Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4fe3f1fd-4c6b-3e30-b0a8-b2d6115f6dc4.roa
File:                     4fe3f1fd-4c6b-3e30-b0a8-b2d6115f6dc4.roa (raw, json)
Hash identifier:          22+ADNmEgsPfrjIAT86/FKMwukIgZletG6XXITq80Xk=
Subject key identifier:   50:8C:F3:DA:E8:39:24:C7:C4:10:DB:BF:5F:39:2C:08:B2:3C:BF:B1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D04F592627B5189CBEEE0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4fe3f1fd-4c6b-3e30-b0a8-b2d6115f6dc4.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11955
IP address blocks:        2606:a000:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:04:f5:92:62:7b:51:89:cb:ee:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=0e6dd881-42eb-4fc5-8534-b4c32656e961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a1:31:e2:e4:8c:49:00:89:68:30:63:d3:47:
                    7b:a6:25:ed:eb:73:57:30:3d:d1:d1:8f:3c:4d:18:
                    0b:f8:32:ba:79:b2:4d:4a:60:ce:5b:52:d3:1d:6a:
                    ba:65:f0:bd:0a:5d:94:36:1f:d7:13:bd:9c:a9:79:
                    8a:75:d3:5e:16:84:0b:6b:65:05:5c:b4:14:72:ea:
                    4c:8c:cd:09:da:2d:42:9a:ef:cb:22:13:ea:1e:48:
                    03:f0:0d:a4:12:f4:9d:0b:0a:01:79:ee:0d:44:bc:
                    76:2a:e7:83:b2:7e:e5:95:81:ea:96:d1:45:ba:30:
                    30:93:fc:39:eb:fe:c2:79:6d:85:f7:62:83:b4:c1:
                    0c:7d:1a:0c:ff:59:db:11:4e:6d:ec:54:80:0f:ad:
                    b6:0e:97:df:2b:d1:52:a0:89:cb:15:1b:06:5f:0b:
                    47:95:7c:37:17:29:37:df:32:8e:de:47:f4:4c:03:
                    40:fb:7a:96:2f:8f:3d:92:1e:8b:7a:da:49:42:df:
                    bc:4d:a3:bc:90:c4:54:b8:8f:e2:df:d6:a9:f5:92:
                    a3:73:82:dc:51:7d:af:7d:ea:60:2c:b2:3b:ab:84:
                    68:6c:04:85:20:ff:93:63:a9:81:df:11:43:aa:e1:
                    8a:3c:69:7d:e0:04:d6:7f:93:55:09:23:b1:43:40:
                    f5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8C:F3:DA:E8:39:24:C7:C4:10:DB:BF:5F:39:2C:08:B2:3C:BF:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4fe3f1fd-4c6b-3e30-b0a8-b2d6115f6dc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a000:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:2c:56:b1:84:1f:c2:c8:99:ad:15:ea:d8:e9:d9:57:d5:ee:
         5b:66:0a:d2:cf:ee:cf:86:0a:83:ed:4d:ab:99:32:81:f9:ad:
         c6:52:55:0a:ab:78:22:86:1b:0b:96:79:b5:8f:8f:c6:c3:a8:
         c2:23:64:e3:df:ca:97:1f:dd:41:ea:b5:4c:35:3c:0b:6e:54:
         fa:58:6c:56:63:84:d4:83:f3:9b:66:d3:0b:86:54:87:fd:16:
         0a:42:ef:66:7c:c1:14:5a:90:1d:89:10:59:30:b8:9a:49:1e:
         50:83:6f:9b:2a:48:27:26:a1:2f:4c:43:10:e8:7b:a0:0e:20:
         5f:1c:34:4e:de:14:d4:76:ab:ca:ea:de:1c:4f:63:c7:ce:74:
         cb:3e:88:b3:15:f0:65:11:ae:4b:8c:aa:ee:64:e1:13:3d:ba:
         0d:45:58:cf:f8:9a:7a:7d:2c:1c:be:6f:f5:99:a9:fb:78:28:
         4f:9d:02:a5:a1:dd:d3:22:3f:dd:6f:60:c8:f3:e0:a7:12:9b:
         9f:57:2b:f1:81:3e:59:cd:dc:91:32:6d:05:ec:35:05:d0:4e:
         7a:00:34:b5:e2:8d:9f:eb:ef:c2:17:c3:45:1f:16:d3:e1:e4:
         7b:34:7e:1f:9d:b4:97:ea:74:03:c8:b6:2f:85:5a:3e:27:59:
         bb:a4:4a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:11:12 2025 by rpki-client