Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5e9a054f-b46e-35fd-9c90-ffd4222fc700.roa
File:                     5e9a054f-b46e-35fd-9c90-ffd4222fc700.roa (raw, json)
Hash identifier:          SWoM8ISvyut6XoXVAhs2TFvvP2CLq/lrZiqOIDflog0=
Subject key identifier:   D9:43:C6:FD:59:63:E1:BF:28:9B:19:41:A3:0E:50:41:72:96:D0:EE
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584B8BE20D52A47D3F76ED645800
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5e9a054f-b46e-35fd-9c90-ffd4222fc700.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     42
IP address blocks:        2620:171::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:0d:52:a4:7d:3f:76:ed:64:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=24b04714-71ea-44a1-9a6c-367ed039811c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:d9:ba:40:13:4f:7d:8b:a5:fc:74:30:71:
                    21:ee:61:b1:73:d4:5a:4c:4d:74:3e:41:46:d0:39:
                    01:2d:04:c1:47:86:5c:85:a7:ab:26:d2:82:5e:7d:
                    e0:36:0d:ab:13:af:0e:09:40:e0:b2:dd:07:e7:ca:
                    c6:0c:89:fc:13:8f:22:e5:6f:39:83:87:7f:71:71:
                    a6:63:8c:88:15:cc:37:52:bf:c7:d6:81:0d:fe:4a:
                    9c:d4:66:ef:59:ee:ed:72:5c:7a:98:1b:00:5e:72:
                    19:ca:1f:71:cf:71:52:74:72:e0:4e:19:e2:a2:d4:
                    2d:d9:a7:c3:b7:6c:b2:5b:72:6a:f9:12:e5:db:df:
                    24:04:2e:a3:23:6e:c0:fa:a5:06:ab:2d:35:29:5b:
                    4e:79:94:52:1f:5e:03:09:1a:f3:21:26:42:31:a6:
                    bc:c9:f3:2a:d3:7c:bf:d5:e4:46:6e:3d:83:c1:31:
                    88:0b:b4:42:79:03:ed:55:11:a9:15:11:06:39:e0:
                    55:5b:08:40:21:ed:d1:25:04:5d:d3:bd:52:4c:d9:
                    8a:d2:c1:ac:57:88:72:0e:28:7c:1a:73:cd:95:75:
                    ac:c1:11:65:86:ac:1b:50:5a:63:19:c0:a7:b2:95:
                    98:6e:89:bb:75:61:83:11:11:b1:1f:70:61:60:3d:
                    cf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:43:C6:FD:59:63:E1:BF:28:9B:19:41:A3:0E:50:41:72:96:D0:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5e9a054f-b46e-35fd-9c90-ffd4222fc700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:171::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:40:2a:ce:f0:66:5e:e3:fa:39:12:18:03:89:18:19:43:9d:
         67:fe:bd:2d:4b:1e:29:33:06:ec:db:9b:00:ac:d4:66:ae:77:
         a8:57:9c:2d:13:c2:27:07:7d:cf:a8:6e:5d:ad:c1:a9:31:46:
         d4:e3:62:91:f2:8e:a9:93:7b:2c:06:e6:11:fe:62:f1:db:19:
         f7:51:61:d5:38:ff:70:43:7c:55:a6:20:d0:d3:dc:30:d5:b1:
         b8:46:ba:f7:21:4c:21:16:6a:80:ae:d2:17:db:26:2f:eb:7a:
         26:e5:08:cf:37:dc:f5:65:3d:a9:9b:d5:88:98:cd:68:4f:b1:
         4f:84:89:ad:28:04:81:95:d5:bb:85:49:10:63:45:ec:9c:e4:
         a0:fc:43:eb:cb:1b:44:ce:45:ce:97:13:53:26:46:cb:25:7d:
         b7:ea:83:df:53:b1:a4:ee:03:52:ce:4e:21:44:6d:e5:60:b0:
         cf:66:c4:8b:71:e5:17:79:ae:e4:48:69:cc:8c:f2:2f:7a:70:
         1a:9c:52:f8:19:ac:d7:23:1f:3e:ce:1f:91:9b:3d:b4:74:6b:
         d5:25:ad:4e:38:31:24:9c:35:0c:f5:b6:0f:90:93:bb:f7:cd:
         e4:89:c7:4d:b3:7f:62:b2:6c:f0:f7:bc:75:ac:c4:e3:92:1c:
         f8:87:46:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:51:10 2025 by rpki-client