Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/a546cbb8-2a70-392d-873e-3968c05e710f.roa
File:                     a546cbb8-2a70-392d-873e-3968c05e710f.roa (raw, json)
Hash identifier:          QXWyFcICM/mLxYVRCrH/F08bmBqQ1XOQl+B0Q1GhZzg=
Subject key identifier:   65:DD:C0:79:A4:74:E1:D3:96:B7:77:75:6D:01:65:EF:B4:02:32:F9
Certificate issuer:       /CN=6e10601c-e280-4510-9d84-b6d2b02b8446
Certificate serial:       010D0C9F4328584B6631FFFB3BCBF5F2288E19F0
Authority key identifier: 4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/a546cbb8-2a70-392d-873e-3968c05e710f.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     393397
IP address blocks:        2607:8c80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:ff:fb:3b:cb:f5:f2:28:8e:19:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e10601c-e280-4510-9d84-b6d2b02b8446
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=441e181e-e663-41be-b104-f0cf1fbfc158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0b:d2:3a:06:ed:80:50:1f:c3:98:9a:f5:b7:
                    98:c2:ea:aa:60:ca:17:c9:c8:c2:8e:34:f5:2b:82:
                    9c:3f:d1:d2:03:e0:57:d0:59:cc:16:00:d2:b8:ba:
                    fd:a4:2d:81:98:f4:b9:e8:02:dc:cb:38:6e:95:43:
                    21:4b:10:90:50:48:a2:41:9e:ce:9c:26:05:61:82:
                    a1:cc:2f:69:7e:f4:88:34:88:a9:95:65:07:82:66:
                    29:51:c3:36:31:c8:e8:08:06:08:c4:de:ed:e1:d0:
                    63:62:37:4e:9b:bc:6e:5b:c8:41:f7:c9:61:39:a5:
                    31:99:e7:3d:3b:e3:81:07:bd:b3:66:e4:e3:5b:8c:
                    e8:f8:b4:82:95:b4:39:26:d3:41:cb:e3:e0:f6:2d:
                    2c:e6:fc:1d:2d:1b:70:13:2d:ca:b1:c1:d3:d6:6e:
                    6f:03:18:a7:e7:f5:d2:2e:c9:66:d7:8f:43:ef:9f:
                    0b:fa:15:e1:68:02:b6:86:79:15:44:4c:a7:11:2d:
                    d5:f2:61:36:cb:2a:d7:32:cd:de:12:ce:fc:a9:cd:
                    6c:d8:82:fa:8a:fc:3d:51:81:72:e6:13:e7:ed:e6:
                    8f:26:8f:1e:83:83:47:9f:d3:a0:aa:35:c4:94:4e:
                    0d:2c:d1:51:9f:0f:20:b4:0c:85:33:0e:cb:73:47:
                    5a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DD:C0:79:A4:74:E1:D3:96:B7:77:75:6D:01:65:EF:B4:02:32:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/a546cbb8-2a70-392d-873e-3968c05e710f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446/6e10601c-e280-4510-9d84-b6d2b02b8446.crl

            X509v3 Authority Key Identifier:
                keyid:4E:ED:44:97:58:9A:1C:39:9A:33:B8:A5:80:07:96:D7:83:3A:8A:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6e10601c-e280-4510-9d84-b6d2b02b8446.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:37:9d:5f:07:ea:dd:ba:d3:6c:22:41:3b:96:2c:d9:00:08:
         14:fe:52:96:b8:1e:6d:88:ed:06:8d:25:0d:d5:2b:4b:5d:1d:
         89:76:25:62:b1:f5:92:fa:1d:51:56:16:c9:fb:cf:32:48:89:
         02:f5:50:81:02:20:45:43:28:36:d4:47:82:b0:df:6c:6c:17:
         b2:8b:1c:1c:2b:11:24:2f:09:d9:6b:65:89:84:79:b8:e3:b5:
         81:9d:41:1b:88:76:83:9d:b5:a8:65:f0:d6:11:c8:77:e9:7c:
         2a:f3:53:e6:5f:d2:52:da:91:43:4f:ad:35:67:7f:bc:fe:82:
         99:d8:3c:9a:f5:95:3b:67:40:88:f0:7a:09:2f:d2:ee:2a:28:
         5a:53:a0:22:84:73:62:f8:f9:6b:db:26:50:d4:c3:ba:d1:48:
         69:e9:f5:f5:69:90:df:2e:06:38:e2:b7:a1:6c:e0:d4:52:79:
         be:29:b7:9c:7c:d1:27:29:b1:e8:fd:27:c5:ed:2f:be:01:ec:
         98:54:2f:05:42:65:fa:ca:83:88:c3:d5:e3:f3:00:e8:63:16:
         18:d2:76:08:a5:84:db:51:09:33:bc:52:9d:80:c5:6f:95:ec:
         e8:3a:01:1b:6d:6c:ce:0e:4c:a3:fc:9d:9a:39:6d:a9:ab:19:
         54:60:74:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:02:00 2025 by rpki-client