Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/68772751-81f6-3fb2-a6e2-8589e977d52c.roa
File:                     68772751-81f6-3fb2-a6e2-8589e977d52c.roa (raw, json)
Hash identifier:          HB3eIqK5oFuzfo8MYbmBUzUhS+VjFzEaly7JVHEWFBg=
Subject key identifier:   D2:85:FF:BC:A9:22:95:0D:1B:61:98:24:BA:36:BD:43:C4:53:F0:01
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584B8EACEE8A9CD8C69FF50E4600
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/68772751-81f6-3fb2-a6e2-8589e977d52c.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     20253
IP address blocks:        2606:bc40:14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:ee:8a:9c:d8:c6:9f:f5:0e:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=24218120-554f-40ed-9244-92ab03105094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:48:ea:7f:e7:ab:97:ca:8d:49:b2:00:bd:86:
                    f5:ee:3b:1a:96:fb:77:bb:13:08:b7:4e:c4:ee:0d:
                    41:29:a3:1f:bf:d0:0b:7f:5a:0c:df:96:4b:6d:29:
                    55:e3:5c:46:07:e9:21:67:d1:92:67:48:57:ca:17:
                    6f:e0:01:2b:89:f5:81:13:d3:8a:a6:7f:4c:84:42:
                    cf:42:6a:df:65:85:9f:8d:a7:40:76:4e:52:fd:c7:
                    09:f1:10:a5:b5:21:6e:30:d0:e4:2f:55:65:c6:14:
                    ae:78:f2:44:8c:5c:a3:59:5d:04:8b:06:7b:29:55:
                    a5:62:70:32:97:07:31:05:6f:10:e8:19:ee:d2:55:
                    c1:ab:8e:fb:7a:8a:48:e0:67:94:85:e8:0f:b8:b1:
                    a3:8a:31:6e:dc:40:3b:26:81:dc:91:16:ca:16:3f:
                    d5:94:b0:d5:11:93:62:d9:f4:9c:9a:e0:8f:c6:b4:
                    cf:ef:1e:25:68:15:cb:d5:7c:8d:94:6b:6e:23:2f:
                    60:ac:90:4b:69:64:1b:c3:ce:15:b3:fb:c3:bd:c1:
                    7b:02:29:e8:13:a2:47:1c:d4:93:13:46:b8:f1:76:
                    b9:23:0a:a4:3f:57:6f:9e:e3:8f:24:b7:09:74:37:
                    22:c8:87:88:06:bb:3e:9f:43:99:52:53:ab:3c:62:
                    f0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:85:FF:BC:A9:22:95:0D:1B:61:98:24:BA:36:BD:43:C4:53:F0:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/68772751-81f6-3fb2-a6e2-8589e977d52c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:bc40:14::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:99:72:6c:12:ec:98:2e:e7:9e:29:68:91:15:a0:00:f0:ef:
         77:4e:c8:29:bc:00:6d:ce:ae:d9:37:92:5a:7f:62:f6:f6:e8:
         53:96:9b:12:da:01:9b:b4:0a:d0:f0:e7:6b:39:17:82:96:dd:
         3f:ab:01:11:2d:59:1a:19:76:91:cc:4a:1c:88:92:12:37:2c:
         8e:ba:bd:0b:9f:60:a4:12:41:48:50:82:53:64:44:80:37:52:
         ae:b8:ba:2e:fb:41:22:e5:70:3b:0c:c6:da:9d:d1:68:02:3e:
         1f:b0:1e:bc:fc:5d:19:7c:ec:7a:ed:97:3d:d3:bf:eb:99:11:
         87:52:9a:ab:18:06:88:07:a3:27:c5:de:22:ce:7a:9c:dc:d7:
         d4:61:54:d4:c7:4c:25:5c:fa:61:e0:ac:d4:37:84:59:e6:2b:
         67:a4:df:9e:c9:49:66:8e:44:8d:b3:0a:ba:e0:15:be:53:98:
         1f:b6:c9:65:f1:8b:97:30:11:9b:b8:80:3c:1b:70:8d:ca:cf:
         18:22:b0:5a:9b:1b:96:a3:9d:4c:48:6f:a2:a9:d4:43:85:c8:
         20:79:0c:c4:86:06:bc:99:28:83:ab:08:16:bf:80:82:be:d8:
         d9:68:30:1c:0d:e7:63:99:75:18:be:de:87:61:ce:7e:33:40:
         01:98:08:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:34:33 2025 by rpki-client