Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/43c41054-7ae1-370f-91f9-46e26bed1b6b.roa
File:                     43c41054-7ae1-370f-91f9-46e26bed1b6b.roa (raw, json)
Hash identifier:          wwWXDnJCt7SrPXCSVVHl3YRyXyF0kI0MBU0gtwxG4A8=
Subject key identifier:   8E:99:59:A2:DD:18:3B:9B:14:09:E6:98:C0:68:14:81:86:71:92:9D
Certificate issuer:       /CN=a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0
Certificate serial:       010D0C9F4328584B80B766F406AF5881B63D8260
Authority key identifier: B3:3C:FA:77:C0:A6:7D:0A:F6:F9:19:8E:41:82:EE:A9:3B:6B:D2:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/43c41054-7ae1-370f-91f9-46e26bed1b6b.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     19171
IP address blocks:        2607:4100::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:66:f4:06:af:58:81:b6:3d:82:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=ab689e88-8f43-4111-be1c-984c4feae040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:33:6a:5a:b9:c2:e4:5a:4b:7f:b1:f2:60:2c:
                    e7:68:6c:19:34:ec:c0:3a:a5:8b:40:2f:a9:9e:07:
                    fd:fc:bc:2f:b9:ed:39:0e:3e:09:f6:37:bc:54:d2:
                    f1:48:d1:11:33:42:6e:28:f0:4d:46:0a:b6:70:21:
                    68:d6:84:7e:47:66:88:cd:73:78:48:80:a2:96:02:
                    42:fc:df:c8:96:fc:35:59:7a:14:88:2f:79:49:ac:
                    90:3b:3a:bc:11:b7:12:24:ad:e6:49:9c:d3:38:c9:
                    d1:68:20:d5:ac:ed:45:d6:d9:cf:60:40:94:8b:76:
                    b5:c2:1e:ba:10:3b:91:80:66:21:56:c0:9d:ef:3f:
                    22:b8:23:5c:40:52:4a:db:16:52:ae:8e:2f:6c:0e:
                    40:9c:cb:23:1e:95:5b:72:76:7f:68:a4:2d:1f:f1:
                    97:5e:3d:db:c1:fc:7a:07:8c:a7:b4:f7:ed:18:97:
                    ee:c3:1b:27:35:35:92:17:20:0e:23:0d:96:a4:96:
                    78:a8:80:71:b6:a4:d2:d3:4b:b1:ad:b2:66:7c:32:
                    ad:69:fd:39:dc:5f:3c:9b:f4:87:8c:60:67:38:d7:
                    33:ee:d2:01:e3:1c:ca:01:f5:42:b3:ee:7d:3f:12:
                    8e:ee:68:b9:64:54:9f:42:83:1e:96:a4:3c:b3:ba:
                    ca:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:99:59:A2:DD:18:3B:9B:14:09:E6:98:C0:68:14:81:86:71:92:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/43c41054-7ae1-370f-91f9-46e26bed1b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.crl

            X509v3 Authority Key Identifier:
                keyid:B3:3C:FA:77:C0:A6:7D:0A:F6:F9:19:8E:41:82:EE:A9:3B:6B:D2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6786e5b-4aff-49f4-81e1-1dca8a1dfdc0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:4e:28:75:ef:e3:ea:20:68:f9:fe:c6:3f:7f:f3:d8:67:b7:
         4e:67:80:d9:fc:22:1e:ec:f5:ba:6c:4e:1a:7c:6b:6b:89:b2:
         c0:e7:9a:85:ab:b3:6b:6c:71:32:fd:79:b9:c7:d7:38:0d:89:
         3a:85:d7:4f:96:de:37:34:ab:8e:1d:82:9a:19:f3:33:8d:5b:
         8a:36:d9:ac:7c:aa:6c:7e:12:01:49:7e:62:88:11:46:c4:3a:
         1e:37:99:50:10:ba:05:5c:f0:63:ac:c9:30:8a:36:e0:1c:02:
         5e:09:dc:38:1e:63:b0:8d:2e:fa:84:43:74:7e:31:40:58:4c:
         d5:a3:85:ee:38:51:c9:f5:4c:ee:ff:40:34:47:0f:e6:5b:da:
         69:2a:f9:c1:c9:a4:89:e1:42:68:cb:b7:7c:33:b8:7f:31:f8:
         7b:1a:e3:dc:14:c1:d7:d0:f5:4d:d2:49:ee:38:47:e1:31:01:
         2c:49:a8:92:88:5e:42:83:0d:f5:82:58:f7:cb:0b:8c:69:03:
         2c:32:c7:32:b6:fa:fb:8d:d3:93:1b:3f:43:7d:2a:40:d2:4a:
         6f:44:66:4f:47:ea:18:63:9a:cd:e0:7c:d0:4a:52:59:82:f5:
         95:d0:a6:aa:33:dc:3f:5f:3e:8b:64:8a:63:7f:0d:23:ce:23:
         47:e4:18:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:18:02 2025 by rpki-client