Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/815ab228-9852-3ed0-9895-370b10b598b0.roa
File:                     815ab228-9852-3ed0-9895-370b10b598b0.roa (raw, json)
Hash identifier:          g1dxbTJcfG8SpHGOnvGcFnRrZgp9gYH1JUrMKYMiL/0=
Subject key identifier:   97:BD:20:0B:D4:CF:FE:22:36:57:9A:11:82:34:01:25:74:9F:54:CD
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584B838216FB857104AEF051BAE0
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/815ab228-9852-3ed0-9895-370b10b598b0.roa
Signing time:             Tue 14 Oct 2025 01:00:30 +0000
ROA not before:           Tue 14 Oct 2025 01:00:30 +0000
ROA not after:            Mon 12 Jan 2026 02:00:30 +0000
asID:                     400196
IP address blocks:        2607:8240:f11a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:82:16:fb:85:71:04:ae:f0:51:ba:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Oct 14 01:00:30 2025 GMT
            Not After : Jan 12 02:00:30 2026 GMT
        Subject: CN=561edccb-4d01-4e06-99a0-b8efae8df23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:d3:37:b2:0e:ef:52:05:55:75:02:55:ec:
                    fc:ec:37:28:55:a1:a0:a4:7b:06:9d:4b:f1:d6:ff:
                    2d:c1:c5:8f:f2:5e:41:10:53:6b:ab:07:ca:44:2e:
                    79:63:7c:b7:1e:7b:b3:a0:d7:a4:ed:90:13:a6:f8:
                    8b:01:a9:1b:40:40:d7:9d:98:09:3a:05:07:a3:6e:
                    9e:91:09:4f:6f:6a:f0:1b:e0:35:25:6b:6f:9b:69:
                    b7:29:4a:67:34:b6:d1:53:01:93:60:68:d1:34:d6:
                    ab:96:b7:32:d5:2e:18:90:8d:fa:db:d1:f5:fc:cc:
                    85:a9:fb:bc:a4:44:d3:cb:44:41:21:d9:e4:a3:b1:
                    9f:e3:ca:a8:c2:74:73:9b:24:a8:87:46:44:5f:a2:
                    f6:7f:d4:dd:0f:f1:12:9e:25:2c:0e:f0:3b:d9:ca:
                    14:64:60:25:ca:a5:57:bd:73:e0:9a:09:a6:a1:37:
                    e9:10:20:91:af:39:d2:22:15:f0:6a:cd:05:60:d0:
                    48:0e:68:92:21:56:9b:e3:50:51:80:b9:15:a9:da:
                    76:9c:66:0d:9c:b0:d0:5a:e8:aa:43:e8:47:a5:67:
                    49:31:58:98:db:38:54:9d:30:65:71:f5:1d:e4:6f:
                    6c:07:14:89:de:f4:3e:93:fd:da:ef:79:42:eb:04:
                    9d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BD:20:0B:D4:CF:FE:22:36:57:9A:11:82:34:01:25:74:9F:54:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/815ab228-9852-3ed0-9895-370b10b598b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8240:f11a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4b:cd:52:5e:0b:bf:11:5f:53:c5:b9:54:ae:09:35:66:cb:
         8c:f3:64:f7:74:f7:e8:9f:0a:30:50:7a:f4:80:09:bf:4f:a5:
         e8:ae:3e:6d:f4:c0:db:33:07:48:b4:5a:e9:5d:30:aa:24:85:
         83:22:93:0c:f9:b7:5b:f4:e7:9a:0f:44:9d:54:85:f1:34:50:
         cf:49:b3:e2:5a:ff:55:65:c3:ba:18:b1:64:8d:e2:17:92:ac:
         9d:1f:02:49:55:3f:5c:8e:23:df:17:07:84:1e:95:92:2f:d4:
         64:bf:ee:a5:2b:4a:b6:50:b5:8f:38:d9:42:77:6d:f6:9c:86:
         b9:25:82:09:d4:2b:5a:33:3e:00:f1:bf:28:31:11:53:eb:bd:
         60:07:d8:fe:01:1d:a1:a0:78:66:9f:77:28:36:90:fa:13:11:
         13:15:bf:7f:ed:20:17:fc:94:28:b5:cc:d7:29:cc:54:2b:ec:
         41:db:a4:25:73:53:03:3e:e0:60:82:c8:d4:af:bb:d5:e7:fb:
         fa:7d:9c:db:72:f2:dc:38:ee:ac:71:65:8d:48:c0:54:15:20:
         44:7b:02:6f:e3:86:80:79:37:20:0b:ee:61:2e:93:d0:be:34:
         a8:6e:74:e3:8d:34:1e:3f:80:f7:b5:2b:d3:0e:cf:44:76:5f:
         68:ba:ff:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:28:02 2025 by rpki-client