c:79:9b:59:2e:8d:e6:bb:2a:e5:
                    4b:39:84:53:25:dd:af:c5:28:ac:5e:d3:68:61:2d:
                    18:d4:f9:9a:41:30:b7:59:0a:17:e6:ba:84:e1:c6:
                    fb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7D:C5:B3:CB:C3:62:72:B3:4C:A4:C4:56:4F:3E:84:31:A1:68:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b0971a8-0112-3e7e-b910-d2d9fa8532ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:23c3:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:06:93:07:ec:a0:bf:bd:d8:94:ad:83:35:53:0e:b6:36:98:
         07:9f:00:24:e4:ca:6b:59:3d:47:39:21:fc:db:1f:3a:b6:22:
         d5:86:49:04:70:d1:c7:1a:3e:37:ad:40:c8:05:bd:6e:78:1a:
         67:67:6d:b1:37:38:78:94:74:5c:ce:9c:4e:b0:7a:43:0d:da:
         b2:a7:cd:d8:0b:ab:0a:9a:06:93:cf:e5:b9:06:4a:ac:a9:88:
         81:56:2c:cf:dc:cb:37:24:9a:67:21:fe:84:87:ea:b4:dd:d0:
         5f:c1:c9:14:14:ff:06:75:8a:94:b3:57:34:2e:e9:d7:e3:01:
         c6:e4:44:b9:67:ea:99:f6:6d:10:38:04:1a:d6:2e:18:92:8f:
         5a:2b:d3:f3:8f:32:3f:ff:ed:18:a9:b1:06:fb:e2:d2:03:d5:
         e3:f1:42:eb:3d:55:f6:fc:75:be:41:e0:47:59:89:24:9a:11:
         6f:e1:63:a8:09:c6:d0:af:48:9c:fc:b5:7c:61:62:0e:a7:6e:
         50:24:d8:d1:88:de:e4:65:9f:77:e9:45:be:0a:7d:29:a8:b3:
         1c:eb:c8:46:dd:ed:ac:f4:87:41:19:48:7f:51:32:5d:fa:b8:
         38:fd:f1:08:d2:80:41:0a:83:5a:e0:85:b1:42:d1:76:78:21:
         37:ed:09:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:22:05 2025 by rpki-client