Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/3d6f486f-3da5-3554-aee4-3f1a62659f74.roa
File:                     3d6f486f-3da5-3554-aee4-3f1a62659f74.roa (raw, json)
Hash identifier:          1xY+iOI8dRISFE3pSi5+JUyx8uzUNLKA6/qfbFDSZBM=
Subject key identifier:   5B:A1:F3:B6:1A:BD:E5:4E:C2:CA:6C:53:3C:92:AE:B4:28:7D:55:10
Certificate issuer:       /CN=1140553e-654b-4538-9cd3-d94d30ee0482
Certificate serial:       010D0C9F4328584B8EACEFAEC5464536B4F8D500
Authority key identifier: 58:3D:4A:6B:4A:3E:7F:42:B3:36:1F:60:99:69:D0:A2:1D:19:71:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/3d6f486f-3da5-3554-aee4-3f1a62659f74.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     1734
IP address blocks:        2620:0:930::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/1140553e-654b-4538-9cd3-d94d30ee0482.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/1140553e-654b-4538-9cd3-d94d30ee0482.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:ef:ae:c5:46:45:36:b4:f8:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1140553e-654b-4538-9cd3-d94d30ee0482
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=d847d642-e576-49f9-93bf-080e799a3594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:83:63:15:aa:db:49:77:81:68:71:dc:4e:
                    61:61:30:f1:ee:2e:01:b7:5e:e7:6a:54:5b:64:2c:
                    61:4d:bb:8e:fa:ac:39:a2:9d:29:b9:d9:e5:dd:15:
                    7f:1e:92:d9:57:f1:2d:a2:88:cd:c9:58:e8:dd:87:
                    ba:0f:c5:25:e3:b0:e2:9b:90:fb:7e:cb:93:d7:f8:
                    58:1f:4a:f7:b0:77:3a:cd:21:33:1c:6c:89:c8:f5:
                    fd:41:3a:37:17:12:60:6d:a3:1c:9d:8a:54:5d:59:
                    3d:82:10:4d:12:e8:73:5c:25:5a:3b:e7:77:a3:bc:
                    7e:05:98:51:a1:6a:f1:f5:a2:94:88:43:34:78:be:
                    d4:35:23:79:a1:c9:7d:ba:e8:e9:4d:99:62:d4:df:
                    1e:30:0a:5f:2e:59:66:4f:0b:2c:48:67:3d:e8:07:
                    85:2b:0c:9e:a5:af:3f:a0:9f:41:47:a2:b7:bd:01:
                    90:4a:88:96:12:fd:06:17:c8:41:b8:3b:7d:09:dc:
                    b1:c9:58:00:60:1a:e3:55:ff:bd:70:83:1a:b4:95:
                    07:ba:0c:7e:56:1a:80:e8:fd:08:d0:c7:1e:89:e8:
                    39:e8:77:73:0a:60:8a:a0:4e:c4:3b:96:9d:72:c7:
                    8e:cd:f1:90:42:54:fa:34:23:c4:a8:ea:1a:3f:34:
                    db:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A1:F3:B6:1A:BD:E5:4E:C2:CA:6C:53:3C:92:AE:B4:28:7D:55:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/3d6f486f-3da5-3554-aee4-3f1a62659f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482/1140553e-654b-4538-9cd3-d94d30ee0482.crl

            X509v3 Authority Key Identifier:
                keyid:58:3D:4A:6B:4A:3E:7F:42:B3:36:1F:60:99:69:D0:A2:1D:19:71:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1140553e-654b-4538-9cd3-d94d30ee0482.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:930::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b2:e5:2a:09:8d:03:2b:c2:9d:bb:57:0a:69:0a:a5:c5:d6:
         a8:90:4f:c5:e9:f7:c7:7e:29:1f:eb:09:e1:cb:00:cf:5e:b8:
         aa:24:a8:f2:90:89:e3:99:23:c2:45:08:50:b9:a3:43:b2:c9:
         76:57:54:06:ae:ed:2f:d0:4f:3d:26:f5:69:9b:99:28:5d:0d:
         9c:69:cd:77:20:48:71:95:ac:34:a6:e0:cf:24:50:a8:15:d6:
         b3:42:e1:af:e0:f6:b1:52:06:4b:1d:25:31:96:4a:a5:2c:63:
         7a:dc:b8:a8:22:f4:ad:5a:53:4f:26:97:ae:dd:ba:a7:b2:8e:
         8d:fb:07:85:77:32:60:ba:9f:43:8c:ed:83:24:a0:2f:ff:2e:
         8a:db:f5:7e:fe:8b:4c:2d:0e:c7:76:2a:48:11:7e:22:f1:3f:
         cd:25:d3:41:4f:51:c6:06:10:27:1c:a0:5c:a9:cd:e5:5f:3a:
         3c:60:1d:a2:8c:af:93:c0:b5:fa:5e:ea:90:a9:6b:07:6d:48:
         6e:4e:e0:aa:71:6b:ee:44:8c:df:16:39:86:1b:22:9c:ed:d6:
         a1:9d:1e:ca:75:78:70:b9:bc:c7:ed:3a:26:f3:f8:1e:3c:f7:
         9c:75:9b:66:8a:53:a9:0d:cf:5a:20:d3:a2:cd:79:da:0f:04:
         4f:85:47:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:38:00 2025 by rpki-client