Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5d43571-a6ee-3c70-b201-23a0ea4a6c09.roa
File:                     f5d43571-a6ee-3c70-b201-23a0ea4a6c09.roa (raw, json)
Hash identifier:          ATOlAL9MmzQvpvzlMjSg48ESmU14fH1deK8y5jIL6ag=
Subject key identifier:   90:A8:6E:0F:62:41:0F:A3:5A:14:A4:A7:13:10:AB:95:0C:25:42:F8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB88062CA2784DA6C84FE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5d43571-a6ee-3c70-b201-23a0ea4a6c09.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33659
IP address blocks:        2603:2080::/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:80:62:ca:27:84:da:6c:84:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=87b2399f-630f-414d-9652-87139a0e7361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:77:2f:5d:eb:b0:0f:3e:4b:d7:37:06:eb:1b:
                    73:be:d7:7b:de:17:5b:1c:44:6a:da:d2:7e:e6:93:
                    4c:f6:3f:83:6d:6c:c5:45:11:56:e1:37:06:d5:93:
                    b2:ca:4a:a9:1f:e8:d0:56:d6:6f:b1:3e:b4:a3:92:
                    4f:cf:35:bf:50:5b:6c:a5:76:0a:6f:84:fc:3e:9a:
                    90:68:f9:75:ed:28:c7:e8:a6:2d:38:ab:65:db:fc:
                    72:4b:b6:ad:19:15:81:e9:b2:2f:0f:b9:a0:39:71:
                    9c:1d:d9:d2:84:78:2b:65:43:03:91:07:d7:d5:50:
                    f9:c5:ed:32:d1:57:f7:39:44:6d:d5:33:da:9e:7a:
                    83:40:ea:7d:64:9f:a0:f2:10:66:23:93:39:04:fc:
                    85:7a:b6:ea:aa:b2:cb:e6:f0:fa:14:01:f2:83:ad:
                    66:54:b1:5e:4b:79:e2:3b:96:e8:57:2f:99:ea:4f:
                    1a:7f:ab:42:3b:3e:87:02:6c:75:4a:e4:7c:ed:b2:
                    68:e9:87:d9:79:a5:b7:2a:74:85:74:12:38:fb:7c:
                    de:a0:14:a1:2b:c7:fa:85:2f:90:c4:a9:8c:f2:f9:
                    95:01:3e:e6:b4:33:ef:ca:38:cf:ad:c0:98:ed:4d:
                    b8:0d:64:1f:d4:38:ec:92:43:ab:0c:6e:17:0b:54:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A8:6E:0F:62:41:0F:A3:5A:14:A4:A7:13:10:AB:95:0C:25:42:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5d43571-a6ee-3c70-b201-23a0ea4a6c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:2080::/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d3:2b:10:7c:6f:6e:1f:7b:26:3d:f7:c8:3f:66:a3:5e:08:
         94:7c:59:6f:86:28:4a:4f:af:1e:f5:1d:43:41:d1:6b:11:6a:
         63:12:ee:39:ae:12:7c:87:aa:72:9c:74:5b:89:ee:a4:83:cc:
         c7:04:ce:81:b3:1c:c3:83:7a:25:85:91:d8:61:76:e2:b7:0f:
         56:e2:5a:f6:ce:d5:fe:51:4e:ca:a4:ed:4a:38:d5:d4:53:75:
         7e:52:a9:3f:67:e5:50:e1:7a:89:41:2e:b5:90:46:0a:83:0f:
         5f:2a:99:d3:5c:d7:17:08:20:ba:a8:8a:d5:d0:c1:5b:29:c3:
         c9:90:95:a9:4a:ef:b9:cd:ba:dc:ec:b7:d0:72:7a:03:1f:2e:
         29:1f:22:d0:44:a6:e2:67:cb:b9:8d:f3:5f:5c:b1:6f:87:88:
         b9:88:42:5a:d3:a6:8a:6c:41:ee:d6:97:9f:c1:82:22:8d:c6:
         15:27:a8:b7:c1:d7:14:f2:5a:78:9d:8a:38:e5:ed:c4:8a:43:
         95:c3:8a:c3:ba:b9:ff:fe:ce:09:64:09:00:03:6a:66:79:75:
         ae:a5:84:0e:6f:0a:e2:39:a0:70:5f:5a:c6:f3:69:6b:3f:12:
         07:04:b0:79:13:78:97:d2:e7:a0:47:74:63:ad:ef:12:7a:43:
         49:56:0b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:08:29 2025 by rpki-client