Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/f4611a1e-65da-3be5-aa8b-d4d0a716371f.roa
File:                     f4611a1e-65da-3be5-aa8b-d4d0a716371f.roa (raw, json)
Hash identifier:          hY6FRFLZV3xPwCy8S2wPXxUXRNp3JhqL+r2uljKwhFQ=
Subject key identifier:   AF:1F:C8:35:06:47:78:AB:0D:9B:7F:A1:E4:7C:C5:F0:0B:0A:FB:F4
Certificate issuer:       /CN=816b4d34-3880-4b72-b786-365fbdec8ba0
Certificate serial:       010D0C9F4328584B5141BF22B0EA91BF35E3FF80
Authority key identifier: 9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/f4611a1e-65da-3be5-aa8b-d4d0a716371f.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     396026
IP address blocks:        2606:1b40:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:bf:22:b0:ea:91:bf:35:e3:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816b4d34-3880-4b72-b786-365fbdec8ba0
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=d3d0cd19-dd75-49bc-af7e-a7ee64c9a620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:4e:36:71:e2:2e:d8:d4:99:54:6d:92:3b:
                    ee:66:64:df:4f:31:55:8e:4a:2b:09:57:c4:4a:1c:
                    a9:20:39:7c:df:96:f2:8b:74:3f:0a:f6:55:a3:46:
                    88:f0:fa:54:c0:87:db:fd:79:d7:95:c2:54:85:9c:
                    2a:93:81:ce:2b:9e:59:23:78:19:fd:c5:4c:24:b2:
                    f0:ac:e2:fe:89:9d:98:96:b6:a0:b8:aa:71:90:62:
                    2f:20:ba:0a:4f:84:4e:e0:33:64:2f:a0:68:b7:13:
                    70:79:d2:b8:a9:c7:a8:09:6d:35:cd:b1:c3:dd:9f:
                    19:0b:d7:89:7c:eb:76:6a:e0:e5:83:d8:52:36:21:
                    5d:cf:06:3c:0d:d3:15:c7:81:49:dd:fc:a8:80:b5:
                    32:35:64:bb:43:e7:19:b8:0d:6b:cd:71:a0:c1:24:
                    0b:35:ec:62:fa:62:71:36:5a:c1:51:fc:98:90:ee:
                    09:c1:5f:47:57:1a:17:f3:6d:2a:67:30:20:87:74:
                    ff:7c:10:01:2c:3b:75:8b:3f:78:43:1b:db:a6:11:
                    7a:54:42:24:4a:04:07:e5:12:a3:57:db:47:1c:d3:
                    7d:34:9f:2c:84:dc:57:f6:0b:94:79:0a:15:9c:51:
                    22:95:5f:4e:44:1c:af:84:24:15:9b:28:90:10:d2:
                    14:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1F:C8:35:06:47:78:AB:0D:9B:7F:A1:E4:7C:C5:F0:0B:0A:FB:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/f4611a1e-65da-3be5-aa8b-d4d0a716371f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1b40:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:9e:ea:57:c7:fc:05:78:e7:6f:e9:c7:1b:b5:ef:1b:bb:e3:
         66:9f:5e:e1:b1:2d:17:07:a4:7e:6a:fc:93:c0:5e:52:14:ad:
         73:1b:9d:bb:e4:b4:7c:f8:6c:4f:3d:20:92:2a:1e:8b:3c:66:
         41:c3:23:89:f0:4e:82:3c:01:b7:2d:a5:5b:f5:1e:0c:d7:88:
         8e:20:e7:ef:38:23:94:bd:dc:48:a5:74:b4:77:82:81:c8:de:
         2e:d0:9c:64:fb:3a:00:58:7c:d3:4c:58:3e:e9:1d:6a:12:9f:
         43:ee:d8:14:98:88:06:4d:10:4d:20:84:8f:3d:3f:4d:54:ec:
         6d:ca:f7:2b:4c:e6:d7:99:96:c2:1b:9f:c7:ad:a8:9b:a5:44:
         de:3a:1b:ec:4f:56:15:f8:64:1d:ea:bc:a4:b8:39:ae:46:71:
         69:aa:39:7b:93:22:1c:da:f0:30:d7:71:65:29:76:34:90:6d:
         77:ed:0e:5c:90:d4:df:61:18:e5:01:18:f8:d6:69:e3:b0:5c:
         42:a7:71:92:e2:b9:f4:80:a1:ab:b7:f4:23:db:89:c4:4e:fb:
         20:74:ed:cf:19:16:44:66:fb:ef:f7:cc:d2:4e:22:ff:1c:83:
         d3:f6:62:5f:32:a7:fc:b2:1c:e9:b6:9c:04:b7:ed:00:30:04:
         40:96:b4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:38:06 2025 by rpki-client