Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/c2b92efc-5b5f-3ef0-89e9-c4018d1d6fde.roa
File:                     c2b92efc-5b5f-3ef0-89e9-c4018d1d6fde.roa (raw, json)
Hash identifier:          BIa5GFNNKQP73CgWWgm8Pdmm2o4V6aeAIGSR/8Ui9Jg=
Subject key identifier:   F1:5F:A4:97:BD:1F:7F:FC:1C:5F:9F:60:80:7E:F2:5C:18:4F:E6:57
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F4328584B80B75510E5474ADB126BF780
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/c2b92efc-5b5f-3ef0-89e9-c4018d1d6fde.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     45102
IP address blocks:        2600:3100::/28 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:55:10:e5:47:4a:db:12:6b:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=b7c06f81-1c25-45b4-b96b-083bac629d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:37:d8:6f:e9:81:02:16:a7:90:91:1f:57:3b:
                    94:4e:de:13:3b:92:37:17:46:c8:ad:39:d1:04:57:
                    1f:f1:c4:d4:eb:2e:c9:f9:45:a0:bd:55:a5:88:1d:
                    f6:a7:2b:28:da:f7:25:f1:90:9c:98:df:74:f9:77:
                    26:c3:6d:a5:af:ac:1a:3a:3e:21:00:dd:48:da:05:
                    7b:27:38:bf:cd:75:d6:3a:0d:7a:6f:c8:b0:92:41:
                    3a:88:e4:10:e1:ff:3a:ff:3b:f6:d5:51:ca:ff:52:
                    a8:ec:6d:75:29:4e:f0:ff:1e:5f:f3:6a:42:63:8d:
                    64:49:57:24:17:1a:a2:de:5e:d2:95:fd:47:07:f4:
                    02:f2:07:b7:9d:c8:a0:7d:51:99:3c:65:a9:e1:c0:
                    a5:3b:a5:e6:8a:28:db:dc:5a:12:dc:1b:85:b6:52:
                    60:48:71:60:ce:7a:2c:76:c2:8a:f1:ed:db:c1:9b:
                    43:86:a9:c3:ab:ea:50:3d:e9:32:80:77:5b:4c:38:
                    c6:4b:e6:e0:08:af:bb:b2:49:b9:bd:59:7c:01:46:
                    bb:f5:d6:f7:08:5d:ce:e8:d9:cd:54:4e:cf:53:ea:
                    7b:be:84:87:b6:d1:f1:78:cb:2b:87:0f:17:02:be:
                    0c:76:dc:5d:dd:17:7e:21:dc:42:94:dc:de:73:2b:
                    d9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5F:A4:97:BD:1F:7F:FC:1C:5F:9F:60:80:7E:F2:5C:18:4F:E6:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/c2b92efc-5b5f-3ef0-89e9-c4018d1d6fde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:3100::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:fd:58:be:98:08:c6:e0:96:c8:9b:2f:1c:f6:1a:3c:2b:24:
         21:c9:52:46:7d:08:75:ae:35:24:49:e5:9b:af:15:0f:09:ef:
         21:6c:e0:ef:4a:0e:96:0a:c4:29:9e:e1:76:6f:64:b3:35:17:
         6a:d3:89:12:b2:ef:85:d5:43:57:15:e6:0a:91:e5:dc:5b:a8:
         61:ad:09:c7:07:83:91:2e:8c:5f:65:ae:7b:a2:b7:58:16:88:
         8d:a0:ca:3f:9b:8c:10:e0:92:01:f0:41:a1:43:c1:6d:c0:8e:
         95:1b:1c:85:b9:86:f6:26:cd:7e:69:c4:e1:76:14:6d:84:9e:
         7b:d0:a9:a5:b4:7f:a9:c9:78:97:6b:74:1a:49:1f:5c:4d:9e:
         b9:f1:a8:71:d7:31:79:15:6f:e1:c1:41:9d:c3:6e:72:92:ae:
         e9:70:16:0a:72:4c:d8:6f:9e:08:62:ad:b6:63:cd:f4:06:00:
         6e:f7:b4:13:68:7f:fd:34:b4:d3:3f:9b:30:15:c2:98:7f:27:
         da:a9:81:40:b8:5c:10:99:d7:67:db:df:83:12:24:7c:3c:32:
         b9:99:2a:1a:b0:6a:0e:e9:ee:d1:ce:d4:60:59:42:4a:8d:e8:
         65:49:bf:79:f0:1b:a8:a6:ee:7f:50:8f:59:6b:85:d2:69:a2:
         e9:90:14:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:41 2025 by rpki-client