Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc88723f-c441-3220-9fcf-6ea69914c30f.roa
File:                     cc88723f-c441-3220-9fcf-6ea69914c30f.roa (raw, json)
Hash identifier:          XKduYgmYr1mpXu47fio3tFD+UWfT7HvO4IJ0NYCSJn0=
Subject key identifier:   24:85:E1:12:0C:DA:92:66:17:52:A5:9E:D3:D3:DA:E9:9A:13:CA:EF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CD77A205DF049048329C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc88723f-c441-3220-9fcf-6ea69914c30f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396982
IP address blocks:        2600:1900:41c0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:77:a2:05:df:04:90:48:32:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=e927cbec-5347-4485-b8de-6f8b5241ea3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:46:c7:a6:5e:32:74:5c:10:4d:b3:32:ab:ad:
                    bf:fd:4b:fe:95:0b:91:f8:2f:1e:18:ff:46:f2:ec:
                    43:1c:b7:6f:83:e1:22:00:fb:5e:f1:e9:81:f4:2d:
                    6d:0b:de:f8:9d:0b:42:89:75:09:21:b3:f0:42:35:
                    69:0e:0b:e3:a7:3a:54:c7:5d:ee:64:d7:ad:fd:7b:
                    b6:ef:af:c2:5b:19:18:32:da:41:8c:18:86:58:5d:
                    66:3d:79:67:b0:e0:65:ee:c1:d4:c7:4d:dc:6d:9e:
                    ad:2d:3e:1e:49:0a:ae:af:f3:bd:6e:c8:8e:47:8e:
                    c0:9c:1a:0d:95:71:ec:83:fd:b6:b4:95:10:d6:f3:
                    99:7a:7d:35:33:8c:d8:ae:12:9a:60:44:4d:07:8e:
                    0e:12:2a:0c:c7:c6:d7:5e:32:a7:bf:7e:1c:82:e0:
                    1e:27:94:2b:cd:05:fb:af:60:7f:22:80:d4:b5:b6:
                    3b:e4:86:85:67:4f:20:e6:cd:48:3a:0f:d0:54:4b:
                    17:77:a6:79:cd:d2:54:45:d9:5f:54:99:34:de:46:
                    80:86:04:7f:3d:68:a9:80:80:4c:a4:47:cd:3a:1a:
                    a8:91:53:c4:87:f7:c8:4d:f2:b7:7a:b1:06:7b:62:
                    fb:14:e8:3c:1a:12:f8:a3:78:cd:ea:39:2e:de:a0:
                    64:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:85:E1:12:0C:DA:92:66:17:52:A5:9E:D3:D3:DA:E9:9A:13:CA:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cc88723f-c441-3220-9fcf-6ea69914c30f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:41c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:92:7e:b7:0d:19:af:bb:4d:1a:49:1a:1f:5f:8e:7e:8d:d9:
         38:72:80:f2:60:50:a5:de:25:f1:9c:0c:fc:25:a5:82:9b:c0:
         2e:86:f2:1d:e7:c2:16:65:77:6c:0b:a9:cb:55:a6:9f:3f:18:
         50:58:82:0d:3c:6d:c2:46:fa:cd:5d:e7:b3:2d:1b:f1:a3:6e:
         93:69:75:45:bd:25:24:a4:a2:72:3f:15:88:f4:89:d3:c4:11:
         79:18:02:54:a1:f2:ef:7a:46:35:76:3c:1b:5b:e2:de:14:cc:
         a9:16:8b:4d:76:53:26:37:39:81:f0:53:81:6e:c7:82:41:76:
         15:b4:ef:ce:9c:a7:01:7b:e9:f0:7d:dd:58:d7:e4:b5:f0:ab:
         3a:5c:54:d6:27:a9:c2:98:d5:56:ff:41:66:ca:d0:99:3e:2b:
         bc:af:d5:88:a7:79:9d:43:f4:b5:8d:f7:c3:4b:8f:84:7b:ae:
         c2:9f:b3:e7:90:00:1b:27:bf:34:e4:32:ed:18:78:41:0f:e4:
         e8:ae:f6:6b:94:6b:d7:a9:37:fe:b9:2e:39:07:93:f8:82:29:
         49:e7:43:e2:d3:50:ab:61:8b:86:ee:49:d9:5f:8f:b5:5c:0c:
         30:c7:58:68:59:2f:d8:a3:b6:6d:df:4a:29:72:26:3c:6a:b2:
         b6:04:c6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:46:39 2025 by rpki-client