Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4aa5bd42-b991-3045-b504-181f9c1a8292.roa
File:                     4aa5bd42-b991-3045-b504-181f9c1a8292.roa (raw, json)
Hash identifier:          QDaLYqzZ6pwyPVsGY2YfguOaY5U6S4VQ3eIYnZX68co=
Subject key identifier:   B5:58:3B:F4:73:A7:F7:05:4E:9A:69:AB:8F:CA:74:FF:A0:30:73:0F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B54F0E0C1BCDC75B1D2AF1100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4aa5bd42-b991-3045-b504-181f9c1a8292.roa
Signing time:             Sat 27 Sep 2025 08:40:56 +0000
ROA not before:           Sat 27 Sep 2025 08:40:56 +0000
ROA not after:            Fri 26 Dec 2025 09:40:56 +0000
asID:                     11344
IP address blocks:        2600:1900:4115::/51 maxlen: 51
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:f0:e0:c1:bc:dc:75:b1:d2:af:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 27 08:40:56 2025 GMT
            Not After : Dec 26 09:40:56 2025 GMT
        Subject: CN=9ae5fa58-2aa9-417d-b70f-d2a64c4d813b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:03:07:fc:88:36:3e:b1:86:bd:6c:55:28:2c:
                    d1:42:dd:10:40:b7:57:1e:ad:a5:f6:fa:a3:f5:a1:
                    5a:d7:47:28:26:23:08:1a:2b:0a:58:7c:46:39:a1:
                    cc:53:b8:ce:61:07:de:c1:e3:69:9d:0f:0a:db:65:
                    94:dc:b1:14:aa:82:ab:d7:55:66:c2:f8:29:b8:01:
                    1a:d9:3c:34:70:ee:48:10:f1:0a:4d:fb:ff:9d:d0:
                    a2:28:2a:0b:17:a3:87:5a:34:91:70:60:a8:07:0b:
                    17:ed:42:4f:3e:5a:80:ed:af:60:f7:f2:e9:40:61:
                    0d:0a:0a:7c:72:0c:fc:6b:5c:3b:49:61:5c:09:61:
                    25:aa:44:e9:a4:1a:5e:ab:98:cf:a7:f3:7d:d7:66:
                    dc:41:61:9d:88:3e:04:bc:b3:1f:85:2a:1a:4b:37:
                    bc:ea:ff:b5:72:9a:14:17:68:8c:ff:ff:8b:fb:c8:
                    8e:da:78:c0:10:b7:4e:f2:7e:c0:18:f4:f4:29:a3:
                    1c:b8:ac:31:2d:5f:af:46:ad:7f:0a:bd:28:34:98:
                    3c:d8:f4:27:51:92:23:7f:ce:f7:9f:22:82:75:ad:
                    77:62:82:3d:10:ef:c6:11:60:8d:86:17:49:56:07:
                    44:96:85:da:c9:07:f9:ca:54:0c:5f:02:71:b7:95:
                    0e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:58:3B:F4:73:A7:F7:05:4E:9A:69:AB:8F:CA:74:FF:A0:30:73:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4aa5bd42-b991-3045-b504-181f9c1a8292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:4115::/51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:30:bd:1e:a5:ff:96:0d:c9:0d:9f:7c:f8:4d:69:32:11:ac:
         43:8e:4d:c9:c2:c2:85:4c:30:0d:d0:cd:20:8d:bc:bf:95:fc:
         70:5f:25:28:33:b4:b8:ab:5a:f6:ec:4f:ab:69:ce:05:cf:d4:
         7a:df:e5:db:36:4b:f1:c4:e3:70:bf:67:b6:0c:43:a4:27:63:
         b7:90:03:c0:d5:1f:c9:a3:c1:fc:05:11:90:87:8f:e7:95:36:
         7f:80:b7:ba:21:b3:2a:2f:9d:77:ad:05:4a:ce:22:33:5a:7d:
         86:ee:25:d4:ab:b6:39:2b:64:d2:ee:53:08:1a:b6:29:4f:b9:
         15:8c:45:57:5f:28:90:df:fd:79:68:52:be:eb:86:0c:8f:49:
         5a:28:8e:47:b5:96:9d:86:b8:33:d8:bb:8f:66:66:8b:c5:c6:
         e0:2c:01:07:79:87:4a:54:7e:af:10:41:c6:55:14:5d:a6:ff:
         8d:50:37:92:17:6a:1a:37:65:34:c2:04:d0:fc:70:96:1e:b0:
         2e:37:5a:5e:cc:5e:8a:ec:44:5c:82:4b:a7:44:40:69:cc:6e:
         7f:35:a2:61:1c:77:a1:20:e7:11:41:f3:7f:12:52:0d:4d:90:
         42:f4:b6:a8:48:52:ea:ad:39:12:b7:d2:d5:e4:23:4a:8d:89:
         48:97:8b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:18:51 2025 by rpki-client