Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce1a6d02-2095-35b1-b89d-03f020480026.roa
File:                     ce1a6d02-2095-35b1-b89d-03f020480026.roa (raw, json)
Hash identifier:          4KgeIGzS6fYk5pk2wvKNSge/LnpyNdfoYJVBnuxRutc=
Subject key identifier:   38:37:1B:F1:39:84:E2:03:53:6F:68:F1:36:92:0D:EB:0A:FD:C8:14
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584B821CC92AD590716E0BE05D80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce1a6d02-2095-35b1-b89d-03f020480026.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     237
IP address blocks:        2001:468:2620::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:c9:2a:d5:90:71:6e:0b:e0:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=a79fa2ab-bb79-418f-8be3-8934f590ed7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:36:b8:65:b7:17:69:91:c4:16:f9:6d:fa:bc:
                    13:cc:9a:e6:e2:02:fb:ba:b3:6a:d9:9b:84:b9:1e:
                    b7:cf:b9:a1:02:d2:8a:d0:ae:8b:4b:7f:3f:c0:63:
                    ce:c1:83:7a:ab:92:25:14:d7:0b:a1:f3:c7:7a:71:
                    e1:61:04:1e:20:b9:d3:c7:fa:9e:3c:57:12:8b:02:
                    e5:44:10:b7:1f:92:17:be:ec:62:70:db:21:4d:6a:
                    92:9e:76:fc:38:2b:93:32:48:0e:19:e5:28:87:41:
                    ef:78:d1:37:c3:ff:4b:8f:77:90:15:b7:a6:a9:3e:
                    df:2b:7a:85:67:01:c0:4c:34:9d:62:49:10:7d:4e:
                    3b:8e:53:df:d1:62:0e:91:be:64:41:9e:57:1a:79:
                    71:7d:6a:f2:24:06:6f:6f:68:1f:64:59:57:e3:57:
                    5f:fd:55:f0:f3:a3:91:fa:ac:57:44:cb:33:43:3b:
                    f9:0c:87:06:6a:59:a4:d5:5c:df:ef:09:2d:65:35:
                    a3:1d:0b:f8:45:e9:61:e3:6c:86:b8:eb:ab:d4:31:
                    0b:8c:18:e2:02:7c:5e:91:51:bc:a0:b4:62:ad:e2:
                    8a:4a:74:3e:80:09:7c:bb:d4:2e:aa:1d:1c:07:c7:
                    0f:d8:0d:b5:60:2a:87:60:09:8b:82:68:76:fd:c8:
                    98:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:37:1B:F1:39:84:E2:03:53:6F:68:F1:36:92:0D:EB:0A:FD:C8:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ce1a6d02-2095-35b1-b89d-03f020480026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:2620::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:90:11:05:dc:96:4b:48:e8:20:05:57:05:9f:34:98:ab:9e:
         ef:1d:09:26:a8:c1:36:be:f1:11:e3:99:10:fc:75:21:4f:3e:
         66:c4:16:53:0f:8c:d6:80:83:29:c5:2b:41:bf:fa:98:07:fd:
         41:76:b8:ab:a5:ad:67:c8:48:e6:57:6a:4f:fd:b5:cc:11:32:
         b5:2e:fe:c4:12:c3:67:92:e7:6b:7e:20:7a:78:48:86:e0:8b:
         42:36:94:61:0d:73:7b:60:74:4f:5a:d2:70:45:50:93:61:cc:
         cf:74:2f:30:a9:a0:eb:96:da:6a:e8:37:2b:13:6c:96:e0:f8:
         9b:9d:10:22:4b:94:eb:6c:46:c0:b7:e9:42:e7:88:e8:e0:44:
         f5:58:ba:23:8c:82:ae:6b:ce:93:2c:60:d5:10:96:66:42:e5:
         b5:f1:5e:56:c1:48:49:08:2b:65:d2:b7:50:34:11:3a:33:66:
         79:a1:10:42:1d:30:fc:70:a9:75:d6:d3:b0:8c:30:75:db:2e:
         50:d0:ec:5e:cc:54:85:3f:f4:39:bf:f7:90:94:01:37:73:3b:
         ea:cd:62:bc:85:98:97:ac:2d:59:d0:03:df:3e:fc:2e:78:99:
         57:2e:be:fd:63:eb:aa:e0:0a:82:d3:9c:e7:3c:19:43:21:ac:
         01:c0:c0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:58:38 2025 by rpki-client