Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/34f989d0-e7bf-31f8-907f-6a2bc2d1097e.roa
File:                     34f989d0-e7bf-31f8-907f-6a2bc2d1097e.roa (raw, json)
Hash identifier:          EtP7ChfrBXym94A/WMRauInQ6hYhr62cPuPhXAllB28=
Subject key identifier:   7C:F4:63:0A:08:40:ED:D1:CB:F9:B8:64:85:10:CB:76:E5:76:08:81
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584B1AD1A352D3D4F85ECD113C40
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/34f989d0-e7bf-31f8-907f-6a2bc2d1097e.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     36040
IP address blocks:        2620:11a:a000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:a3:52:d3:d4:f8:5e:cd:11:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=699dc2cb-7035-46ed-8667-d67063f12344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1a:7d:c6:ca:42:25:d0:77:61:9c:8c:18:8a:
                    07:e0:76:e4:e3:0a:54:66:e7:46:c4:05:71:bc:3f:
                    86:e2:12:d8:1e:59:dd:e0:c6:95:a7:bc:c7:49:4f:
                    d3:5a:29:45:d2:c7:69:ef:f6:ef:e9:c9:0f:ec:f0:
                    37:cc:55:3f:79:e8:e0:f1:f5:fb:9b:53:5f:fb:be:
                    cd:a2:90:75:c4:26:8e:80:41:fd:e2:3d:73:77:42:
                    30:20:e4:f4:ac:1e:03:d0:24:a6:3f:f2:49:67:b5:
                    e0:5c:d1:21:24:ca:2e:a5:33:14:17:7d:9d:20:97:
                    42:8c:ec:1c:f0:f2:9c:fa:5e:d1:6e:ec:85:c9:91:
                    c2:d1:8c:bf:36:b0:fa:58:4e:21:2d:d3:67:58:49:
                    de:ba:1b:37:2d:d0:f4:d2:f6:05:83:dd:6d:d8:07:
                    09:9d:e3:d4:c5:c2:89:7a:28:d0:57:7f:de:25:aa:
                    96:c7:86:58:6e:11:2d:2a:75:3f:7f:ea:f3:7a:b5:
                    49:64:ab:79:80:8c:ca:b0:fe:7e:00:b2:17:4d:50:
                    e7:f9:17:3e:3c:db:2b:2f:6f:8f:53:01:25:73:58:
                    d2:81:c0:a6:b0:ae:2d:8e:38:0c:a2:04:08:e0:82:
                    88:b8:bd:60:e6:89:2a:77:dd:5d:06:37:85:67:9c:
                    2f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F4:63:0A:08:40:ED:D1:CB:F9:B8:64:85:10:CB:76:E5:76:08:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/34f989d0-e7bf-31f8-907f-6a2bc2d1097e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:48:9b:f1:86:98:69:61:34:4e:aa:38:60:d9:f7:5b:79:3c:
         a2:bd:e8:c3:ae:da:c6:2c:d2:b4:16:08:d8:33:a7:49:5f:f9:
         5d:9a:d7:2e:df:e8:02:06:1c:1c:28:02:56:45:88:68:9f:17:
         23:37:ce:29:5a:87:fe:95:f4:03:c3:9e:3d:0b:38:2a:02:05:
         f7:8c:1e:0d:e8:2c:27:6c:83:1a:9b:86:52:32:b8:6b:77:00:
         b3:bc:ae:75:04:2e:5c:a6:e1:00:fc:00:ab:c2:c5:6c:e3:fc:
         69:82:aa:ec:ab:8d:cb:9f:a2:ac:58:2a:4d:ed:69:8d:fe:14:
         1a:f7:20:0e:25:a2:e2:08:90:a7:f4:0f:26:f1:6e:24:c5:7e:
         ec:b6:0a:05:df:6b:79:be:70:bf:e8:7e:57:9d:af:51:fd:37:
         0d:45:68:81:4d:de:99:3f:0e:d7:1e:53:38:d0:27:5a:b0:a5:
         51:54:d0:c3:e2:44:79:38:b7:a6:96:63:57:4a:93:d4:df:54:
         55:f8:ff:2e:32:9c:3f:80:af:e1:9b:73:cb:21:c1:bd:84:e6:
         36:40:8f:84:2e:dc:7e:62:bb:60:d3:c1:ed:5c:90:6a:12:1e:
         24:f5:0a:db:3a:c4:42:3c:94:06:f2:2c:b6:a3:65:c0:50:77:
         e1:4c:8e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:33:12 2025 by rpki-client