Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/67704cd4-0665-3af9-af56-f8f882377485.roa
File:                     67704cd4-0665-3af9-af56-f8f882377485.roa (raw, json)
Hash identifier:          Law5S40fXh1FbtJ8guAddVNaIsNeKBc1S/Nbcx1EQgc=
Subject key identifier:   04:84:A7:76:7B:CD:9E:D1:C0:B8:C8:14:2D:68:58:24:B3:01:C8:12
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584B92DCDDD1AEAD9176F9254E40
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/67704cd4-0665-3af9-af56-f8f882377485.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     398549
IP address blocks:        2605:dd40:8220::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:dd:d1:ae:ad:91:76:f9:25:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=ee9e458b-456b-4c0c-a1fd-a76859552ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e5:14:61:e5:83:85:1e:5c:4f:b8:a5:aa:72:
                    31:0b:04:0d:b1:fe:51:eb:ff:6e:56:45:17:be:55:
                    42:44:39:db:a3:2b:7e:3d:a3:ec:5f:dc:e4:ff:21:
                    c5:e8:83:bc:86:f0:fc:5d:d9:0f:60:f8:ab:2f:1a:
                    4a:34:89:bc:93:f5:65:f6:d5:f3:bf:5a:f2:94:6e:
                    45:9e:be:ce:04:c9:48:c1:ba:a5:0c:1b:db:1c:f7:
                    97:89:59:98:e2:fd:58:32:c7:22:ef:3c:7e:e0:6d:
                    65:10:20:99:cc:25:ea:8f:4b:2c:9c:9c:4f:41:47:
                    ba:40:c5:8a:b0:8e:4c:0f:c1:b1:a8:95:15:9d:f8:
                    12:b6:96:61:ab:b1:d3:fa:bb:a3:59:7a:b2:20:7c:
                    32:3b:23:60:b7:87:a7:c7:cc:d8:67:4b:c0:36:c9:
                    21:76:af:e9:ed:a0:25:21:59:ef:8a:2d:ae:4d:4e:
                    3c:71:ad:ac:b6:78:69:a3:d5:2d:07:e7:18:77:57:
                    81:98:c1:7e:ea:2e:ae:48:3a:f3:1f:2b:7a:37:2f:
                    d0:04:e7:bf:04:4d:85:0c:6a:39:c7:53:e5:f4:f9:
                    a0:ff:4c:10:56:df:82:25:b3:de:11:83:80:70:fb:
                    85:0b:ba:77:74:27:d8:80:90:99:48:90:1f:0a:7c:
                    48:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:84:A7:76:7B:CD:9E:D1:C0:B8:C8:14:2D:68:58:24:B3:01:C8:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/67704cd4-0665-3af9-af56-f8f882377485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8220::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:3e:9d:3e:e7:be:2a:28:cd:0e:48:dc:21:7e:58:7b:f9:e1:
         d6:a0:d8:94:47:ae:97:df:94:fa:a8:d7:5d:75:40:6a:9d:d4:
         24:91:7b:66:4d:c7:4b:9f:7f:83:0a:05:10:a0:2a:18:d8:b9:
         bc:bf:a3:68:c6:3c:6e:a9:f2:68:00:a1:5f:98:8a:1b:9e:ec:
         15:4e:17:7f:96:3d:0e:a9:0e:b9:75:a9:4c:d4:d4:30:a1:a7:
         20:71:6c:57:70:29:b3:79:b9:e7:74:76:b3:8b:e5:e0:59:ff:
         81:70:2f:34:23:71:6c:77:a8:66:2a:46:9f:68:24:5d:7b:4d:
         bd:fa:ad:1b:fd:a6:b2:23:01:82:22:03:e2:48:02:67:f8:98:
         18:54:d2:fb:7b:91:e7:37:b3:88:93:6f:ab:73:86:0a:79:36:
         73:54:15:01:14:1c:58:12:ef:a3:ac:8a:99:7e:86:7f:92:30:
         14:50:85:0c:04:c7:73:ec:69:6f:89:8e:04:e7:b0:57:b8:f3:
         c1:54:75:ce:1f:79:df:99:4f:2a:70:04:fb:74:14:f6:9e:1f:
         a9:25:46:83:16:bf:e3:d4:a7:84:4a:cb:17:9a:ec:41:cc:e5:
         c9:c6:ed:68:fe:da:00:33:f2:7e:59:e2:f7:65:61:5e:9b:cd:
         f6:4e:dc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:35:43 2025 by rpki-client