Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/11120825-5189-3b60-a824-409b27b06056.roa
File:                     11120825-5189-3b60-a824-409b27b06056.roa (raw, json)
Hash identifier:          BsjdJjjJIyzYKE22kt4QdTrpe3qvuWr15tP/NQYgdak=
Subject key identifier:   F9:25:46:B0:3A:0E:C7:D8:4A:51:EC:FA:AC:2A:CA:15:94:37:80:47
Certificate issuer:       /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
Certificate serial:       010D0C9F4328584B7C876339DC1F512220429780
Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/11120825-5189-3b60-a824-409b27b06056.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     14397
IP address blocks:        2605:c180::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:63:39:dc:1f:51:22:20:42:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=9238985b-b7c8-434c-931c-4c0ca5395844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:21:93:88:c4:60:29:ec:ff:25:be:92:bf:dc:
                    de:a9:8b:7e:15:25:94:85:e3:96:2c:d2:1e:55:7c:
                    87:0f:c8:7b:ea:f5:c6:a0:20:bc:f8:f8:2f:f5:62:
                    da:40:31:9f:fd:fd:9d:98:32:0b:1f:8f:9b:42:3e:
                    09:bd:4a:a6:ea:69:5b:32:0c:ae:f5:52:27:7b:cb:
                    1f:18:ca:dc:5e:3a:5c:bf:a2:92:0f:45:95:1e:d5:
                    41:f1:24:52:0d:f4:03:ea:d6:f4:3c:f5:b1:85:85:
                    1e:5e:6c:5e:50:6b:18:cf:42:80:73:51:0b:a7:c9:
                    1f:12:82:02:25:09:48:e0:bc:44:a9:67:0a:78:54:
                    2f:14:f9:9a:bb:09:d0:fd:88:13:bd:3d:fa:6b:a0:
                    05:5f:a9:9d:e4:32:f1:d1:12:13:7e:31:db:fc:1a:
                    0a:5e:44:30:2d:36:24:80:f4:2a:6f:63:b1:43:01:
                    10:0f:67:c9:c2:af:87:f7:24:12:73:d6:31:c0:e5:
                    39:df:1a:25:88:d4:c8:29:e2:12:27:0a:0b:78:ae:
                    ae:5e:f4:10:74:25:81:ee:88:74:3c:1b:1a:e9:8a:
                    7c:ad:8f:b1:5c:f7:90:7b:62:e5:1f:2f:78:75:01:
                    41:37:fb:c3:1e:5c:8c:5d:ec:c6:a6:0a:96:42:2d:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:25:46:B0:3A:0E:C7:D8:4A:51:EC:FA:AC:2A:CA:15:94:37:80:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/11120825-5189-3b60-a824-409b27b06056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl

            X509v3 Authority Key Identifier:
                keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:c180::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c7:08:b4:91:50:73:03:e9:51:99:51:0a:5d:b6:6d:96:34:
         63:49:16:32:cd:b3:e3:41:07:f4:7a:24:95:7d:2b:1d:cf:c3:
         e5:51:0b:65:e1:82:55:51:fc:95:48:29:65:90:d6:7f:1f:f8:
         2e:e3:c0:aa:b6:3a:ea:68:e0:09:44:2f:73:37:d2:56:77:56:
         89:b6:e8:f3:b1:28:7c:ef:ef:24:5e:04:8e:d1:20:32:bb:cd:
         99:25:5a:e8:c0:33:c4:9f:52:d4:6d:c9:91:fc:11:70:e5:e8:
         88:e9:ed:b4:e5:fb:75:e1:80:44:4d:a0:64:a2:cd:6e:76:d4:
         8b:20:b8:fc:4e:4e:2a:07:60:b0:dd:ea:3b:50:bf:ea:17:53:
         e4:58:5a:a2:6a:32:69:a7:67:3a:ce:ae:ed:43:8c:df:29:3d:
         17:04:96:17:35:e5:dd:1d:78:17:3a:71:f2:5a:de:0b:73:54:
         90:d2:06:51:64:0c:3c:38:c1:46:29:9e:b1:f1:f0:0c:6b:f6:
         6a:f4:ae:07:e8:04:f2:d0:e9:9a:e7:86:25:87:e9:89:5d:9e:
         0c:e1:72:d6:e9:e4:30:53:da:21:6f:02:45:aa:4b:ee:5f:60:
         1c:75:35:93:0e:54:72:08:e4:49:d7:dd:b1:28:57:56:2e:9a:
         56:33:5a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:13:45 2025 by rpki-client