Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/13aa41a2-005a-35be-8760-54a1b0f5df39.roa
File:                     13aa41a2-005a-35be-8760-54a1b0f5df39.roa (raw, json)
Hash identifier:          i+7js3csYUdvIpGgWxY0VtVhHBkReh24yeZZLqNfiPg=
Subject key identifier:   9A:F0:BA:CE:B5:37:49:DE:40:0D:63:6A:54:BE:A2:0A:E2:6D:14:A7
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584B8BE2299C8D611610B7720940
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/13aa41a2-005a-35be-8760-54a1b0f5df39.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     63023
IP address blocks:        2607:a140:600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:29:9c:8d:61:16:10:b7:72:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=347e77a5-95ff-468a-b8c0-f54edf770c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9a:62:e4:e8:d6:a4:2b:93:a1:dd:7e:f8:5c:
                    3b:19:36:f5:ed:8b:ce:ee:6d:79:f6:3e:c0:1e:04:
                    f7:5b:73:aa:28:e1:38:9e:dc:ea:e7:56:b5:f0:7f:
                    4d:fa:72:36:88:64:92:60:cd:2f:2a:83:a1:38:10:
                    41:5d:d4:50:1b:80:ba:04:9f:e6:df:3c:bc:0e:bc:
                    95:04:1e:c1:62:a9:04:a3:88:65:07:01:c4:0f:ae:
                    60:81:af:ef:5b:26:5f:d4:0d:16:32:23:e3:1a:40:
                    39:7b:35:13:04:c3:0e:80:50:95:f3:6b:de:12:c5:
                    e6:23:23:b8:d5:6e:97:aa:aa:04:0f:5a:50:45:f7:
                    de:60:fd:e3:07:ab:1a:8b:41:e0:35:3e:50:7a:89:
                    eb:d6:4c:31:0e:81:c3:0e:8e:16:bd:7a:4c:78:96:
                    45:ff:a0:24:19:be:9f:5a:77:e4:c8:68:0f:1c:db:
                    dc:aa:f9:65:0c:ef:67:46:11:0d:16:8c:23:fc:b3:
                    50:ab:34:c8:31:8d:ea:97:2b:d2:7a:05:97:43:bf:
                    9b:67:30:b5:8f:3c:22:14:e3:1c:41:37:1b:20:5f:
                    70:be:a0:e3:8b:d4:2a:92:bc:7c:99:7d:5d:70:2e:
                    73:b4:9f:68:a9:0d:b3:90:7e:f0:70:cf:3d:d5:51:
                    8b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F0:BA:CE:B5:37:49:DE:40:0D:63:6A:54:BE:A2:0A:E2:6D:14:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/13aa41a2-005a-35be-8760-54a1b0f5df39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e7:ae:d4:c1:24:d1:06:b2:84:53:f7:8e:49:80:d4:36:b1:8b:
         08:fb:2a:4e:ca:57:bd:02:18:00:b1:73:d0:5a:80:84:8f:d1:
         cb:bf:83:96:3a:d5:bb:a2:32:3f:f4:29:0d:5f:d3:e3:7c:39:
         bb:f9:6e:8b:2c:a9:f8:69:6a:4b:c9:4f:fc:1e:6b:0e:63:04:
         a5:65:a7:d4:54:b7:90:ce:f8:b2:a0:b2:5d:3b:36:bd:c1:a4:
         36:d7:03:1d:8c:a2:96:95:ec:7a:ba:bc:f9:5c:6a:be:05:96:
         4a:b2:ea:08:7c:af:1c:e4:e8:85:df:e4:5c:23:43:8a:5b:49:
         e3:b2:a5:7d:69:84:bd:84:fa:aa:04:65:7b:37:0b:2b:06:dd:
         6c:24:2d:c0:34:67:26:68:4b:2b:90:d7:cd:3f:ae:e1:1f:6e:
         ff:e3:25:62:bb:ff:44:cd:df:45:8b:9d:eb:b9:5c:08:29:59:
         40:ca:c1:0d:e5:10:d9:63:ab:10:e5:9c:93:fd:ed:cf:16:fb:
         28:51:a0:4d:d5:7b:f1:18:3d:d4:7b:0f:c3:d7:66:05:08:69:
         85:a0:5b:d9:7e:6b:96:07:df:0e:a3:74:1f:24:b5:dd:b8:30:
         be:5b:42:f0:92:c5:73:78:8d:5f:8f:7d:5f:4c:c9:c9:56:37:
         92:23:6d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:32:21 2025 by rpki-client