Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/25fb142e-ccd0-3668-8fbd-c0120e93f29f.roa
File:                     25fb142e-ccd0-3668-8fbd-c0120e93f29f.roa (raw, json)
Hash identifier:          VC1G0Fgc8hTrixwRvM8y6NBAqTvUU/C7kTclUQpIH+g=
Subject key identifier:   E8:EF:11:57:79:88:9A:C6:48:8F:BA:4A:36:A9:CB:31:F1:7D:72:FA
Certificate issuer:       /CN=e102a5ad-786a-444b-bd0b-6bd116f20466
Certificate serial:       010D0C9F4328584B80B764979812D6D0D7413180
Authority key identifier: 98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/25fb142e-ccd0-3668-8fbd-c0120e93f29f.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     33680
IP address blocks:        2604:9d40:8000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:64:97:98:12:d6:d0:d7:41:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e102a5ad-786a-444b-bd0b-6bd116f20466
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=4ebb958e-133b-441f-9916-ebcaa6019ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:10:b3:99:b3:65:e6:a3:26:0e:31:2e:5f:
                    eb:e0:75:f6:cb:7c:26:19:87:cd:9f:04:05:c6:17:
                    a7:f2:95:e9:f0:85:15:34:9d:c1:86:02:5f:fe:79:
                    f7:59:56:7a:88:7d:8c:0c:bd:f5:5e:73:b4:0e:23:
                    f9:7b:8a:74:cd:4b:f9:7b:c6:ab:97:5c:6d:43:d2:
                    3a:f9:6b:3b:15:d0:85:e9:cc:0d:78:22:62:32:19:
                    84:35:c4:ab:b7:3f:6b:51:31:f0:73:00:53:82:6e:
                    d1:ff:51:8b:49:2a:de:0f:45:67:1b:7a:dc:74:e7:
                    96:9f:3c:83:b3:a7:b3:74:4d:04:ce:49:29:0a:d1:
                    78:bd:dd:57:65:e4:30:6b:cd:98:08:50:3d:1c:b5:
                    e2:27:1e:d0:22:7a:cc:7c:d0:89:ff:cf:2f:08:fa:
                    2f:2e:21:cd:15:95:22:1f:43:17:9c:16:ca:24:3c:
                    a0:8c:97:40:a1:24:cf:60:39:47:a7:1c:97:d5:8b:
                    3c:bc:5e:c2:7f:61:05:38:2e:ae:44:e0:4f:2b:b6:
                    80:e9:aa:3a:4d:0a:c0:f3:79:4d:2d:7d:04:03:cd:
                    d4:04:22:20:fc:cb:79:aa:e5:ee:68:27:06:e8:c5:
                    e9:35:aa:48:f5:ac:e8:17:82:fb:1b:20:ac:c4:36:
                    52:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EF:11:57:79:88:9A:C6:48:8F:BA:4A:36:A9:CB:31:F1:7D:72:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/25fb142e-ccd0-3668-8fbd-c0120e93f29f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466/e102a5ad-786a-444b-bd0b-6bd116f20466.crl

            X509v3 Authority Key Identifier:
                keyid:98:EB:AE:98:86:94:F9:9D:BA:B5:24:7B:4C:76:99:DD:4B:A2:B7:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e102a5ad-786a-444b-bd0b-6bd116f20466.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9d40:8000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:10:38:46:87:bd:99:46:aa:26:f8:a1:3b:7b:63:90:7e:7d:
         16:66:77:6d:fe:8e:10:a3:ba:4c:08:33:f6:b2:fe:31:ab:c6:
         40:f0:5e:95:f0:3b:6b:6c:40:25:ea:2d:e3:7e:b3:c0:d9:7c:
         fa:70:17:b1:58:98:90:ff:06:1e:48:92:26:5e:06:df:a2:9e:
         60:67:e9:9d:b9:86:09:90:ad:01:06:1c:5c:70:b8:4a:6c:e5:
         86:fa:a5:ec:71:14:6d:76:8d:69:ff:75:b7:84:c4:e0:f2:c2:
         73:73:e4:27:a3:07:6f:95:43:1d:45:3e:f8:3a:a9:85:bc:0e:
         73:60:32:7d:0d:91:fc:c1:28:0d:c8:62:84:f9:a8:3f:da:68:
         66:7b:92:44:76:f8:33:74:f2:cc:e7:24:6c:88:99:f4:00:db:
         1e:11:53:54:9d:42:ef:a6:06:94:60:f2:bc:6e:22:68:3d:3e:
         1c:df:42:95:27:d8:e8:f6:e4:6e:c3:68:97:55:08:cf:97:29:
         be:06:7a:63:a5:ae:9b:26:a0:70:36:66:b3:c2:0d:99:d3:aa:
         d7:7b:3d:46:c8:f3:ca:5f:21:39:48:e7:5b:ae:95:e8:af:fb:
         07:a9:b3:7c:53:3c:c2:99:27:4d:6d:3a:10:14:f6:60:c6:3d:
         4a:19:7c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:31:45 2025 by rpki-client