Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/014e7cbd-d848-3af8-8211-5ac82c77859a.roa
File:                     014e7cbd-d848-3af8-8211-5ac82c77859a.roa (raw, json)
Hash identifier:          jG22sM21j/aq1uqMS4HEUWlLXPnLzWNkSWo0ehNhKAA=
Subject key identifier:   F8:98:43:5E:F0:3F:49:7D:2D:E3:77:19:F6:CB:63:33:43:3B:98:D1
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584B8BE22918D532E4AF5FD77E00
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/014e7cbd-d848-3af8-8211-5ac82c77859a.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     62563
IP address blocks:        2607:a140:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:29:18:d5:32:e4:af:5f:d7:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=fdf63af0-f5a5-4268-92bf-97d382329ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:cd:49:98:8a:e3:b3:ab:94:96:8a:57:90:
                    32:6b:13:56:a9:bb:21:dc:43:34:20:d6:f4:44:47:
                    c1:81:6c:0f:22:c1:06:f4:a8:00:67:e0:36:0a:d6:
                    21:ba:fa:19:2e:27:c6:90:fb:b1:7d:c3:ed:1f:49:
                    1b:64:b5:da:45:e4:f3:c4:a2:c3:59:c3:a1:18:37:
                    36:1d:ba:a1:9d:1b:54:79:1d:ad:4c:4f:9b:85:f5:
                    13:0e:2a:b0:41:9b:be:d8:c6:c8:7a:2b:c6:2b:a1:
                    4b:b7:18:9b:43:15:b9:d9:15:36:66:30:20:db:cb:
                    d0:10:99:e8:d5:6a:d6:77:09:da:64:7b:c3:e2:15:
                    a0:4e:66:5d:25:0f:c0:c7:73:d6:c5:bd:04:82:a6:
                    2e:ad:e1:a2:16:5a:2c:90:3c:33:41:4a:65:45:61:
                    13:f6:fd:b7:7f:46:96:65:9e:c4:f0:63:8d:8d:fd:
                    d3:59:f0:b4:39:e8:42:ca:be:bb:45:75:78:81:16:
                    fe:9f:fd:bb:1e:d9:90:78:2f:ad:3a:29:c2:b9:43:
                    8b:36:d3:21:b5:13:b3:3d:ff:d3:0a:57:5b:a2:03:
                    03:ba:af:df:a4:42:d3:01:7c:50:bc:e5:12:54:6c:
                    ba:8c:5e:e1:ed:17:a4:ac:72:99:be:1b:88:c2:2e:
                    09:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:98:43:5E:F0:3F:49:7D:2D:E3:77:19:F6:CB:63:33:43:3B:98:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/014e7cbd-d848-3af8-8211-5ac82c77859a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:af:4f:32:5e:02:9d:38:43:32:8c:94:aa:22:13:8f:8e:b7:
         9c:5d:9d:c4:25:80:ce:f4:20:28:60:38:98:c3:5b:d2:ab:c7:
         a0:f8:2f:d6:9d:7d:a1:6a:b5:e6:5e:24:e7:44:7e:44:c3:3f:
         ed:a0:db:c5:19:c6:6b:3a:69:5d:90:8d:b7:52:25:8c:45:31:
         1a:3f:d0:22:94:bb:4d:12:82:e4:cf:66:1c:6a:8f:8c:77:99:
         25:f7:f8:09:db:8d:45:35:11:26:23:3a:53:12:72:b1:66:cb:
         e9:eb:ce:ea:6b:51:62:f8:7e:aa:30:e5:e9:f4:48:4f:a1:3e:
         07:1f:4c:b7:92:bd:f4:65:96:72:c2:76:cd:14:58:11:ce:b9:
         a9:87:75:10:e7:c3:c6:ed:79:36:68:73:1b:f8:83:ee:22:90:
         0a:fc:f1:33:a5:04:f4:e4:4d:34:d4:c7:1e:fc:8a:99:60:69:
         cb:bc:d5:ab:0b:f7:8a:62:15:00:4c:42:0c:3c:8f:3a:b0:cd:
         0d:08:99:8f:d6:79:16:8c:9d:0a:4a:53:93:f6:9d:47:23:a3:
         8f:4c:c7:ae:69:66:18:b2:39:a8:37:b9:de:a8:21:89:f0:75:
         00:32:d9:db:a1:b3:69:09:a1:0f:01:ab:d5:1b:c8:8e:fd:cd:
         53:bb:c0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:17 2025 by rpki-client