Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/1f55a889-9414-3f09-b1a1-20b5eefcbfff.roa
File:                     1f55a889-9414-3f09-b1a1-20b5eefcbfff.roa (raw, json)
Hash identifier:          ckWEGomnmUatgHd0LD6iByjwu181ecG2cuLUa0KJtUk=
Subject key identifier:   61:E6:69:D6:70:DA:7C:FE:29:F3:76:16:8A:DC:02:8B:DE:FC:17:39
Certificate issuer:       /CN=605ef18e-eb43-492e-a589-20f12375c0ce
Certificate serial:       010D0C9F4328584B87B21CE52B78B36F19338B00
Authority key identifier: E1:35:66:D1:EB:AB:AF:F9:00:4E:D5:E8:19:12:3D:95:42:12:5E:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/1f55a889-9414-3f09-b1a1-20b5eefcbfff.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     40785
IP address blocks:        2607:7040::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/605ef18e-eb43-492e-a589-20f12375c0ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/605ef18e-eb43-492e-a589-20f12375c0ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:1c:e5:2b:78:b3:6f:19:33:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605ef18e-eb43-492e-a589-20f12375c0ce
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=1d5a83a1-f8c0-4a68-be5f-8434291f422c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:51:2b:3a:e6:a2:b3:2f:7c:b2:9d:f0:96:
                    bd:cd:41:68:f4:0a:ae:96:08:85:4b:1b:d6:3b:b0:
                    3b:75:cf:e5:52:8e:92:10:d4:6f:2c:5d:a1:37:92:
                    43:a1:d5:00:97:2f:41:07:b1:1d:fa:49:f2:a0:b3:
                    1b:72:4e:79:a6:fb:e5:4b:ab:2e:df:e6:8f:1f:5a:
                    94:be:4c:56:ba:a5:d8:de:87:1f:ec:87:9e:d3:e1:
                    87:03:74:1e:97:ec:c0:de:dd:2f:6e:5c:ae:2d:6d:
                    30:74:4d:0d:8d:e8:56:10:d9:55:50:93:9d:e6:d2:
                    41:06:eb:a7:62:fc:d0:4a:d6:4c:49:60:b2:14:0a:
                    de:0c:b9:da:6f:2f:f0:b1:30:9e:db:33:e1:b1:d7:
                    ce:fb:29:a8:1f:30:05:6c:4a:fb:b2:d4:c8:5d:b1:
                    62:a0:92:be:bf:7c:24:94:d4:65:fc:d4:57:f1:5c:
                    53:2e:38:5a:a8:e1:a6:1c:cd:84:77:f4:6a:01:6e:
                    2b:7a:5e:29:f9:57:21:78:5a:7d:a5:ac:84:3b:4e:
                    b4:38:cc:eb:86:8f:f9:46:53:8b:43:5f:4c:58:79:
                    d4:b2:fe:28:aa:b2:09:5a:bf:47:d7:49:0f:e6:61:
                    cd:18:97:f3:b0:c3:1f:51:1d:c1:4a:17:09:90:a6:
                    de:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E6:69:D6:70:DA:7C:FE:29:F3:76:16:8A:DC:02:8B:DE:FC:17:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/1f55a889-9414-3f09-b1a1-20b5eefcbfff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce/605ef18e-eb43-492e-a589-20f12375c0ce.crl

            X509v3 Authority Key Identifier:
                keyid:E1:35:66:D1:EB:AB:AF:F9:00:4E:D5:E8:19:12:3D:95:42:12:5E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/605ef18e-eb43-492e-a589-20f12375c0ce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:7040::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:9c:35:80:84:65:57:4b:9b:2e:87:ce:bc:0b:13:98:48:8e:
         a4:ca:4b:88:d1:3b:98:7a:60:20:1f:16:5f:10:b6:57:56:bd:
         32:61:0d:d5:3e:73:4d:2a:bd:85:a9:ff:dc:96:20:7c:6a:ce:
         c9:6c:05:b8:f3:c6:1f:20:d8:91:f8:1d:89:cd:5b:bb:c0:f8:
         b6:c4:59:47:d6:8a:27:b5:b8:0c:17:18:df:9d:47:59:cf:6f:
         d1:27:7f:ae:6f:58:66:96:fc:fc:5e:81:db:9e:46:8a:9a:ca:
         2d:28:e5:8e:be:0a:56:9d:d0:e4:d2:f5:1b:39:d1:cc:21:c9:
         63:4e:d4:ac:56:59:29:fa:bc:18:d2:55:a2:cd:14:83:7f:6c:
         19:7a:80:33:c5:9a:0e:17:bf:22:6a:97:84:9c:c1:b9:9f:35:
         e8:71:fd:1b:8c:8d:c1:d7:a6:be:3b:91:7b:75:21:dc:81:16:
         9d:f4:e5:10:98:76:d1:5d:56:00:d6:cf:55:eb:bd:76:13:c1:
         a6:bc:20:fa:48:36:33:fb:77:8a:34:d4:ba:11:68:e5:40:72:
         7f:68:7d:e8:26:2e:54:39:31:13:f6:0f:22:03:9d:77:76:68:
         b4:ec:95:c7:f8:c7:27:f7:d5:07:c1:82:38:c2:45:43:c2:5c:
         ed:ba:9a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:24:20 2025 by rpki-client