Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e528e20e-5614-3328-87e9-cc6248c7d06f.roa
File:                     e528e20e-5614-3328-87e9-cc6248c7d06f.roa (raw, json)
Hash identifier:          QUoIivjqBJu43qm62ZHf20bdoOtVoXHHREznn6tsNTQ=
Subject key identifier:   09:AC:A1:C5:25:89:6F:FF:E7:DF:D3:69:BC:41:91:18:4F:08:48:C1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B89FB4DF5F12FCB83629569C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e528e20e-5614-3328-87e9-cc6248c7d06f.roa
Signing time:             Thu 16 Oct 2025 08:39:47 +0000
ROA not before:           Thu 16 Oct 2025 08:39:47 +0000
ROA not after:            Wed 14 Jan 2026 09:39:47 +0000
asID:                     15169
IP address blocks:        2600:1902:240::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:fb:4d:f5:f1:2f:cb:83:62:95:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 16 08:39:47 2025 GMT
            Not After : Jan 14 09:39:47 2026 GMT
        Subject: CN=926cc2f4-518c-4803-bf36-17e2753d9a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3a:68:e2:9f:91:2d:b1:07:8d:d4:27:2c:79:
                    31:db:a1:de:80:52:41:14:28:ed:78:79:52:df:80:
                    9a:94:3c:d6:7d:73:d8:e1:7a:f1:a2:77:77:c2:36:
                    fa:3a:8e:a6:e1:cf:ce:30:50:2a:6b:db:8a:ea:51:
                    73:e7:33:0e:fa:e0:ec:05:8f:72:df:9f:be:52:92:
                    8e:3e:8e:94:e9:b0:0c:e9:89:68:d4:90:4e:f8:1c:
                    17:f3:fa:80:8b:7c:a4:d0:e6:4b:b2:be:9f:b8:60:
                    fa:00:c0:50:e5:8f:4a:1e:8c:1b:0f:d7:b6:5d:69:
                    17:62:d9:19:78:fd:27:72:0f:40:cc:91:35:97:9d:
                    a1:11:3c:4f:5e:13:f1:5a:2c:8e:7c:67:05:ce:0f:
                    8a:d9:d8:26:40:92:a9:e6:67:64:4c:14:8b:ea:47:
                    8b:d5:dd:be:35:ac:b3:dd:d1:fb:c5:c7:43:82:a8:
                    aa:8a:94:32:4c:0f:7f:fa:23:5a:2c:bb:fc:c5:6a:
                    f6:02:25:38:d4:29:4c:3b:06:d7:78:ad:02:08:2b:
                    82:a6:68:1e:fc:7f:ab:bd:d9:5e:3d:43:cf:f7:57:
                    fe:8d:aa:df:83:80:a1:6c:fa:c6:1a:57:3b:8f:a0:
                    83:aa:8e:99:80:8d:a3:29:6c:70:1d:dc:62:b9:0e:
                    b2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AC:A1:C5:25:89:6F:FF:E7:DF:D3:69:BC:41:91:18:4F:08:48:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e528e20e-5614-3328-87e9-cc6248c7d06f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:240::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:bc:71:99:e6:7a:cf:99:37:c2:21:91:0b:37:c3:ca:1d:3d:
         1b:3c:45:63:20:2b:54:0d:4c:48:16:47:7c:86:cc:db:4c:30:
         b6:88:40:74:6d:57:81:a9:5b:18:e9:83:7a:8d:81:66:42:ea:
         33:9c:59:3e:92:3f:03:fc:2c:a5:2a:de:bc:9a:8c:f7:e7:f5:
         48:ab:c2:90:3c:02:cc:10:8b:b0:84:83:a6:ca:69:ab:3e:82:
         3f:29:6c:4f:01:75:a2:91:7f:d2:ce:b6:be:c2:be:dd:ae:28:
         1e:1a:58:2a:a6:c8:64:17:fa:2a:ea:e9:d1:29:0a:40:27:63:
         d9:71:2d:2c:11:25:bd:8a:1b:88:35:15:9b:de:6a:12:f3:28:
         4e:73:3d:22:ef:c5:2a:cd:ed:5f:3d:62:22:67:1a:ed:a3:63:
         7c:69:17:88:7f:c7:e0:73:d4:a4:39:e5:44:24:73:e0:d3:10:
         1c:92:33:a5:7b:0e:5c:b8:56:87:a0:9d:f5:94:06:52:9a:27:
         d9:55:0e:ab:93:86:6b:93:a4:97:ee:3c:16:9c:59:2e:de:84:
         61:29:82:0b:0b:30:0b:54:25:dd:ad:16:0f:84:9a:c0:4e:8a:
         b8:e5:49:ee:9c:52:6b:b5:7d:d6:94:d1:bc:fa:39:63:48:3c:
         7d:ed:8d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:26 2025 by rpki-client