Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/cb13181f-7a7b-3fd6-99f0-5b804403bc46.roa
File:                     cb13181f-7a7b-3fd6-99f0-5b804403bc46.roa (raw, json)
Hash identifier:          bWulXw+EWxcH5b9nn4HaTN4z565g92l/mCAg08jc684=
Subject key identifier:   1D:00:D3:50:42:E0:4F:C7:96:87:0C:01:D9:18:25:D1:B2:18:6B:B5
Certificate issuer:       /CN=d106a247-9308-46e9-9d88-ae987a6bdace
Certificate serial:       010D0C9F4328584B7DECA0D80831F62A7C0D4318
Authority key identifier: E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/cb13181f-7a7b-3fd6-99f0-5b804403bc46.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     50131
IP address blocks:        2604:9cc0:1800::/38 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a0:d8:08:31:f6:2a:7c:0d:43:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d106a247-9308-46e9-9d88-ae987a6bdace
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=d274e870-c9f2-4610-867b-fec1df80628b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1a:f1:34:6f:35:6d:13:89:f9:e4:94:04:db:
                    e3:02:bd:af:b2:4e:80:da:4c:a7:ef:ad:aa:57:d2:
                    13:5d:85:fb:2e:dc:dc:7e:9f:62:12:1d:5f:0a:a3:
                    a4:14:93:c3:53:51:33:59:f3:d5:26:d8:a0:00:e7:
                    b2:1f:26:ef:b0:29:25:27:2f:03:1b:8f:12:42:08:
                    ce:e3:7a:91:68:c9:a2:6f:5d:d1:ad:87:1a:6c:7b:
                    ad:ff:8f:f7:83:26:4a:c7:95:d0:40:c3:5d:af:e5:
                    7f:54:7f:09:f0:f8:3d:0f:6d:02:9f:f1:b3:a1:39:
                    5d:3c:ff:93:d1:95:5b:cd:ab:cf:3c:e4:2c:8c:fb:
                    8c:84:4d:0d:23:66:b8:30:c0:75:7f:94:47:f3:44:
                    61:4c:c0:b0:0e:3a:28:b3:32:00:0e:b1:c5:b1:18:
                    ae:b7:16:75:0f:c9:41:fe:28:1d:90:51:e9:da:bd:
                    c3:5a:d1:69:26:22:10:2e:94:63:ea:89:c3:8c:9e:
                    3d:dd:8a:28:ee:0b:20:8d:63:c5:1e:a4:61:00:ee:
                    01:2e:ca:c3:fc:4c:ed:a4:ab:cf:71:3d:44:18:91:
                    ca:08:6f:c7:aa:09:13:18:94:b7:dd:00:2e:ba:ec:
                    a8:02:79:0d:54:fd:a2:79:8b:69:7a:79:94:3a:e2:
                    a9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:00:D3:50:42:E0:4F:C7:96:87:0C:01:D9:18:25:D1:B2:18:6B:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/cb13181f-7a7b-3fd6-99f0-5b804403bc46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace/d106a247-9308-46e9-9d88-ae987a6bdace.crl

            X509v3 Authority Key Identifier:
                keyid:E7:DC:3B:E5:56:FF:1D:5F:DF:CA:F4:65:1C:3D:2E:6C:FD:FE:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d106a247-9308-46e9-9d88-ae987a6bdace.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9cc0:1800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:df:30:fc:89:e3:b2:72:56:ad:39:e4:4f:a2:c4:33:87:6c:
         88:d3:68:62:47:68:23:22:ec:f8:8f:3b:e6:6c:8f:e6:9f:10:
         8f:4b:14:1d:60:98:0c:78:09:61:57:67:87:5c:42:2f:21:2f:
         aa:dd:9e:4c:3f:d1:2f:51:1a:5c:e4:31:31:b2:90:17:13:cf:
         a3:bd:c2:60:c1:94:6c:e2:f6:31:f0:e9:4f:0f:3c:2b:9b:6c:
         4c:54:83:bc:c0:33:05:fd:62:9b:f9:19:89:99:c7:6b:e6:d8:
         da:bf:f9:f7:f2:35:ca:e5:82:3a:b3:2d:45:c3:69:d9:a8:51:
         c1:7d:fb:18:e0:60:14:66:84:31:ba:80:9e:a4:97:22:0e:05:
         3a:44:30:85:bf:b2:b5:cd:56:92:9e:6a:55:49:9d:2e:69:fc:
         88:d8:58:3f:82:7d:1e:d4:a3:65:44:ca:74:5c:a0:53:cc:b1:
         94:7d:91:81:cc:85:e6:27:04:37:d6:75:38:a8:b2:fd:50:f9:
         31:81:de:7e:2b:87:3f:7e:39:42:a2:bd:5c:31:22:97:bc:60:
         f8:3c:71:ad:cf:92:1b:03:ea:94:00:2e:1b:aa:4d:3c:aa:e4:
         99:19:6c:b6:1f:b8:06:fb:7c:31:4e:6b:ba:3c:df:7b:f5:87:
         bc:e4:48:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:22:40 2025 by rpki-client