Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a1b19be9-5622-3728-9036-4d8aced4be25.roa
File:                     a1b19be9-5622-3728-9036-4d8aced4be25.roa (raw, json)
Hash identifier:          SO85zjySJH0015dHA5Mi2RSOqv3SxO4aAB5qemQuXuk=
Subject key identifier:   4C:71:6D:8F:21:C4:11:78:CB:A5:19:75:59:49:AA:3F:B5:E4:33:33
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D150AD79A46466B28DE40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a1b19be9-5622-3728-9036-4d8aced4be25.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20001
IP address blocks:        2603:8001:cb00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:15:0a:d7:9a:46:46:6b:28:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=397c14a4-cf72-4c22-997a-25dce23aff92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:75:fa:83:dd:86:13:84:62:8c:88:b4:ad:1c:
                    58:86:4f:fb:86:ee:0e:42:99:7a:35:f3:65:e7:62:
                    47:df:55:95:29:0a:24:7a:bc:b6:72:eb:7e:a2:2b:
                    c2:04:df:46:20:d2:38:a0:ca:56:fa:9b:91:88:05:
                    96:ea:0c:8b:1b:8f:24:b2:b5:b9:30:0a:38:b2:e0:
                    70:f6:ca:44:4e:bf:e8:e7:76:24:b5:6c:d1:5e:d4:
                    01:3d:9f:3c:44:3d:b2:9f:5e:08:bd:60:fe:5a:a7:
                    8b:56:ad:58:64:a6:8a:10:f7:8b:27:91:d9:72:d4:
                    a3:04:78:7e:11:cc:98:91:3e:d7:8e:04:9b:16:da:
                    b8:12:3c:fe:02:8f:11:d2:03:4f:26:8d:d6:00:ae:
                    6c:29:f2:7b:9e:de:42:b5:b5:a4:f5:84:ef:99:81:
                    ba:6d:f1:0e:b3:e6:3a:40:e2:e9:21:3e:2a:09:72:
                    78:45:1d:9b:b5:6a:32:53:8c:96:49:ef:b7:f3:8a:
                    97:fc:b0:e0:ab:ae:fc:05:cb:f1:06:f9:7a:4c:d3:
                    3b:55:7f:f1:18:0a:d6:c2:32:68:4c:68:87:7a:45:
                    1c:fc:20:77:f2:39:e8:1c:d6:f4:0c:23:31:cc:4a:
                    3d:14:49:29:e7:27:65:97:16:ed:88:83:51:48:1c:
                    83:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:71:6D:8F:21:C4:11:78:CB:A5:19:75:59:49:AA:3F:B5:E4:33:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a1b19be9-5622-3728-9036-4d8aced4be25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:8001:cb00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:45:9b:f1:67:84:56:83:a4:89:dc:fc:35:45:47:f5:37:f0:
         d0:fd:7a:39:90:67:0a:52:a6:b4:a6:e2:0f:72:36:f2:c2:e9:
         09:31:49:4f:7b:f5:b0:a7:a4:ad:6f:5c:15:17:dc:c5:df:41:
         d9:a5:8f:13:56:04:c1:71:99:ec:5f:c7:83:bd:32:23:49:5d:
         44:16:07:1a:bb:72:23:e6:c3:d2:82:a5:9c:1d:b0:fe:d1:35:
         2d:fb:fb:3c:9a:5d:7c:48:a2:8c:ee:b6:05:72:64:68:17:b4:
         fd:45:3c:cf:9b:30:6f:69:b3:a4:68:d4:ad:a4:5a:c3:9d:1d:
         5a:dc:8f:51:c3:a8:6b:8f:04:91:19:9b:e4:b5:aa:0a:9e:68:
         04:69:a7:fd:0f:0c:13:46:84:f0:66:07:b3:ec:e9:28:69:3c:
         67:a5:99:8d:ca:5c:80:54:3e:b3:c5:50:4d:7f:43:14:d5:ef:
         5b:87:29:1d:e5:fa:be:47:75:91:bf:3a:b2:ab:8f:8f:5d:7b:
         10:8b:27:58:07:81:c9:bc:06:6f:5c:2d:30:cf:61:ff:e7:da:
         fa:82:7d:ca:21:2a:e8:7c:a7:df:a1:75:e3:c9:d0:4c:46:47:
         11:3e:5e:15:7e:c8:34:cc:82:d3:6d:6e:4f:45:d5:e0:f6:d9:
         3c:af:31:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:25:33 2025 by rpki-client