Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21b74624-1b4a-3d2a-ac28-fc0bb5b8fafc.roa
File:                     21b74624-1b4a-3d2a-ac28-fc0bb5b8fafc.roa (raw, json)
Hash identifier:          XePojvx7lgnRfMZ1lJvWJpszznsaO31yK9XV0gj0DS0=
Subject key identifier:   5E:55:69:2B:DC:46:FB:57:4B:48:CF:70:2E:6B:B4:A2:F4:3E:82:5E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B89FA222B14E93C2B51950880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21b74624-1b4a-3d2a-ac28-fc0bb5b8fafc.roa
Signing time:             Thu 16 Oct 2025 08:37:26 +0000
ROA not before:           Thu 16 Oct 2025 08:37:26 +0000
ROA not after:            Wed 14 Jan 2026 09:37:26 +0000
asID:                     15169
IP address blocks:        2600:1902:b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:fa:22:2b:14:e9:3c:2b:51:95:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 16 08:37:26 2025 GMT
            Not After : Jan 14 09:37:26 2026 GMT
        Subject: CN=37671ed3-4175-46ed-a9c5-7439fa3882b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e0:96:b7:c7:8c:6c:09:c7:42:5c:39:1f:f3:
                    f3:cb:a1:ed:e6:35:72:9d:3b:31:41:13:1e:a3:2c:
                    12:ae:31:8f:53:2c:f7:4a:9f:77:39:2f:92:f9:f7:
                    f1:9e:39:e9:b4:33:c8:ab:f0:12:00:8f:53:d3:17:
                    b8:1f:eb:90:0b:87:19:3b:70:bb:3b:66:5c:d8:25:
                    3d:ab:ff:61:ca:15:7c:26:e3:b0:05:bb:7f:7e:43:
                    ec:9d:e5:eb:3f:8d:a4:ba:ed:b1:bd:c8:9d:19:94:
                    89:00:d0:41:bd:2f:8e:0b:a0:9d:b1:9f:65:a9:64:
                    f6:b8:7e:83:cb:89:7f:46:66:2e:e8:e2:a0:53:78:
                    ac:28:f5:85:15:84:1a:7b:56:de:76:3f:16:01:73:
                    80:42:f0:1d:e7:9f:f3:7d:92:e9:7f:c8:7c:89:0b:
                    2a:7f:4a:cd:29:e6:5c:a9:ac:16:be:20:0a:d6:91:
                    b1:5d:46:0c:d6:d1:4c:7e:0a:e0:17:4e:52:04:7e:
                    fd:e5:f8:40:3f:11:5c:03:02:12:b6:da:15:e2:fe:
                    12:6f:3a:d9:11:9f:dc:a0:b9:0a:ce:63:de:2b:c3:
                    f6:e5:8b:61:f4:c3:e2:70:31:7d:dd:17:c0:9e:66:
                    3c:b3:c3:30:6f:75:9b:e2:85:a1:41:d9:73:ed:66:
                    fd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:55:69:2B:DC:46:FB:57:4B:48:CF:70:2E:6B:B4:A2:F4:3E:82:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/21b74624-1b4a-3d2a-ac28-fc0bb5b8fafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:32:23:1c:72:12:1b:4c:ca:bf:3b:32:c6:34:a8:55:78:0e:
         82:85:ec:c7:55:8c:7f:35:b7:44:12:3c:80:e5:78:9a:7d:06:
         04:23:51:c6:0e:35:20:cb:e8:d3:a3:f0:81:ad:21:45:54:06:
         75:47:64:db:f6:04:66:d1:36:1b:36:d3:6a:8e:ca:e4:6e:ad:
         d6:79:fc:5c:17:77:e1:de:93:d3:39:12:cb:05:ce:54:c5:10:
         7d:6c:41:dc:f5:f5:8f:c8:69:90:d4:c1:07:1a:33:d3:5f:44:
         9b:be:40:cc:d4:5e:b9:df:82:28:74:d7:0f:cb:aa:d1:78:8e:
         3c:7d:7f:15:32:f1:35:bd:73:86:f7:19:c1:db:26:e8:cb:8b:
         77:c5:4e:09:d3:a7:9e:29:c0:6e:35:8a:61:1e:52:79:d3:4d:
         41:d6:71:f9:2f:0e:c6:52:bf:2f:e5:99:40:ca:b2:75:23:08:
         0c:86:f4:8c:d7:bb:8a:6c:37:93:cb:59:e6:42:2e:ac:ce:25:
         ce:9d:83:db:67:b1:5d:e2:a1:89:9d:40:01:b7:a2:88:1b:21:
         77:9f:8f:58:8d:6c:60:78:87:19:7c:32:f5:ff:fa:bc:25:52:
         3a:b8:fe:18:dd:5a:7d:4d:ba:d6:0d:98:92:9f:b1:16:b9:14:
         be:9d:42:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:50 2025 by rpki-client