Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b36f13ab-1a3d-3bd3-88a2-da2df78681ff.roa
File:                     b36f13ab-1a3d-3bd3-88a2-da2df78681ff.roa (raw, json)
Hash identifier:          bqdDZ+3X8X/YnS/XdwTCWltC+coe9gdRZ2A6M6viZf8=
Subject key identifier:   CD:21:11:B5:24:91:97:DC:99:2D:DC:E4:D8:45:A8:8B:F8:AD:7E:9B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5141B85E21EF795BB4AD2200
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b36f13ab-1a3d-3bd3-88a2-da2df78681ff.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     7861
IP address blocks:        2001:568:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:b8:5e:21:ef:79:5b:b4:ad:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=e40163dd-c9b0-4ca7-a557-5a9719f96c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8b:b8:69:34:d5:1c:54:9d:44:70:31:eb:b9:
                    c2:10:cc:f3:74:ec:6f:01:5e:94:2e:09:be:f5:4d:
                    50:6a:4c:b3:30:79:3a:60:61:bf:3c:0b:4b:a0:b1:
                    cf:48:4f:67:bb:60:b7:0b:17:70:54:65:49:59:85:
                    0d:61:48:e6:0e:26:3e:86:9b:33:b8:c6:c5:f9:05:
                    a7:a2:a1:7d:fa:fb:8e:c0:e7:75:b8:8b:79:bc:60:
                    96:37:49:8a:05:20:4e:78:80:e9:91:0d:69:43:dd:
                    b3:4e:c3:c0:b7:a8:48:26:3b:87:43:89:84:b4:eb:
                    1f:7e:7d:9b:f7:e6:3b:32:3f:3f:1a:ab:23:a2:bb:
                    16:e5:58:14:29:52:35:04:67:3d:68:7f:87:e1:62:
                    f3:ce:e5:21:6a:c2:f3:ff:c8:96:fb:ad:db:0d:e3:
                    8f:29:fb:f6:57:f2:d1:ff:d7:b6:16:d1:f5:36:f2:
                    3f:a6:8a:9b:3c:f1:ec:f3:e2:a6:b0:af:fc:d3:eb:
                    7e:3a:81:a2:b2:0a:6a:b2:87:1f:25:4a:65:01:11:
                    ef:39:63:5c:9d:32:1c:c3:4d:cb:0f:4a:9f:19:b2:
                    37:42:9b:74:d4:28:7a:54:b3:33:e6:8a:97:d2:b1:
                    12:5c:6a:39:bf:4e:07:dd:e2:5c:b4:c5:cc:35:e6:
                    66:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:21:11:B5:24:91:97:DC:99:2D:DC:E4:D8:45:A8:8B:F8:AD:7E:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b36f13ab-1a3d-3bd3-88a2-da2df78681ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:568:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:da:c4:b7:b0:b2:63:16:10:72:e2:2d:28:7f:bf:ad:13:04:
         4e:90:4c:48:c8:f2:19:b6:53:43:b9:8d:ef:fe:0d:6e:7e:07:
         56:80:db:99:23:a2:e9:a4:05:ae:7c:04:be:4b:cb:73:c9:47:
         fa:42:90:e1:60:52:11:5e:92:13:e6:18:7d:f0:c5:07:69:31:
         f0:7a:60:bc:07:9e:a3:c9:5d:d5:1c:e5:d0:4c:69:84:15:b3:
         63:78:c1:98:1c:4f:c5:f2:b2:32:64:83:2c:c8:d5:10:0b:39:
         0a:4b:41:b4:e8:c8:63:9d:30:09:21:4c:38:4e:eb:9c:8a:19:
         89:ff:c9:46:72:3c:e6:0a:dc:6c:3a:33:42:a4:8e:4c:d2:a0:
         f6:20:a3:8c:77:ff:a6:00:80:ec:86:cb:4b:9a:c5:d8:da:82:
         6b:54:48:51:51:56:22:6f:f9:f8:84:9c:f6:68:9c:2c:45:6e:
         a9:e4:6d:56:94:85:1e:e4:ee:79:1f:07:3e:54:16:9b:12:45:
         f8:af:50:ab:57:1d:d5:2c:79:86:b1:13:a7:d1:ff:82:11:ea:
         78:d9:22:e5:70:ab:49:b8:e2:89:32:ef:fd:f3:e8:99:6d:69:
         74:55:98:b9:4c:96:79:72:ee:ce:79:e5:7e:60:4a:f5:21:d0:
         30:98:9f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:18:34 2025 by rpki-client