Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d03640ff-96b2-305d-bd59-e4a391a46365.roa
File:                     d03640ff-96b2-305d-bd59-e4a391a46365.roa (raw, json)
Hash identifier:          4cUQm21bvOsJu6UOnXtMUDJuiuTTdtXQ2Us10GJ7D6w=
Subject key identifier:   57:05:D8:DC:4A:10:F3:64:F9:A2:BF:20:74:E3:96:A6:FB:B9:13:20
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CE3586EE6F8BE186CFB800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d03640ff-96b2-305d-bd59-e4a391a46365.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396982
IP address blocks:        2600:1900:4020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:35:86:ee:6f:8b:e1:86:cf:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=2718e1e9-72d5-4841-96c1-99069038d18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:03:cb:85:57:c4:82:f5:62:85:39:4c:8d:c8:
                    8b:f3:05:0f:61:12:ce:a5:5d:cd:75:c0:6e:b8:b9:
                    37:b8:71:f8:83:e2:ae:15:b8:a5:6f:66:d3:c6:0c:
                    e9:80:d1:10:dd:c6:51:ce:65:65:72:6d:57:c6:dd:
                    89:aa:78:9a:e5:db:c1:b4:40:ec:f5:9e:67:1e:17:
                    3d:36:0c:65:5e:03:96:81:29:85:01:da:1e:e0:8b:
                    96:f7:db:51:61:24:51:c6:57:62:22:8a:7a:08:63:
                    27:ec:57:0a:9d:65:86:e7:46:5c:35:0d:59:f3:70:
                    3a:3c:61:76:0a:22:56:d3:9d:5b:e9:e9:53:b3:56:
                    c1:ec:bc:82:05:f3:c3:d8:b5:d5:76:2f:54:12:96:
                    95:6b:86:52:c1:1a:47:81:8a:be:97:57:3e:83:f8:
                    d2:13:ac:bf:e0:e6:e4:25:8c:aa:76:17:01:5b:1e:
                    42:0a:0b:3a:69:7f:2b:96:fc:54:c3:34:e0:0c:06:
                    8f:2b:a9:37:36:74:70:c0:d0:f1:69:87:ad:b6:91:
                    0d:13:62:bb:fe:d4:f1:6c:b3:a0:68:67:ca:82:e8:
                    96:a9:a2:94:00:98:f1:37:b7:8a:e6:53:ba:b1:06:
                    7c:40:f9:1a:f4:5c:72:6d:08:37:c8:f7:6b:c5:8f:
                    0b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:05:D8:DC:4A:10:F3:64:F9:A2:BF:20:74:E3:96:A6:FB:B9:13:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d03640ff-96b2-305d-bd59-e4a391a46365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:4020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:2d:88:a7:5c:4f:b4:bd:be:61:8f:ba:68:9a:2e:c6:03:16:
         fa:07:67:9f:b7:e1:81:9d:bb:ff:2f:05:cb:c8:1c:9f:12:3f:
         a9:4f:56:fa:96:26:8b:ca:41:6f:b2:2d:f2:68:31:91:c4:a2:
         14:c2:27:5c:11:11:48:36:9e:04:0b:2f:9c:64:8c:2e:3e:1f:
         a0:26:7b:59:42:31:d5:1a:7f:94:b5:58:94:e1:b1:6c:56:84:
         d6:93:c9:aa:c8:28:47:12:ab:05:c4:2d:8b:3e:61:a2:01:be:
         15:88:a3:f3:a9:5e:f0:75:69:4c:8e:96:6c:0d:7e:81:51:ce:
         13:81:9c:29:13:4c:d7:b2:e7:d3:dd:17:30:a5:3d:78:34:ef:
         84:e9:e2:60:9f:a9:47:65:25:3f:15:b6:96:46:20:f7:4d:2e:
         a8:d4:27:e7:4c:d8:ad:bd:c8:2c:98:df:8c:3c:d3:b5:07:56:
         4f:30:54:38:3f:19:6f:b6:5f:5a:c1:5b:c3:37:77:31:65:88:
         2b:af:c7:27:59:6c:e0:57:bd:c2:95:e4:1f:e9:47:19:e3:ba:
         f1:83:7d:00:ab:d9:0d:eb:eb:3f:7e:53:d5:80:9f:a5:d9:a2:
         43:0a:7e:bb:48:ab:39:d4:78:17:a5:c5:a9:c0:af:d0:92:8e:
         6b:51:f3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:12:23 2025 by rpki-client