Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09c35f6b-0030-3dc7-a7fd-95aad37d4657.roa
File:                     09c35f6b-0030-3dc7-a7fd-95aad37d4657.roa (raw, json)
Hash identifier:          QxuTCJT8SdJ6WyHIbVUDdn6NO7B5d5odsKa+4pYGQxA=
Subject key identifier:   86:8A:3B:35:72:4F:63:18:27:DC:93:3D:F9:42:96:1D:42:B7:31:04
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CD74D80A53E5CB8BE5D4A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09c35f6b-0030-3dc7-a7fd-95aad37d4657.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     11344
IP address blocks:        2600:1900:4110:800::/54 maxlen: 54
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:74:d8:0a:53:e5:cb:8b:e5:d4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=517c7bf7-0004-4bfd-a764-b6f5ae9ab970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b7:6a:b5:cc:90:ca:f2:d8:ee:54:0e:f0:e5:
                    13:8c:59:0f:1e:8c:b4:fa:19:0b:e2:28:b5:e2:e8:
                    29:80:9f:23:2b:2c:8c:03:57:54:d2:43:f8:6d:37:
                    17:d4:61:23:15:a8:b2:85:ad:26:d0:e9:79:26:4c:
                    32:3a:3b:68:94:16:59:54:55:e8:a9:b3:df:d6:9c:
                    09:f9:b4:f3:d6:49:02:e2:a4:62:1f:28:f5:98:b2:
                    c8:99:3c:84:da:a5:44:ee:ef:1f:96:bc:7d:5c:c8:
                    c4:7c:13:07:8c:43:fd:d0:f7:9b:db:0e:47:07:a0:
                    05:de:62:3b:b9:ee:50:40:12:22:e9:d6:ff:2c:7e:
                    5a:63:57:c0:1d:21:c0:d4:ed:e1:07:10:3f:d3:b3:
                    42:9f:ea:92:87:e9:db:75:3f:a4:5c:ba:1a:d6:3a:
                    a8:24:32:18:c8:fa:8b:57:0d:17:96:10:c5:39:ed:
                    dd:64:f4:e1:15:15:91:06:05:a9:d4:61:70:50:df:
                    a4:43:d2:c3:b0:0d:7b:f4:4e:23:fe:cc:38:b1:f2:
                    9a:11:3f:74:48:2e:1a:5e:06:31:0c:ab:86:00:d2:
                    09:bf:33:2b:03:c2:e0:23:27:7e:2c:e1:97:f0:ac:
                    ad:b4:af:15:40:98:c6:08:3d:2c:b4:3c:73:2d:1b:
                    9f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8A:3B:35:72:4F:63:18:27:DC:93:3D:F9:42:96:1D:42:B7:31:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/09c35f6b-0030-3dc7-a7fd-95aad37d4657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:4110:800::/54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:a2:e5:01:7b:ce:1d:f1:5f:25:ee:51:3d:eb:fb:51:53:ff:
         0a:54:b3:bd:56:68:87:84:7a:15:dc:08:b2:4d:cb:b0:15:67:
         68:b4:b9:a1:2a:36:84:45:93:a0:44:92:98:88:01:1e:63:48:
         95:8a:ad:f1:6e:7a:b9:50:99:5f:73:69:78:04:fb:64:86:d0:
         ab:62:de:c9:cc:b2:30:ef:f4:a2:34:e6:41:c0:27:f2:82:5f:
         af:02:6a:19:22:a7:56:8c:0b:b3:bb:d6:98:37:91:2c:33:cd:
         a1:b4:5e:b5:e6:b8:36:36:9e:19:49:24:5b:fd:ba:1c:d3:28:
         05:3f:2b:85:cc:6a:54:09:eb:75:30:77:f4:8e:1b:9c:3f:cb:
         47:9e:df:7c:17:6b:52:ba:a3:61:77:5a:19:7b:7a:1b:86:39:
         a6:65:82:50:f5:1c:0e:02:81:b2:68:17:e9:fe:7c:bb:f8:9e:
         87:5a:1c:e0:57:28:da:c7:1b:de:40:c6:ef:60:ab:a4:50:b6:
         b7:24:cc:9a:90:33:89:49:9d:65:20:72:24:29:85:41:8f:48:
         7f:1e:64:dd:d2:1f:03:83:a8:57:2c:b1:47:8c:9b:4c:d4:7b:
         02:61:6e:a8:85:ff:26:14:0e:4a:8d:d2:34:85:6b:aa:27:22:
         18:82:cf:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:59:30 2025 by rpki-client