Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/9f244d98-340c-3899-9c56-98ca1bbcc830.roa
File:                     9f244d98-340c-3899-9c56-98ca1bbcc830.roa (raw, json)
Hash identifier:          X19KfFL0KR/2sRQTAFJs4vXZNPIfCYLlLTX7bQvJlFw=
Subject key identifier:   57:6B:52:08:D2:C4:0B:57:0F:F4:11:25:4D:DC:70:46:3F:42:D2:89
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584B63673DDF481ED32CE7C29C70
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/9f244d98-340c-3899-9c56-98ca1bbcc830.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     27539
IP address blocks:        2604:a900:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:3d:df:48:1e:d3:2c:e7:c2:9c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=1c5cee1a-427b-4163-8cb8-604fd2f82a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:57:7b:cb:cb:42:1e:8d:ff:a0:d6:16:5b:d2:
                    7f:c7:f3:cf:e6:e2:00:3d:e5:c3:e4:da:98:3c:ab:
                    a1:9b:c9:10:38:27:3e:24:11:6e:08:05:8d:11:eb:
                    35:50:e3:a6:74:f0:de:76:30:04:4e:a4:20:d1:71:
                    c9:37:d4:d0:99:3c:e6:b5:d4:fd:58:b9:30:dd:ec:
                    53:c0:0e:56:2f:ef:17:4e:a7:ab:c0:ae:52:ea:cb:
                    57:34:a5:a8:4b:29:f6:2b:80:7e:4f:c2:b2:6e:4c:
                    b8:e5:7e:f9:d5:3d:d9:29:76:4d:1e:5f:99:8a:61:
                    28:12:2a:0c:0d:38:92:b3:02:f6:01:7f:60:0b:6f:
                    ce:6b:43:4c:b3:41:d7:31:a3:26:ff:49:11:af:ad:
                    ac:d4:83:56:4c:a0:3d:29:e0:df:d5:05:92:cc:d2:
                    cb:74:33:20:a3:b7:69:2c:82:29:c8:2c:8c:37:24:
                    65:d9:20:d6:ff:f0:8c:e5:41:27:02:79:74:13:87:
                    04:35:99:9c:9a:5f:8b:31:41:cd:e4:6b:72:b4:8c:
                    24:60:8f:8c:62:7a:f1:60:1e:a1:55:55:12:85:dd:
                    3b:db:16:3b:e3:7c:34:5f:e2:a8:e4:79:47:d1:2e:
                    a8:44:23:77:70:30:ce:bf:9c:ac:65:2b:b9:2e:31:
                    60:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6B:52:08:D2:C4:0B:57:0F:F4:11:25:4D:DC:70:46:3F:42:D2:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/9f244d98-340c-3899-9c56-98ca1bbcc830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a900:8000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:af:f9:f1:33:c5:5b:07:c8:91:40:ca:a5:45:14:e6:ba:74:
         f2:0b:12:4a:bb:d0:1f:95:ab:41:87:c0:94:6e:51:1c:03:17:
         6e:67:3f:55:3b:b1:7a:2d:f7:0f:5a:ca:74:01:14:e3:2e:b3:
         2c:61:ce:4c:94:86:06:5a:9c:92:3c:9c:da:43:bb:6f:5f:02:
         18:2c:0f:f8:1a:0a:90:1a:d7:fb:b7:b1:61:4b:43:93:72:fe:
         0a:c6:ec:ff:35:51:6b:da:01:4f:3f:ff:f2:50:47:9f:a4:8b:
         a8:8f:5f:87:2c:c6:f6:0e:c3:b7:5a:c3:04:b6:ff:10:4a:0d:
         33:f6:61:c5:37:3b:68:01:fa:b6:ec:2f:f0:5d:39:35:6e:45:
         66:ee:43:87:44:5b:d9:98:44:37:ef:f6:36:8c:56:6e:f1:ab:
         d0:9e:06:23:d9:a6:18:cb:34:82:1b:9a:9f:9f:37:df:66:85:
         ad:dd:81:6f:1c:2c:5c:ff:5e:21:43:14:c7:ca:2e:1b:5a:86:
         5e:16:5a:ab:60:30:63:c5:0f:5a:8f:74:06:be:77:7b:bb:88:
         c0:ab:f0:af:9e:71:b0:33:cf:ec:21:0c:01:81:f9:90:26:0f:
         25:8c:6e:f9:08:ad:17:ad:4b:6d:b8:20:d6:4a:e3:42:43:7a:
         78:7b:74:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:38 2025 by rpki-client