Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/696369bf-5d73-3566-9ee4-8d8b18de3e74.roa
File:                     696369bf-5d73-3566-9ee4-8d8b18de3e74.roa (raw, json)
Hash identifier:          q7nS2BiHY2jBunsBDYCybocMpSZ/ThXLOwyis6LA6cA=
Subject key identifier:   29:C3:94:73:2E:29:69:E6:66:A5:7A:08:05:1C:62:FF:11:A3:9E:E6
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CD750C19B472311D3F3EC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/696369bf-5d73-3566-9ee4-8d8b18de3e74.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     11344
IP address blocks:        2600:1900:4110:800::/53 maxlen: 53
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:75:0c:19:b4:72:31:1d:3f:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=f555b780-302d-4a66-9453-57137303cc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:86:b5:9a:b3:7b:81:a6:ed:a8:c8:f3:6d:86:
                    49:9c:78:e8:11:f0:8c:c7:cc:d0:65:94:19:b4:5d:
                    cc:28:38:0d:f0:e0:04:76:b0:e3:5f:33:bf:0c:dd:
                    76:d4:3d:e3:bc:f8:a4:cd:5b:c1:df:e4:36:b7:94:
                    e7:a8:14:df:ca:2e:80:32:b6:72:28:f3:60:33:97:
                    9d:29:25:97:15:11:59:6b:bc:bc:42:78:c9:f1:a8:
                    96:82:59:01:de:ae:ec:cb:33:a8:38:ce:02:be:fb:
                    58:b3:9f:01:ee:99:cb:f2:c0:12:c8:4d:67:39:e2:
                    62:3b:f2:84:7e:c2:36:c0:62:b0:d6:45:6e:c1:5f:
                    55:9e:85:fa:d3:aa:5a:cf:83:ee:cf:00:d1:52:a7:
                    70:7c:c9:bb:42:11:f0:f0:1b:e9:00:b1:0b:c0:c3:
                    bf:0e:b1:c0:b4:18:8b:24:38:25:cf:61:94:df:d0:
                    e7:24:51:dd:09:f2:27:43:cb:42:c6:43:dc:30:3f:
                    ee:33:c1:18:e8:69:c4:e6:f4:92:ad:bc:49:5b:4e:
                    f1:dc:a6:7f:1e:e4:95:ff:71:98:95:e0:a3:5b:ba:
                    3f:70:de:dc:91:40:20:65:ee:5f:52:6b:d0:32:a5:
                    c1:4e:ad:f6:05:e6:17:59:49:73:b4:6c:04:86:72:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C3:94:73:2E:29:69:E6:66:A5:7A:08:05:1C:62:FF:11:A3:9E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/696369bf-5d73-3566-9ee4-8d8b18de3e74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:4110:800::/53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a4:29:d0:14:d8:6c:d7:b9:e4:b5:89:f4:f5:02:9f:d8:36:
         32:05:cb:ae:12:e8:1d:79:f4:10:b6:15:e2:70:94:07:54:69:
         55:0a:3a:b0:1f:49:79:a2:42:e7:5d:dc:06:91:cf:f0:3e:30:
         0b:dd:6a:48:87:66:b9:ac:c9:28:c6:37:83:ae:7f:a1:09:94:
         cf:5d:3f:2e:da:53:7d:a5:c4:7d:d6:45:02:bc:89:fe:0c:08:
         48:3f:f8:fa:bf:84:70:0c:37:fd:b7:f6:32:6e:77:27:c6:aa:
         30:d3:a8:9f:de:b2:36:63:52:04:ca:53:e2:f7:bd:7e:64:24:
         09:86:41:c3:48:c0:b2:f6:02:1b:62:33:e4:af:9e:8e:35:1f:
         75:a2:30:81:75:7b:94:ba:18:22:e3:7d:8b:2a:c1:47:ce:d4:
         4e:89:b9:15:63:23:56:96:66:8b:bd:40:c8:f9:62:1b:85:d8:
         87:ae:27:d0:52:8d:f2:51:02:cb:84:ae:0f:b1:e3:80:4a:bb:
         d0:06:ee:69:60:05:42:d2:01:8c:e7:4d:36:82:6c:2e:86:50:
         a9:f0:29:ae:55:22:84:a4:8e:87:32:70:a1:2a:aa:fb:f4:e1:
         bd:34:d2:dc:25:c9:10:47:f4:af:52:10:e5:40:de:4c:f9:8e:
         d4:ef:20:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:45:38 2025 by rpki-client