Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/7502d0a0-d0b5-3d22-a282-e63ade64fc0e.roa
File:                     7502d0a0-d0b5-3d22-a282-e63ade64fc0e.roa (raw, json)
Hash identifier:          XR97cLbBtGGimtcLdkvvGpjFsDgts6+1JAU/D7kkGPk=
Subject key identifier:   34:EB:C0:96:6A:53:73:3F:9F:5D:CD:54:80:D1:09:F5:29:DA:C9:BE
Certificate issuer:       /CN=66580030-eaac-4617-b624-3b0a2974a04d
Certificate serial:       010D0C9F4328584B76F22D0C023677F868C33140
Authority key identifier: 7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/7502d0a0-d0b5-3d22-a282-e63ade64fc0e.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     23352
IP address blocks:        2607:4440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:2d:0c:02:36:77:f8:68:c3:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66580030-eaac-4617-b624-3b0a2974a04d
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=be1360df-571e-4987-994a-d228ff0860ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:84:82:f8:af:b3:c3:69:9a:ca:99:17:64:83:
                    66:d8:0d:e3:04:93:37:1f:30:cf:ba:ac:9d:e6:df:
                    cd:80:3e:99:3c:e5:13:04:92:17:f8:12:e1:c1:d7:
                    83:e5:40:af:2e:cc:49:67:4d:e3:ed:6e:64:15:0a:
                    df:bb:5a:32:83:85:bb:3f:bc:ce:c3:7a:d0:f3:d5:
                    cd:eb:9a:91:08:fe:8f:6f:62:b7:60:29:53:08:5f:
                    8f:af:26:92:a2:d9:c9:84:2d:03:4e:f0:d3:56:38:
                    3f:3f:38:9e:7a:e0:db:1b:0a:1e:dd:dc:2f:32:82:
                    be:2a:13:fa:a8:dc:e2:c5:ef:c1:32:37:ef:f5:1b:
                    83:a4:45:09:87:a2:4e:80:73:b7:bb:b2:0c:fa:85:
                    ec:38:cc:50:3a:e6:db:8e:2a:aa:f3:23:1f:a7:51:
                    28:0e:f7:f6:9c:63:5c:6d:33:44:36:3a:81:d7:4b:
                    bf:6b:c0:9d:43:83:eb:a6:8e:04:0d:56:d9:a4:13:
                    14:a5:47:b6:8d:14:7d:3b:3d:77:2c:9d:44:22:1b:
                    a4:51:63:d8:16:6a:03:22:49:3d:bc:7a:66:99:b0:
                    33:de:bd:5b:05:22:be:cc:55:75:13:3b:bd:65:cb:
                    a7:b9:05:43:64:2e:1c:88:b9:f8:0c:a6:b9:db:56:
                    23:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EB:C0:96:6A:53:73:3F:9F:5D:CD:54:80:D1:09:F5:29:DA:C9:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/7502d0a0-d0b5-3d22-a282-e63ade64fc0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.crl

            X509v3 Authority Key Identifier:
                keyid:7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4440::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:3d:62:0c:6d:f7:3a:4f:bf:e3:f6:1a:4a:b4:bf:af:fb:c9:
         e4:45:3b:ff:a2:82:db:f1:6b:84:11:32:84:d3:9f:c2:a1:39:
         cd:a5:00:95:89:74:8b:85:36:e0:56:f3:8d:70:a5:9a:87:68:
         09:c1:94:c1:ad:32:e5:2f:9c:05:0f:4e:6a:d3:c1:6d:6f:28:
         29:a3:90:10:75:e4:19:31:ba:84:0b:fe:3b:f0:e0:ef:24:bf:
         38:7e:89:ba:91:55:24:3b:18:33:34:62:09:ed:f9:4e:cb:38:
         7b:91:a0:08:e6:f5:9a:7c:07:fb:ff:54:69:23:41:cc:a5:97:
         ab:fb:6a:15:b9:25:d3:d9:a1:09:41:d7:15:79:0d:d8:8e:c7:
         63:bb:39:04:f7:f5:4c:88:c4:ea:6b:bc:3b:34:51:a2:fe:c0:
         9a:06:47:20:19:ce:9d:9d:eb:84:8a:f2:86:25:e6:b8:da:94:
         2c:36:a0:df:9a:1b:77:b8:98:84:99:f4:75:4e:19:5b:80:c5:
         31:16:fd:22:73:0e:58:c5:9f:6e:6b:7f:0f:13:34:76:0a:5f:
         21:1f:b7:95:56:74:fb:bc:6c:8f:1d:6f:56:a3:69:d5:74:6c:
         74:59:93:b0:3f:49:79:88:f8:94:ad:78:ba:33:ba:1a:ca:04:
         03:f6:46:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:31:32 2025 by rpki-client