Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/8b2e445b-8765-31b3-b75e-898434dda7ed.roa
File:                     8b2e445b-8765-31b3-b75e-898434dda7ed.roa (raw, json)
Hash identifier:          SXLwVFjtOoSrxCqZddPrGv0KNmN+nTX4wHFGdipct4w=
Subject key identifier:   0C:AD:DF:83:07:B4:7C:A9:72:25:44:78:2E:11:E3:E0:A9:9A:23:AD
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584B944224739DEE6D1EEF7BF280
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/8b2e445b-8765-31b3-b75e-898434dda7ed.roa
Signing time:             Mon 20 Oct 2025 01:00:31 +0000
ROA not before:           Mon 20 Oct 2025 01:00:31 +0000
ROA not after:            Sun 18 Jan 2026 02:00:31 +0000
asID:                     395092
IP address blocks:        2607:a680:21::/48 maxlen: 48
                          2607:a680:22::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:94:42:24:73:9d:ee:6d:1e:ef:7b:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Oct 20 01:00:31 2025 GMT
            Not After : Jan 18 02:00:31 2026 GMT
        Subject: CN=6f97a6d9-a600-42be-8c59-3f11a0f830bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c0:59:29:cf:3e:87:c1:9e:57:51:41:2a:51:
                    17:a0:55:ea:48:25:14:b9:84:ff:3e:e1:62:f3:50:
                    40:46:70:1c:b3:e8:be:33:70:48:a6:1b:bf:f4:86:
                    c9:80:53:f2:e4:0b:66:6d:cb:7d:77:1f:79:73:1c:
                    08:d0:f5:c1:8c:61:a7:55:01:ab:42:7f:17:04:71:
                    17:66:66:bd:50:13:c4:c2:2a:1e:41:cd:4f:df:9a:
                    b0:1f:6c:d2:4e:df:27:59:e5:8e:ac:bd:59:54:ba:
                    f2:83:d9:87:da:20:87:95:92:05:8e:65:d4:76:13:
                    0b:07:58:77:17:84:cb:88:37:58:93:c3:69:90:23:
                    79:79:13:bd:81:0e:f7:3d:ee:b8:ee:85:1b:69:1a:
                    58:f2:7c:2d:20:a7:6e:bc:2c:14:72:7b:51:bc:d7:
                    33:03:87:4b:c4:ad:a9:a7:5a:a1:30:f0:0f:64:26:
                    46:f0:1b:7d:78:83:20:13:fb:da:2c:6e:45:c0:c5:
                    ff:94:a7:ab:69:78:b8:35:a7:ec:23:a6:c0:85:cf:
                    5f:d1:81:57:b3:e0:5f:32:21:89:a2:79:66:da:4e:
                    5e:0f:06:b0:6b:2a:da:12:67:0b:ab:13:9c:d7:0a:
                    10:e3:d3:25:28:1e:61:2d:a7:74:e4:21:16:e2:19:
                    5d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AD:DF:83:07:B4:7C:A9:72:25:44:78:2E:11:E3:E0:A9:9A:23:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/8b2e445b-8765-31b3-b75e-898434dda7ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a680:21::-2607:a680:22:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:81:0a:0a:29:2d:76:9e:e0:8d:66:1e:42:5c:18:6e:b2:4d:
         d1:54:33:83:5f:9a:ba:a9:30:36:f3:ea:b1:62:ab:4f:68:72:
         a0:57:5b:c1:ff:4d:5a:63:f6:44:a9:72:78:f8:c0:37:df:ed:
         7e:39:dc:13:db:c3:4c:43:24:70:f7:c1:f8:3c:82:6f:8a:1b:
         81:0c:69:87:27:2c:58:1d:2c:0a:f7:99:ae:d0:20:65:f7:8e:
         0a:02:a9:25:c3:97:3c:fb:98:37:52:e8:37:db:94:29:55:38:
         3a:bf:76:f0:ea:43:ea:9e:a5:6f:56:3a:9c:79:1a:70:8b:ab:
         4b:53:8b:69:80:cb:e8:f0:63:52:b0:6a:c0:be:05:21:89:b7:
         87:62:fa:3c:2d:c3:f0:fa:dd:88:40:7e:a2:6b:57:06:27:9d:
         e7:67:23:2e:6a:0a:42:28:4e:4c:7a:25:a5:4c:8e:4b:20:db:
         19:b9:c9:3f:ad:90:82:8f:26:9a:a6:d9:c2:92:fe:9a:4e:d0:
         f6:6e:18:3f:9b:ed:2d:11:28:d5:c2:35:5b:36:85:14:7a:a0:
         c7:5e:7a:d5:19:1d:ce:64:c3:b9:30:b1:c2:b2:d5:a6:85:b6:
         6c:ac:ab:1c:84:2a:bd:ff:0b:52:60:c1:ca:54:8f:da:b2:ed:
         46:dc:3b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:14:16 2025 by rpki-client