Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/253cdd3a-36e0-3298-9d6b-13208042593e.roa
File:                     253cdd3a-36e0-3298-9d6b-13208042593e.roa (raw, json)
Hash identifier:          ZuTajaN7fPfAsvowfk6+nm77fkK2tQC3NHRknf6O8dA=
Subject key identifier:   95:DD:CA:6E:07:F9:5E:83:38:19:F5:62:E8:76:F6:B1:D5:8E:7B:B7
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F4328584B2A2C2DC4D0C24D27BF11A400
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/253cdd3a-36e0-3298-9d6b-13208042593e.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     55163
IP address blocks:        2620:109:c006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:2d:c4:d0:c2:4d:27:bf:11:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=efd2a198-2f6b-4cd5-bd4f-763fa6e7df2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:17:6c:4d:b8:c1:d7:3c:2f:3c:bb:d0:d2:1c:
                    e8:4c:39:b4:0c:3a:ee:2f:93:36:a7:bf:94:6b:a7:
                    e1:29:5f:08:98:55:6b:6a:89:86:a3:8b:0e:7d:e2:
                    6e:42:97:cd:32:e6:f9:da:c0:37:b5:02:55:b6:9a:
                    6c:3a:27:db:26:c7:2e:2a:ca:ab:55:0c:91:53:f3:
                    98:13:88:fa:69:79:7d:0d:a2:63:54:e0:cb:e5:5f:
                    af:05:8e:85:af:a4:50:59:f5:47:21:0e:f6:cc:01:
                    bd:95:1e:a9:e5:4f:5c:1f:d2:0a:35:c5:7e:c3:9d:
                    a0:f1:47:25:39:be:18:1e:7d:b0:2b:f7:e3:7e:6b:
                    80:ae:bb:4f:e5:04:eb:e2:d5:e5:d3:b3:0d:2b:da:
                    43:67:59:8e:32:1a:7b:51:f3:2b:5d:0a:88:78:0c:
                    1a:75:2f:d0:44:dd:a4:8c:96:f9:8d:5b:ff:0d:60:
                    ba:c2:39:b3:5d:d3:9e:74:9e:bd:58:19:30:11:a8:
                    6c:4a:41:d4:c8:ee:3f:fe:69:28:69:06:0d:13:15:
                    eb:7f:85:89:62:1e:b3:72:4b:ff:c0:c1:81:59:4b:
                    b2:d0:d0:e7:d5:ac:13:b2:6c:df:7f:a7:48:66:95:
                    e1:e6:dd:ac:01:9d:ef:4c:cd:4e:18:a2:88:a0:87:
                    59:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DD:CA:6E:07:F9:5E:83:38:19:F5:62:E8:76:F6:B1:D5:8E:7B:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/253cdd3a-36e0-3298-9d6b-13208042593e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:109:c006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:6c:16:71:e4:77:af:85:c3:c1:45:a7:c5:ec:0e:03:78:7d:
         1f:1e:7b:32:cd:81:8f:d3:66:a6:2d:e9:9e:d1:ec:79:70:02:
         75:01:e0:64:f7:e7:e1:fb:6e:50:8a:05:8f:7d:82:07:0c:f6:
         e2:fe:76:1a:81:0f:c0:93:9d:38:c9:b3:a6:62:02:35:9b:3d:
         17:09:1a:e9:01:52:eb:2f:7f:22:96:8c:09:44:92:42:06:cb:
         f4:f4:af:7c:1c:77:4d:af:77:07:a1:26:1b:03:93:0a:e8:53:
         f7:c1:b6:a1:eb:c4:2d:2a:b5:9f:34:c3:9f:f7:54:a2:72:fc:
         3f:ce:7f:4a:33:36:66:c4:a4:25:6a:9b:08:8a:dc:4a:9d:cb:
         b8:c4:df:f7:d3:00:f1:58:33:72:76:32:52:45:cc:34:73:0d:
         b8:59:24:c0:f4:75:b7:eb:f0:44:a8:5c:e9:df:8b:0b:67:50:
         d8:8d:01:06:6f:3a:e4:bb:fa:85:74:29:d2:dd:2a:a6:e8:2b:
         4e:30:b7:d7:0e:e6:e0:f0:53:06:35:4c:e2:a7:dd:60:88:c7:
         23:60:0b:22:c2:85:48:6c:3e:8c:49:ed:a7:53:ed:ac:8a:82:
         ea:a6:f8:e4:ba:08:e1:72:ba:1e:a4:03:46:31:57:4a:a5:10:
         09:5c:92:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:17:53 2025 by rpki-client