Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa
File:                     4443ea3e-5515-393f-9b6c-71ed5816326b.roa (raw, json)
Hash identifier:          K/QGZ9Fdj3BIPxxWlXyDTPd2MKX3D80Sd7sZcKVH78c=
Subject key identifier:   0B:6C:87:61:3B:6D:FA:97:BC:44:23:D8:75:9A:4B:D3:C4:FD:CE:62
Certificate issuer:       /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
Certificate serial:       010D0C9F4328584B715C9EF446EA4953BF474640
Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     394449
IP address blocks:        2604:3dc0:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:9e:f4:46:ea:49:53:bf:47:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=2adf706c-3a8a-4048-a5ae-949819991c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:0d:f8:41:f7:1c:1c:63:db:24:3a:c7:c7:
                    3a:11:6c:1b:cb:66:1c:b7:0a:43:7e:66:a7:a0:33:
                    aa:a1:14:38:30:a3:69:e1:e4:18:82:8a:65:82:c6:
                    88:e3:50:af:80:b0:7b:4b:b7:d2:39:19:f5:82:33:
                    06:b8:f2:6d:7f:f4:7b:c9:a3:b6:00:c4:9a:bc:68:
                    77:44:f4:80:27:fd:c4:7d:fd:da:2f:13:28:28:15:
                    ef:b3:27:35:69:04:f7:20:35:6e:f2:20:a9:80:a9:
                    70:ba:98:2f:84:0f:4b:af:90:dc:e8:a0:e4:fc:67:
                    c4:b9:50:3b:33:9d:01:e1:52:94:9e:07:f0:87:29:
                    11:b2:b8:ec:fb:a5:16:eb:31:bc:48:d9:a6:ad:57:
                    e2:98:fc:d2:95:56:8b:a2:7c:8c:e8:d3:fe:02:a1:
                    a7:5e:3e:f2:ba:28:9a:51:0a:35:4e:d5:0c:3c:34:
                    6d:ee:6d:6b:5d:95:31:13:7d:2b:1e:57:29:15:90:
                    22:57:8c:b8:86:71:0e:fd:00:0e:86:da:54:53:b5:
                    76:33:60:33:85:1e:96:9e:6c:55:d6:10:3f:c9:27:
                    3c:95:43:7b:04:d9:ec:51:83:a6:4d:0d:60:18:92:
                    5a:d5:86:8a:cf:d4:6d:92:f7:52:bb:8b:c5:de:9b:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6C:87:61:3B:6D:FA:97:BC:44:23:D8:75:9A:4B:D3:C4:FD:CE:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4443ea3e-5515-393f-9b6c-71ed5816326b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl

            X509v3 Authority Key Identifier:
                keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3dc0:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:85:c7:95:40:ed:5e:c0:e1:86:99:49:9c:fb:fb:15:21:43:
         b3:58:27:6e:7a:9d:b5:11:84:4c:7e:6f:d8:ad:7b:9d:7c:db:
         40:64:e5:b5:77:f4:66:3a:e9:58:e7:d7:41:13:f4:73:2c:fd:
         2e:5b:7d:ee:f7:a7:41:9e:a3:2e:32:76:f4:fe:ac:09:13:e0:
         88:19:c3:43:49:df:58:4d:79:cb:c4:b2:51:6a:27:c0:ee:ef:
         06:56:d6:b3:a3:c7:a1:28:6d:56:d5:f3:a1:39:7e:e6:25:71:
         ee:8e:d1:20:08:00:3f:b4:5c:8a:62:53:9e:0c:88:2e:32:76:
         81:7e:40:96:0b:c8:6d:a9:58:eb:68:2a:e9:19:e0:d4:0e:6e:
         5e:fd:68:08:85:0c:c0:c0:ff:db:27:ec:c9:e5:e1:b4:4e:c1:
         75:bb:dd:fd:5c:1a:83:df:09:4a:e5:3d:36:d4:bf:f5:ab:90:
         18:fd:af:c2:9d:8e:e0:74:b2:1d:08:bb:bf:9f:87:d8:92:3b:
         41:78:d3:7e:ad:6b:92:64:41:58:62:a6:e6:eb:dc:23:a3:28:
         a7:09:e6:ec:a4:63:3f:49:75:6f:ad:8f:41:61:b8:cf:b0:5b:
         a7:af:3b:78:76:ba:f3:89:55:80:30:15:0b:d5:d7:21:82:e2:
         15:2c:f8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:39:18 2025 by rpki-client