Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/465ff9f1-7da3-3fc9-991e-1274d379e541.roa
File:                     465ff9f1-7da3-3fc9-991e-1274d379e541.roa (raw, json)
Hash identifier:          NkurhbWbtJPQkwwg5tA6Nosrqu0LSROUib8+omSdao8=
Subject key identifier:   82:AF:98:25:F3:96:F6:2B:8A:0C:2A:CB:25:3E:A9:59:CB:5E:B7:71
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B7C8766D96192B67971B58A68
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/465ff9f1-7da3-3fc9-991e-1274d379e541.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     0
IP address blocks:        2620:74:2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:66:d9:61:92:b6:79:71:b5:8a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=bbbf6f86-96ac-4f2d-9760-afbd4c730b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1c:a5:a9:f6:61:64:30:9f:d6:aa:11:81:7e:
                    3d:23:05:3c:22:cf:e4:6a:25:83:f3:57:51:d2:0d:
                    8f:4f:61:2e:8e:2e:a6:8b:3d:e0:27:f9:84:77:1f:
                    7e:95:80:42:60:39:a2:cb:18:30:75:61:10:17:c0:
                    61:7f:9a:05:63:4f:85:b9:c0:f8:13:a4:6e:15:9b:
                    d5:21:1d:53:6e:21:5c:ec:45:90:88:38:0b:47:86:
                    c7:e3:77:ae:3a:d3:87:84:99:db:ca:66:8c:e8:e0:
                    40:6a:89:66:a1:9f:87:a3:d2:69:0b:3f:12:b4:78:
                    94:b7:b4:c6:93:20:72:78:4d:6b:2b:d7:72:c5:d3:
                    ef:b1:c8:42:9e:08:52:ac:53:19:f8:f4:ec:c4:9d:
                    ee:8c:76:32:10:af:73:2a:87:4b:79:44:a8:b1:1f:
                    3d:7e:bd:16:4c:20:2d:af:5f:1c:dc:25:7a:97:56:
                    9d:7b:2c:9e:f1:6e:a4:c7:53:a4:99:70:1d:3f:01:
                    c7:95:78:23:96:e6:36:21:1d:aa:c6:7f:66:07:47:
                    fc:f1:d4:e2:b6:5d:04:6b:88:5d:b7:e9:f4:02:db:
                    54:41:6e:c9:34:cf:ff:85:84:5b:0c:ed:a4:27:f2:
                    6a:86:a6:86:42:0e:84:3c:5f:6f:e0:43:e8:fe:29:
                    6e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AF:98:25:F3:96:F6:2B:8A:0C:2A:CB:25:3E:A9:59:CB:5E:B7:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/465ff9f1-7da3-3fc9-991e-1274d379e541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:94:45:8d:5c:82:30:6d:b3:a6:85:f5:68:32:2e:26:5c:b1:
         34:35:c8:19:86:08:e1:69:8a:02:5e:49:ee:a6:0c:76:38:08:
         0e:b8:7e:87:dc:04:8b:fc:9f:d5:ba:7c:f2:01:2f:ce:4c:fb:
         93:04:c5:b8:77:df:d9:b9:4f:0e:43:7f:9b:cd:dc:0c:18:95:
         2d:1c:ee:26:af:51:4a:d0:52:3b:9a:11:8c:69:22:db:aa:06:
         b7:e7:b9:7e:04:45:b9:a1:1d:45:51:21:99:34:3c:22:b7:b0:
         e9:97:14:24:4d:aa:48:86:67:bc:dc:14:21:39:6e:f7:a7:61:
         5f:59:68:02:cc:9c:78:e9:89:1c:c9:c5:d0:7a:18:3b:6c:de:
         8b:5c:8d:bd:00:fa:87:b2:dd:c1:69:64:08:4e:44:e8:de:8c:
         07:81:ae:12:d3:1a:f4:24:1c:22:7e:92:9a:bf:53:bb:6d:92:
         4e:d1:c4:d9:5e:01:e1:66:d2:24:4d:db:76:15:10:de:21:31:
         50:7c:78:d9:c5:d6:47:07:9b:9c:51:23:4b:92:be:02:a2:ce:
         4b:ce:e7:72:a1:a5:67:ad:f6:d8:1b:80:41:f9:ad:5a:bb:27:
         cf:f9:cc:35:75:13:a8:d3:3d:07:c0:83:fc:5b:c6:2d:49:a6:
         fa:88:e3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:20:03 2025 by rpki-client