Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/c2c9e111-ba24-3c73-b05a-7cc89e85c5ee.roa
File:                     c2c9e111-ba24-3c73-b05a-7cc89e85c5ee.roa (raw, json)
Hash identifier:          0uLGg4ehan0O7hPvSjCcx8uoH021yvaGTJhl+4geKqw=
Subject key identifier:   33:42:B1:5C:35:CA:E6:24:18:CA:36:A6:AA:DA:73:58:5C:FA:C3:5B
Certificate issuer:       /CN=302111be-b954-4c5e-ac9b-4f85c3c11fe2
Certificate serial:       010D0C9F4328584B64CD75FCC9429D04AE410D80
Authority key identifier: C8:52:80:DE:48:F1:3F:44:A9:6E:56:69:6B:13:6B:04:12:53:9A:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/c2c9e111-ba24-3c73-b05a-7cc89e85c5ee.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396982
IP address blocks:        2606:73c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:75:fc:c9:42:9d:04:ae:41:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=302111be-b954-4c5e-ac9b-4f85c3c11fe2
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=acc6131f-35cf-43dd-ae40-a518a8c0167a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:00:1b:bc:f5:31:b5:34:c5:63:1e:95:31:95:
                    54:1c:bd:85:20:b1:85:c9:81:15:42:23:49:cf:33:
                    74:af:5c:0f:cf:38:d0:1a:d8:b6:0c:55:82:1b:af:
                    8e:a9:51:ef:32:f9:ea:f9:f7:41:c2:9e:50:a6:21:
                    90:8d:e3:de:35:3b:ca:ae:1a:46:0b:2c:f5:c6:aa:
                    02:6b:01:14:e0:48:1c:f7:e7:04:43:d9:1b:14:df:
                    d9:dc:ec:d8:5f:1f:3c:a8:60:b3:6f:ce:b2:1e:dc:
                    a4:c1:f5:48:5a:a6:e9:b6:1d:00:2b:31:fa:d7:03:
                    35:e1:96:fa:87:8d:ff:53:a7:81:06:d9:8c:06:e2:
                    9a:fe:77:cd:9c:a4:3a:9b:05:04:2c:c6:eb:c6:f4:
                    a8:6c:06:90:82:55:dd:77:00:89:89:9d:fb:b5:25:
                    64:ec:02:7e:e6:0f:04:28:dd:89:ca:de:71:03:60:
                    b4:fc:32:b9:a1:64:8c:66:03:11:8e:fa:ec:d9:3f:
                    f5:f2:e8:ef:95:3c:fa:25:9a:f3:88:85:dc:2c:25:
                    2a:66:be:f8:e6:8c:13:0d:36:67:72:d4:70:73:70:
                    3f:2c:8c:3b:47:eb:44:cc:5c:b1:ff:ff:b0:08:2a:
                    08:8f:0f:94:a2:80:1b:d4:04:ed:6f:8f:b0:53:77:
                    51:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:42:B1:5C:35:CA:E6:24:18:CA:36:A6:AA:DA:73:58:5C:FA:C3:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/c2c9e111-ba24-3c73-b05a-7cc89e85c5ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2/302111be-b954-4c5e-ac9b-4f85c3c11fe2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:52:80:DE:48:F1:3F:44:A9:6E:56:69:6B:13:6B:04:12:53:9A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/302111be-b954-4c5e-ac9b-4f85c3c11fe2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:73c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:77:64:8b:17:6f:11:6b:a5:18:e0:81:1e:2d:b1:82:8d:30:
         12:03:99:6e:b8:8a:97:92:59:ed:31:6d:a1:59:70:f1:1a:4c:
         ba:7a:96:ec:6d:f3:1f:db:e4:ce:01:b5:67:46:35:e0:de:92:
         07:43:a3:e1:51:4d:85:ef:e8:5a:96:5d:d1:7f:7a:5e:53:00:
         cc:3a:8d:4c:9f:e6:ae:0a:c3:91:36:d3:d5:07:83:43:11:e4:
         fe:47:f2:53:67:64:53:f3:13:bb:27:4d:2b:d1:8e:e4:02:d9:
         d4:b7:f1:27:06:b4:b7:8d:fc:e7:e6:36:dc:eb:52:95:60:b5:
         e4:0f:30:f1:fb:4c:fd:cc:da:ad:f0:8c:99:fb:90:71:ab:b2:
         3e:56:9c:b8:b9:ec:86:9e:94:8b:2d:60:18:9a:be:04:3c:5f:
         f2:ac:ef:2f:e0:2d:54:ea:4d:5b:ca:4a:5f:1f:fd:43:38:79:
         78:2c:80:6b:8f:45:15:9b:f8:41:e7:cf:9c:04:2d:d2:ac:e4:
         15:20:81:4c:15:09:22:26:e6:95:c4:a7:ca:c3:47:48:97:47:
         cf:cc:2d:97:28:2a:95:f2:7d:f3:73:04:8e:97:19:2e:c9:46:
         96:76:b6:ea:34:bc:cd:0a:59:fa:aa:6b:31:e2:8c:81:9a:5d:
         41:50:fa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:09:40 2025 by rpki-client