Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/0af64934-80c9-35d5-b6ce-25606aa12a02.roa
File:                     0af64934-80c9-35d5-b6ce-25606aa12a02.roa (raw, json)
Hash identifier:          ie7emfB63nDR08YUIYcR6kIsIVoLXr6CXxkdrMm6Psg=
Subject key identifier:   72:C3:B9:10:AA:23:04:F5:FD:8B:C4:D5:7B:AA:21:64:CF:75:22:0C
Certificate issuer:       /CN=816b4d34-3880-4b72-b786-365fbdec8ba0
Certificate serial:       010D0C9F4328584B5141BEE119558438D08E3200
Authority key identifier: 9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/0af64934-80c9-35d5-b6ce-25606aa12a02.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     19740
IP address blocks:        2606:1b40:900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:be:e1:19:55:84:38:d0:8e:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816b4d34-3880-4b72-b786-365fbdec8ba0
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=5e90486f-a223-475f-9da8-a86d6b501e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:71:8c:cc:a5:82:a8:04:93:7e:20:18:0d:1a:
                    1e:8e:8c:0e:7a:0e:44:e0:b7:42:d9:3e:cd:a3:48:
                    0d:cd:4e:89:04:0a:d4:6a:b5:91:35:fc:94:9c:62:
                    ac:0b:0a:a5:9a:28:93:54:45:8a:e8:24:61:e6:47:
                    dc:b1:ff:26:79:c8:ac:a4:9b:cc:ba:53:f3:50:1e:
                    ec:86:2f:6b:54:0d:47:6a:98:ff:2a:dc:06:79:1e:
                    d1:34:04:74:cd:50:2f:3c:54:f3:69:8b:96:8e:52:
                    1b:a5:e9:26:50:1c:be:55:87:40:5c:bb:64:69:7f:
                    83:91:f0:76:f2:20:6a:ed:d5:c0:17:15:7b:1e:63:
                    a8:e3:19:ae:b8:da:d8:57:ea:29:69:26:ab:99:eb:
                    ac:e9:79:30:a9:82:44:ae:80:80:cf:d9:1d:da:aa:
                    cb:9d:f8:01:73:9a:10:ae:6a:91:dd:05:e5:51:15:
                    ab:f3:df:0b:98:c3:4e:9d:7f:b8:cb:15:ad:f6:bc:
                    c0:8a:2c:4b:86:4f:eb:a1:ab:1a:2b:b1:9a:56:fa:
                    3e:e5:05:56:6e:ee:e6:fa:40:08:38:ac:78:22:b7:
                    04:06:10:0c:2c:cf:51:2f:01:d4:2d:c6:34:fa:0d:
                    ec:3c:35:6f:09:be:77:c1:44:6b:41:f6:5b:ba:de:
                    09:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C3:B9:10:AA:23:04:F5:FD:8B:C4:D5:7B:AA:21:64:CF:75:22:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/0af64934-80c9-35d5-b6ce-25606aa12a02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1b40:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e4:c6:f7:f6:09:34:6c:90:5c:01:f0:5a:18:68:9f:59:0b:
         5e:82:55:e2:8e:fa:cd:53:61:36:68:11:ad:a1:b8:66:9b:69:
         4b:45:6d:7e:a4:54:14:a1:08:ff:63:bb:21:87:c2:46:f2:18:
         65:58:d8:e3:64:d1:44:e4:33:39:0c:39:95:80:ba:d3:89:54:
         ba:f1:91:ed:a5:b0:ab:c3:07:fb:1a:1b:ff:b6:5f:8a:79:03:
         4d:16:82:16:29:04:c5:c8:e1:72:44:37:c8:37:1b:fc:f7:12:
         b4:e8:d0:ee:b2:da:ba:c3:0b:d4:66:9c:83:20:a5:96:cf:c8:
         71:8c:4d:5e:c8:1d:61:ed:41:bb:92:a7:c9:6b:1f:c4:63:d2:
         7e:eb:a6:15:7a:6b:f4:40:29:ad:ac:ef:36:da:01:a9:0f:fb:
         3e:07:4e:04:2b:77:f0:be:60:5f:c6:9a:7f:27:95:04:a4:8e:
         65:76:3a:7f:5a:48:11:e9:60:24:48:68:bb:de:df:9a:6e:bb:
         78:3a:69:1e:30:6d:bf:75:08:20:11:42:ca:ca:fe:e4:c5:3e:
         7e:6b:66:c5:07:d2:09:2b:08:cd:f3:67:8c:fb:fd:a1:b0:09:
         33:38:1f:df:33:28:e7:24:d9:68:a0:d3:dd:fd:f9:e6:0f:2a:
         51:e8:67:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:40:35 2025 by rpki-client