Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/905b2441-7479-30ff-970e-b1f710dbcbbc.roa
File:                     905b2441-7479-30ff-970e-b1f710dbcbbc.roa (raw, json)
Hash identifier:          3yT2o0so87sWBNQt+Y32Pz4Kv24apwVr62cIKqmofsc=
Subject key identifier:   BC:F7:13:26:47:E6:4E:87:D9:B7:54:B8:86:69:C0:2D:CA:5C:EB:69
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B52A738E02D7A1A4AB97ACF40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/905b2441-7479-30ff-970e-b1f710dbcbbc.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     852
IP address blocks:        2001:569:6fe0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:38:e0:2d:7a:1a:4a:b9:7a:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=ee58bee4-97a6-4b05-b209-b171d8995241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:9c:1b:86:f7:d0:c2:ba:22:ff:46:da:6b:
                    f4:b4:56:d0:0f:f4:82:ae:f6:ba:d2:21:4a:21:da:
                    15:b7:43:97:1e:27:e7:aa:5c:1e:12:af:af:05:fb:
                    62:a5:24:c7:02:b0:e0:2f:71:59:b7:03:f6:e4:6c:
                    43:d6:0f:92:65:e4:22:1e:89:4b:62:a0:dd:c4:6b:
                    5f:ee:78:d1:b7:3b:06:a0:80:8a:7d:6f:6d:03:47:
                    29:5d:1c:59:cd:a0:40:f6:74:23:c5:d3:76:2e:ca:
                    73:8a:df:95:2c:3c:15:b7:7f:f9:b0:08:21:5b:eb:
                    83:02:92:3e:9b:f6:9a:86:9f:d5:5b:f3:ed:e8:e3:
                    0a:d1:2a:1e:7b:32:18:30:d6:83:73:68:ab:2c:2f:
                    fe:46:68:c6:4d:55:09:70:85:e4:61:cf:41:ee:f6:
                    d5:86:c7:31:f5:06:1b:12:ae:a9:c6:26:6b:29:b6:
                    02:18:1a:88:75:dd:0a:af:63:55:69:26:11:2e:95:
                    f2:7c:cc:74:3c:63:4a:18:ca:99:66:c9:57:91:f0:
                    af:c7:16:a9:d2:30:af:05:f5:49:53:4a:78:31:f9:
                    ca:6e:17:84:60:88:78:2f:10:59:09:27:d9:97:91:
                    e3:58:c2:bf:af:f6:aa:8f:3a:4e:c5:51:49:79:8c:
                    ab:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F7:13:26:47:E6:4E:87:D9:B7:54:B8:86:69:C0:2D:CA:5C:EB:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/905b2441-7479-30ff-970e-b1f710dbcbbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:569:6fe0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:1f:9b:9f:d5:17:00:af:92:c8:39:7a:17:03:18:50:1f:e9:
         54:6a:0a:49:01:ee:3d:4d:4f:65:08:eb:ba:b2:d3:fb:75:34:
         26:16:3e:a5:82:ca:82:9b:da:6d:cf:c1:7e:06:56:cb:b7:49:
         74:d0:c3:4e:ca:7d:67:b1:21:35:33:83:52:2a:a0:ab:b4:bf:
         ae:24:63:3c:c9:9c:41:99:db:6a:a7:c9:81:3a:4b:ea:c1:7a:
         1c:95:6e:a5:f0:18:b9:72:c4:a2:e0:e3:c4:b7:9e:9a:5e:85:
         ca:f9:30:8e:17:20:7c:8e:59:06:69:c8:63:ca:16:60:00:a1:
         20:65:5c:f7:b5:b0:4a:50:69:5c:b4:85:e1:87:b1:f9:a9:57:
         dd:ac:e7:da:e4:ad:e1:8a:db:dc:f2:a2:aa:87:6f:51:c0:79:
         2c:92:da:52:5e:48:f0:c5:53:90:ae:47:73:5c:07:37:85:65:
         71:58:d0:5d:d5:d0:95:d3:66:c3:43:01:6e:8d:08:8b:42:bc:
         c1:eb:9e:bd:56:0d:39:b0:b2:25:61:f3:00:d3:62:db:65:8b:
         f7:1e:a4:25:b9:f7:a2:74:5a:e6:58:18:f9:0c:25:9c:23:cb:
         e9:bd:1b:1b:01:c2:58:e7:b6:2f:e8:05:e8:ca:ce:66:12:b2:
         f8:b6:dd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:40:37 2025 by rpki-client