Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ef34eab-36dd-3bba-98d9-a7c578997dfa.roa
File:                     2ef34eab-36dd-3bba-98d9-a7c578997dfa.roa (raw, json)
Hash identifier:          AR49CF6yaGckLhrMxe31ScEJlYXQaELMn4/LmEd3+K0=
Subject key identifier:   05:2C:D6:15:78:5A:8E:18:14:CD:C0:DF:A0:F7:3E:6D:50:CA:24:B3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CE32568855F1F36D86AF80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ef34eab-36dd-3bba-98d9-a7c578997dfa.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396982
IP address blocks:        2600:1900:4190::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:32:56:88:55:f1:f3:6d:86:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=c89c2af1-f359-4dd9-b5b5-040a1a8de75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:81:36:26:6d:e9:2a:98:de:c2:09:17:e5:f3:
                    97:85:ee:d2:e4:61:09:4d:01:55:94:fe:da:b8:a9:
                    a5:a7:a3:d5:0d:13:17:49:82:f3:15:57:7c:d3:5e:
                    95:04:5a:f2:b8:77:c4:fe:c9:6c:12:01:9c:07:62:
                    e8:1d:c3:b8:ec:1b:82:6f:ac:43:d8:6c:d5:1b:65:
                    6b:83:32:45:9b:4e:92:97:aa:5e:64:b8:7d:02:f2:
                    46:1e:65:dc:21:41:92:20:fc:d8:b8:38:ad:7f:e6:
                    c4:c6:1d:5c:a5:ae:54:da:71:d4:cf:1d:81:e0:6a:
                    78:ef:fa:81:24:c1:53:c5:6b:f1:2e:15:f8:ad:66:
                    0c:52:0c:f5:9b:e9:b4:3c:cb:95:7d:53:74:ca:74:
                    62:7c:5d:30:e5:80:57:a3:fd:0a:a1:5a:f2:c4:9d:
                    3b:21:b3:2c:04:74:82:16:69:02:98:f4:60:20:96:
                    65:38:d9:33:e3:6b:0f:c5:84:b6:5b:ad:23:20:a3:
                    b8:9c:f5:d4:a6:a7:62:fc:e4:f6:4d:ca:f5:c8:2c:
                    be:46:1e:dd:7d:9f:ad:e6:66:cb:63:9b:ff:80:3e:
                    b7:e6:57:a5:71:12:4b:ba:d0:de:9e:8b:dc:c0:67:
                    83:db:fd:40:11:9a:c0:32:d8:b6:bd:0e:80:68:21:
                    86:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2C:D6:15:78:5A:8E:18:14:CD:C0:DF:A0:F7:3E:6D:50:CA:24:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ef34eab-36dd-3bba-98d9-a7c578997dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:4190::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:53:44:5a:a1:c5:7c:94:bf:d0:a0:ba:b6:ba:44:62:12:54:
         07:e3:a5:d6:99:15:cf:ef:04:2d:80:9d:d8:fd:62:d7:0d:3d:
         5d:15:b7:3c:27:e5:37:7f:0a:95:65:4c:76:f4:be:13:d7:83:
         8a:86:32:3b:6a:82:83:d2:61:93:68:9f:70:c7:15:71:1f:76:
         e0:e8:df:e5:e2:b8:56:b7:bb:10:3f:cc:b0:8b:f6:6b:31:dc:
         d0:f0:e2:8e:ff:3b:c4:31:62:a9:ce:d2:5f:04:66:ee:50:12:
         e7:f0:7d:4c:4e:d9:aa:60:b2:e9:25:02:a6:ba:90:ea:46:74:
         a9:34:0a:5c:d0:ad:c4:6e:a8:0c:bd:52:60:f1:07:58:d1:36:
         3e:d9:89:41:a6:12:6f:26:c7:d6:dc:be:ac:d1:cf:24:e0:a2:
         3a:74:53:f7:f9:a8:d0:0a:9f:4a:92:a6:eb:b8:15:9a:2c:c8:
         04:06:9e:d4:a2:37:2d:36:be:9c:7e:f7:20:f4:dc:3f:26:1e:
         4f:e2:d9:a5:7e:fd:99:91:ed:b8:5a:6f:c6:09:e9:66:e0:d7:
         37:18:13:da:3a:02:6f:4b:b7:85:cf:9d:a5:3c:9f:d0:ef:aa:
         31:44:da:f5:68:88:ff:67:49:68:68:98:ae:25:c7:f3:14:53:
         dc:1d:46:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:54:30 2025 by rpki-client