Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/570c8a6f-8ddf-3844-8932-35e27f2b7544.roa
File:                     570c8a6f-8ddf-3844-8932-35e27f2b7544.roa (raw, json)
Hash identifier:          Nx1E4JA4oAFdf0dF91Abu9VSC2Ft8C5L6Remyu5ejzE=
Subject key identifier:   06:F5:A1:23:53:90:F1:98:27:CE:FA:BC:AA:7C:30:25:0D:D8:0A:71
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D9C5D48250AC6F993C980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/570c8a6f-8ddf-3844-8932-35e27f2b7544.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        2600:5c01:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:9c:5d:48:25:0a:c6:f9:93:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=c31b5b89-d3a0-4d66-b04f-7a3ed9e73d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cf:72:c6:22:e4:b0:57:66:ed:5d:f6:bb:b0:
                    5a:6b:28:40:9d:78:a3:b5:25:59:6b:6d:ab:e0:47:
                    2e:be:14:fc:cc:ae:93:84:b9:a8:c2:fa:cf:98:f2:
                    38:7c:f0:8b:f2:c9:7b:3c:95:41:3b:cc:bd:1e:f2:
                    46:6f:63:00:d2:d4:71:72:1c:16:84:b3:c1:08:98:
                    9e:2e:8d:81:bf:1b:dd:df:27:90:f4:30:76:be:af:
                    76:2b:ae:1a:4f:35:8c:a7:66:f4:96:81:8b:a1:de:
                    f1:d5:37:3d:36:3b:5b:62:77:a2:c5:50:35:6e:a1:
                    6c:80:2b:00:1d:10:e0:6c:d5:17:0d:86:3a:0e:da:
                    03:8a:0a:e8:25:c7:c1:a9:65:aa:49:bb:90:7f:ed:
                    ac:4d:8c:46:91:e2:b1:bd:b4:fc:70:03:60:0c:fa:
                    7a:1b:ce:45:e1:cb:05:14:af:95:31:2f:cb:e6:96:
                    e0:3c:d2:f5:7e:8b:d8:46:46:40:04:f3:dd:e3:0e:
                    62:1b:c7:ff:16:50:7d:a1:a0:04:d5:0f:4c:fc:97:
                    db:81:d0:e2:d0:0a:db:dd:b8:03:e4:bc:17:d7:7d:
                    87:05:cc:01:e1:80:42:8a:6b:78:9f:1e:82:eb:6b:
                    ab:6c:76:a9:2c:63:21:82:2e:64:97:f1:32:bd:2f:
                    b6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F5:A1:23:53:90:F1:98:27:CE:FA:BC:AA:7C:30:25:0D:D8:0A:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/570c8a6f-8ddf-3844-8932-35e27f2b7544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:5c01:f000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c8:a3:ff:5d:18:3c:c4:0b:78:ef:56:70:94:58:ef:1e:91:
         66:28:0d:ca:97:ff:f6:e5:52:7e:bc:24:40:74:5b:d0:4f:49:
         44:ca:d4:44:2f:3c:86:a9:10:fc:16:0f:90:5c:21:30:ac:6f:
         6a:38:73:d8:d0:56:70:49:fe:98:af:e6:31:eb:02:9e:96:7b:
         92:d9:4b:5e:08:3d:6e:40:39:9a:74:f4:c8:02:8d:69:42:ea:
         ea:a2:35:71:62:fb:c0:f1:37:2f:0e:bb:36:1e:28:91:76:98:
         b9:23:00:b9:4c:6d:6f:9c:f4:60:74:9e:a7:62:76:08:49:63:
         59:9a:73:d9:16:48:49:55:1a:f5:9c:8b:1b:b5:f9:1a:a1:d7:
         13:4e:94:cf:3d:02:82:d6:51:0f:18:35:40:aa:22:98:ea:ef:
         c3:61:4f:d0:d0:f1:29:c6:9b:cc:11:21:a2:f2:39:21:15:ce:
         8b:63:fc:2e:e2:ca:bc:98:b5:73:80:02:f7:2f:80:45:8f:40:
         6e:60:24:a5:cd:09:1c:ab:c7:d3:82:bc:a5:b4:d2:de:14:0b:
         e6:f7:37:7f:29:8d:4b:9d:b1:44:d8:e5:c9:de:6c:44:18:52:
         66:5a:c1:b0:6b:a6:c8:46:46:91:af:6b:9e:6d:72:e9:59:e9:
         d4:49:78:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:54:39 2025 by rpki-client