Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/f18637d4-a5a3-3cdc-88d5-6977851f78a2.roa
File:                     f18637d4-a5a3-3cdc-88d5-6977851f78a2.roa (raw, json)
Hash identifier:          e33vDPGJitB5ECFU7g8U2zNePF1clEku8HrorBEW+N0=
Subject key identifier:   26:03:E1:90:69:30:25:12:AF:FF:48:7C:19:8B:C5:2B:C5:5A:2D:08
Certificate issuer:       /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
Certificate serial:       010D0C9F4328584B5141BF4218610F2B80D4DAC0
Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/f18637d4-a5a3-3cdc-88d5-6977851f78a2.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     396026
IP address blocks:        2607:fc30:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:bf:42:18:61:0f:2b:80:d4:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=a77f9f6e-f0b1-4536-904f-531df80994cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:37:37:d8:8b:ae:b2:c7:7c:8c:4a:03:84:63:
                    7f:9d:91:77:57:7e:7c:88:91:50:3e:26:1e:23:87:
                    74:cc:4d:18:7f:88:7f:58:06:80:fb:b0:12:68:45:
                    0b:9f:08:4c:fe:e6:0c:4c:d5:7a:fc:61:04:75:8e:
                    53:68:2b:12:85:2a:e5:ee:2e:9c:36:89:ba:f1:a9:
                    de:a7:aa:76:9d:68:ec:e6:fb:55:e0:2b:25:e4:48:
                    e5:2e:1c:ae:72:b6:6b:6c:63:bf:26:fe:dc:e4:cd:
                    e8:3f:ce:71:a7:75:0b:a7:15:25:65:5f:e2:f6:29:
                    94:d3:97:bd:a5:0d:da:0b:51:7c:28:8d:ea:ea:da:
                    00:ed:b2:f8:31:da:bb:63:70:aa:f7:e7:5e:a5:07:
                    1b:56:21:1a:44:8d:8c:e1:9c:2a:2c:9d:f7:90:12:
                    8e:8a:06:77:42:d7:00:e6:a3:49:fe:1f:76:d4:ff:
                    70:1d:d9:ea:a9:18:6f:b5:44:46:9e:e6:c6:1e:e5:
                    3f:93:e8:68:14:da:55:7b:65:83:dc:6f:a3:b0:45:
                    47:86:1f:43:6b:0a:bd:0f:fe:c7:0d:b7:4c:41:5b:
                    95:2c:eb:3c:08:c2:cc:d7:e7:83:f5:88:a6:65:fb:
                    2a:4d:6a:fd:0e:34:45:8d:b2:13:2a:b9:35:fc:f0:
                    b3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:03:E1:90:69:30:25:12:AF:FF:48:7C:19:8B:C5:2B:C5:5A:2D:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/f18637d4-a5a3-3cdc-88d5-6977851f78a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl

            X509v3 Authority Key Identifier:
                keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc30:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:75:40:0d:0d:b8:73:5b:72:38:2e:c6:7d:30:88:1d:7c:70:
         22:0c:58:c3:fb:90:4b:be:dd:44:23:c8:b5:75:f9:7d:55:9c:
         b4:b6:e4:c7:a9:d8:a2:9e:47:b8:4d:5a:ff:03:84:6b:24:bc:
         95:a8:fb:84:06:83:96:96:d2:3c:10:2b:3c:5b:94:34:f7:16:
         41:1b:cf:93:fd:18:46:1a:07:f1:a8:98:1a:ff:02:63:98:c3:
         d0:89:c4:55:28:59:d7:3a:34:c3:e1:6f:9c:85:d1:92:41:f2:
         d5:ed:8e:48:d3:c2:c9:e8:e4:5e:aa:6d:16:09:9d:6f:53:73:
         13:23:35:af:14:d0:fe:e8:ae:3d:e2:ed:d4:d1:bd:2f:69:e3:
         0c:65:4f:9f:b9:a9:27:f1:2c:03:2e:47:b6:43:e0:f9:d0:bc:
         a6:27:d9:05:1d:e2:39:da:7a:09:85:8c:50:e3:5c:bd:4d:34:
         93:0e:19:97:30:6e:d0:c0:9b:85:cf:15:05:56:90:ee:ef:c9:
         67:ec:6e:8b:bb:6a:c4:8e:8e:69:19:37:e0:98:ab:ac:50:00:
         39:0c:81:59:7a:b1:8f:ba:01:6c:60:77:57:39:16:c0:5a:13:
         0d:5e:a5:54:34:28:e0:36:f9:d5:da:64:10:18:57:d4:2c:31:
         49:7a:a8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:30:12 2025 by rpki-client