Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1845dc4d-6e86-3608-a356-eb8667f2fe37.roa
File:                     1845dc4d-6e86-3608-a356-eb8667f2fe37.roa (raw, json)
Hash identifier:          jTt7bnbKrxcl/Ofn7uHUIz89+ZxEZQMq9hmGvm8AHK8=
Subject key identifier:   18:29:AA:C4:C4:A7:61:92:7C:26:55:89:8E:CB:75:55:B9:92:51:46
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B52A73B3DB31DE284EC4552C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1845dc4d-6e86-3608-a356-eb8667f2fe37.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     852
IP address blocks:        2001:56b:9f10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:3b:3d:b3:1d:e2:84:ec:45:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=9625c0d9-5f86-4f03-9ac9-67488504f65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6c:05:eb:a8:bf:b1:d6:c5:76:32:d8:02:38:
                    2c:06:c2:04:aa:b8:ec:07:3c:bd:f8:45:a2:75:be:
                    28:6e:4e:70:bf:eb:9d:79:85:02:55:75:0d:db:1c:
                    76:28:a9:53:51:4b:71:a2:ba:50:7c:62:eb:df:49:
                    9e:95:40:9f:e1:b5:b2:b7:33:b6:e4:58:a3:29:f9:
                    bc:66:5f:93:3f:62:8e:8b:b7:14:47:a1:cf:79:4a:
                    94:69:7e:34:80:3f:fa:25:7a:e8:84:b9:d3:e3:11:
                    96:76:32:ab:03:c2:17:2d:1e:98:ac:63:c0:24:f2:
                    90:5c:37:ee:4b:e9:01:c0:0c:d2:e6:07:e1:be:ab:
                    3e:a5:34:58:46:e1:f3:59:e5:5b:ad:d1:a5:ec:f4:
                    ba:a3:85:1f:7a:0a:54:fa:60:b7:9d:c7:b5:04:bb:
                    4f:02:a6:f3:fe:af:1c:51:56:76:19:d1:4d:4b:cf:
                    90:78:07:9f:1e:8d:ea:ef:87:c8:f3:c9:d0:c4:34:
                    2c:8a:5f:47:f5:73:51:87:b1:b3:0d:a3:1b:5c:28:
                    7e:75:78:e3:8a:57:22:e4:1c:71:d9:6a:e8:0c:80:
                    eb:e9:d2:3b:0c:a0:1d:04:d4:d4:1f:33:7d:c1:3d:
                    24:3b:01:2a:4a:40:6c:26:26:d4:f7:a2:3f:89:64:
                    d5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:29:AA:C4:C4:A7:61:92:7C:26:55:89:8E:CB:75:55:B9:92:51:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1845dc4d-6e86-3608-a356-eb8667f2fe37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:9f10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f5:55:6e:0c:28:a0:96:3a:66:82:8f:58:be:bc:84:58:3a:da:
         df:79:fb:9c:60:2f:3d:88:17:f1:0b:62:f4:3c:0e:78:23:07:
         06:3f:29:30:25:12:97:42:e3:05:a2:ad:ab:69:e9:53:4d:73:
         c3:ee:17:0a:c9:18:5b:0e:af:c7:ad:68:60:5c:93:2f:76:2d:
         33:39:4d:6a:93:a2:05:01:e9:0b:3e:bb:86:93:d1:9f:bf:23:
         43:91:d5:89:77:b0:59:75:1a:84:d0:71:db:f6:c8:d4:c3:aa:
         8c:7a:2c:9e:72:ab:b4:8a:73:93:54:9a:a8:68:20:f8:1e:2f:
         42:05:24:71:2b:4a:9d:bf:46:86:45:3c:7b:f7:5c:9d:c6:16:
         e6:9f:fe:bf:40:1c:3d:e4:d0:0b:5a:f0:cc:20:dd:a7:ee:7e:
         99:b9:0c:95:e1:f6:f8:6c:73:b7:9a:fe:47:1b:8f:cc:1e:7f:
         5e:35:3f:75:f4:f9:24:3f:27:37:43:44:f7:6c:bc:2e:13:c5:
         a4:eb:67:85:c6:36:63:e4:3a:b6:e0:dc:7a:1c:0b:58:44:6f:
         9e:02:3b:2f:21:98:a8:7d:80:e9:14:a5:44:96:c2:28:db:79:
         09:f9:57:92:e0:dd:da:14:29:48:a4:1a:4d:36:81:57:d7:34:
         6e:8d:73:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:35:32 2025 by rpki-client