Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a35b1ff4-cd84-3db9-a89f-4344c894a9f7.roa
File:                     a35b1ff4-cd84-3db9-a89f-4344c894a9f7.roa (raw, json)
Hash identifier:          axJtBZAwO7wvESGr/kXxWXKp6FSlrL6wkDprlwOhIsU=
Subject key identifier:   05:8E:01:12:59:5B:64:1A:AD:9E:F4:4F:D5:1E:92:D1:02:5D:68:36
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CE3265B954E5DB0BB87800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a35b1ff4-cd84-3db9-a89f-4344c894a9f7.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     11344
IP address blocks:        2600:1900:8010:1000::/52 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:32:65:b9:54:e5:db:0b:b8:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=e251b762-d615-47b5-8334-e5207084c3cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:90:dd:eb:d6:f7:81:57:02:70:55:01:3f:3e:
                    ee:41:c9:58:eb:28:4b:50:c1:7f:4e:85:20:ad:9c:
                    fd:26:3e:d8:c2:b4:b8:64:1e:e2:4c:09:e6:ba:17:
                    28:25:df:a2:41:e4:27:81:98:36:2f:dd:8c:44:8c:
                    d5:73:50:55:98:fc:34:75:9e:76:5a:a5:3e:35:04:
                    ac:31:b0:14:fc:fd:b0:6b:7c:5c:f6:c7:8f:22:36:
                    ff:da:48:29:ce:7e:64:1f:f1:ef:71:b7:43:bd:d9:
                    6a:16:fe:33:d8:68:b6:0f:50:6e:2d:06:46:40:db:
                    4d:a2:48:9f:62:94:02:19:e0:3d:f0:80:a1:21:85:
                    22:57:a5:7e:e6:44:84:5c:26:99:ec:07:09:46:a7:
                    52:bc:54:d8:fd:ce:1c:4a:86:3b:e1:08:5e:c9:e2:
                    9b:99:53:bd:30:99:cf:04:79:0f:49:35:50:1c:62:
                    d9:8a:8c:08:fc:ef:66:c9:f9:94:a2:0d:43:92:1b:
                    32:a3:ec:0b:d4:7d:ac:83:6f:df:f6:52:a9:5e:da:
                    d7:1d:d1:45:33:94:59:f6:36:c3:3a:b9:86:05:f7:
                    a0:85:13:9c:ad:0e:e4:9b:73:33:5a:a5:d1:ca:16:
                    b7:66:58:7a:6a:10:55:c9:ed:46:1a:4d:b7:09:36:
                    a3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8E:01:12:59:5B:64:1A:AD:9E:F4:4F:D5:1E:92:D1:02:5D:68:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a35b1ff4-cd84-3db9-a89f-4344c894a9f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:8010:1000::/52

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:2c:c5:26:17:45:9e:a8:b6:37:fb:1b:4f:bf:dc:7f:a8:54:
         2f:67:f6:60:15:02:63:6b:75:47:24:67:19:03:4e:ef:d0:59:
         b4:93:54:2a:37:af:f3:63:55:f1:12:2c:f7:0d:7a:d8:7f:f5:
         e4:4a:8f:42:8d:8d:ce:b1:05:76:cf:e8:d1:88:f4:ea:e8:73:
         13:72:f9:63:95:c3:d5:1a:44:57:5c:d0:e6:a2:4b:8d:d7:60:
         76:2d:bb:00:3f:96:49:da:54:fa:49:10:48:0b:4c:dd:b4:00:
         70:19:8f:27:39:39:ed:f1:c3:14:65:c0:d0:aa:a8:56:86:e9:
         bb:fc:f7:02:eb:09:2a:8e:da:02:9b:e9:ca:26:61:2d:26:49:
         3f:68:97:8c:ce:d7:7f:c4:54:4a:5f:fb:f7:6a:1e:93:5e:71:
         8c:2e:fe:6c:89:5d:be:03:d0:29:30:76:bf:fd:90:5c:79:41:
         4b:12:47:fa:80:2b:8e:19:3d:05:a0:8b:2c:5f:25:ed:c1:3b:
         2b:ff:9e:39:c0:f2:b8:73:63:8c:95:50:ac:fc:1b:d9:80:a4:
         0f:a2:69:6a:aa:08:28:cd:e2:91:3c:87:75:63:dd:b4:93:61:
         41:fd:bd:cd:49:30:72:50:71:ec:29:d5:b4:16:c6:00:b2:a0:
         c8:a5:37:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:38:16 2025 by rpki-client