Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/cfcf8d07-5d63-3a11-ad21-ec80a951460e.roa
File:                     cfcf8d07-5d63-3a11-ad21-ec80a951460e.roa (raw, json)
Hash identifier:          f17z74kiQ32TKNrFCBwVzemgVjKRh/W8xeMUmMB33ww=
Subject key identifier:   55:83:C3:39:7E:C4:F6:DD:79:E2:C7:5B:55:46:50:0B:D2:5B:F1:DA
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F4328584B821CD1A9BBDB8E3929295280
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/cfcf8d07-5d63-3a11-ad21-ec80a951460e.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     22418
IP address blocks:        2604:eb80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:d1:a9:bb:db:8e:39:29:29:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=fd66613c-267f-45a1-9bdf-06bd9285f717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:59:c6:d7:47:c5:ec:ac:fd:88:9e:c7:bb:c3:
                    98:6b:30:34:75:bc:2e:95:b5:2a:10:a1:54:d1:74:
                    73:60:3d:99:e0:8a:14:21:4d:2c:1d:17:8b:d6:25:
                    e5:8c:8f:58:fb:87:6b:07:f1:8b:d9:84:9f:cc:5e:
                    73:9e:8e:00:45:c6:69:ae:44:ff:e4:90:29:88:9b:
                    ee:94:24:b7:ce:00:1a:28:a8:3a:d2:3c:85:3a:f8:
                    eb:be:09:e9:d1:05:91:83:1a:96:e2:d6:1a:ab:33:
                    bf:d7:9f:8c:e9:18:64:c9:af:aa:9e:7f:a7:23:fa:
                    cd:cf:38:68:42:7d:b3:81:08:8c:0d:d6:de:5a:c2:
                    52:41:f3:cb:09:7a:7b:62:ad:e1:8a:96:39:ed:5d:
                    32:8b:15:c8:b8:a5:90:54:10:06:3a:f4:b9:d2:5d:
                    63:88:3f:0c:65:32:4c:65:35:58:4f:97:a4:c6:b9:
                    85:93:2a:ff:77:5f:e8:d4:df:d7:aa:6e:d1:05:86:
                    c2:21:ca:15:ec:ad:ce:2f:fe:39:f4:15:7c:8f:d6:
                    50:8a:b5:85:4d:9f:4d:45:3c:a6:85:4f:56:54:2e:
                    50:b2:d9:89:ea:a1:cf:33:a0:c6:7a:08:43:09:5f:
                    66:92:2c:93:bf:45:bc:aa:00:c8:0e:0d:58:4b:f4:
                    79:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:83:C3:39:7E:C4:F6:DD:79:E2:C7:5B:55:46:50:0B:D2:5B:F1:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/cfcf8d07-5d63-3a11-ad21-ec80a951460e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:eb80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:5a:c0:0e:f7:2a:0a:b7:ac:27:6a:86:51:0a:f8:df:80:39:
         f5:04:42:85:f3:11:28:81:a5:b0:1a:7a:09:35:c8:28:13:28:
         06:a7:c4:9f:50:57:29:23:17:10:39:0d:38:7e:b5:23:d6:57:
         b8:ba:14:05:16:43:2b:89:fd:40:08:c1:80:03:82:d4:f2:af:
         76:21:74:1d:cf:73:e1:0e:de:d1:1e:d0:11:28:24:df:d5:5b:
         01:a8:ab:aa:51:f2:fe:0e:ce:a8:c3:68:73:ec:c9:c1:35:9a:
         02:81:3d:4c:30:cc:27:a3:0f:30:27:0e:a3:3f:85:c6:d8:5d:
         aa:fc:d0:9d:c9:b4:ad:9a:c5:27:97:74:59:d8:48:54:b2:a7:
         6d:9c:f6:d3:c9:b1:fc:31:94:b8:05:32:fa:f5:38:38:e2:53:
         0a:37:e4:5c:38:8e:4c:0f:7f:42:6b:03:53:e9:29:c5:56:9f:
         af:54:2d:ac:43:ec:b3:b9:2d:e9:06:e2:2e:79:d6:a8:54:c3:
         05:42:d9:69:7e:d7:a2:18:b8:9a:95:a0:be:4f:43:7f:cf:63:
         44:bf:8f:34:a7:ff:28:86:18:ea:88:3b:84:5c:bb:fd:16:f6:
         50:e8:8f:11:a8:6f:96:a2:88:ed:21:2f:75:f7:0d:da:01:81:
         ef:e4:31:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:53 2025 by rpki-client