Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/40378f11-a3e5-3530-9d69-2b7f814a3645.roa
File:                     40378f11-a3e5-3530-9d69-2b7f814a3645.roa (raw, json)
Hash identifier:          X1BTEJioYzIqf02zCZ+P7fnmmGY/xbt0Ua4GNK9gHlA=
Subject key identifier:   22:58:E0:5B:52:8F:73:8F:97:80:F0:13:CE:7E:5B:16:9D:CB:FB:AC
Certificate issuer:       /CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d
Certificate serial:       010D0C9F4328584B4D11CF6702CDF12EB001BF00
Authority key identifier: 6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/40378f11-a3e5-3530-9d69-2b7f814a3645.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     399240
IP address blocks:        2607:30c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:cf:67:02:cd:f1:2e:b0:01:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=5db65db0-e3e0-4927-bbd8-8fc763b1c87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:2e:0a:1e:71:8c:04:bd:99:14:28:f2:d8:
                    6d:51:12:f5:fd:c4:49:95:bd:d8:14:62:45:10:9e:
                    5d:0a:df:d0:01:f2:74:e3:01:c7:88:54:d0:20:23:
                    8e:09:1a:47:11:cc:a2:91:d2:96:fd:26:ce:3a:f2:
                    61:97:c0:36:33:7b:41:dd:e9:21:f6:49:11:90:bb:
                    e4:3d:6a:79:c7:d8:6b:57:cd:a3:0a:5f:ec:0f:7c:
                    e0:60:7f:72:e9:c3:a2:34:86:8f:a6:04:ce:c4:b4:
                    b9:f1:0e:35:23:b1:c6:9f:b7:e2:19:c9:24:c1:7a:
                    82:c5:32:0b:34:d7:81:18:bc:d5:8d:2f:9a:a6:2f:
                    6d:59:5d:a7:a8:8d:49:ed:b8:81:96:2a:63:a5:fb:
                    26:b5:65:19:5e:10:4e:1c:4c:eb:2b:fb:03:ff:02:
                    58:2b:08:d4:86:a9:5a:8c:a8:a9:32:af:cc:d0:0c:
                    2e:7a:46:0a:f8:e1:07:3f:27:67:2c:bb:c6:6a:65:
                    85:76:d0:33:f4:89:a4:53:6e:32:f4:db:92:3d:cd:
                    87:74:ea:73:8b:2f:84:ef:12:95:e4:a4:a4:71:79:
                    38:a2:ed:2a:12:7a:f4:34:31:8d:11:df:85:a4:27:
                    33:82:73:ad:02:1f:0f:2f:62:8b:83:86:ab:e9:9f:
                    f0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:58:E0:5B:52:8F:73:8F:97:80:F0:13:CE:7E:5B:16:9D:CB:FB:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/40378f11-a3e5-3530-9d69-2b7f814a3645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:30c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:8e:58:8d:18:af:aa:d0:4e:da:dd:ef:b0:be:fb:d7:36:66:
         51:5a:c1:a1:81:3c:e9:a6:02:53:2a:ee:65:c2:79:16:d6:ba:
         7f:1c:fb:52:51:f5:1f:9a:d5:b9:ab:ee:89:76:a6:8c:b5:d2:
         6a:df:47:6d:39:99:20:7d:17:32:5e:cc:9f:51:32:92:63:ec:
         8e:61:86:62:24:93:54:ab:8d:5d:84:23:8e:e4:d4:68:b9:3d:
         75:13:63:57:a8:5f:71:24:2d:c2:54:8f:0c:4b:4a:a5:56:2d:
         01:29:c3:6a:a8:3c:db:25:eb:87:65:e3:07:f0:73:f5:35:23:
         67:80:17:5a:46:18:35:98:d6:a1:d3:8e:0e:9e:30:f5:04:3b:
         fd:04:74:f2:74:3f:73:f0:71:8c:5a:e6:ed:68:34:a4:ca:ce:
         37:f4:f6:b9:d5:4c:13:d9:ca:a1:fa:70:b5:42:39:62:42:ba:
         a6:d8:38:70:dd:ef:8c:9f:68:24:a7:eb:7d:b2:ad:e5:60:47:
         00:a2:a6:98:00:6b:73:f2:68:7a:5e:ca:c0:51:49:b0:6d:e1:
         c4:bd:30:f0:c7:f0:8c:47:68:0f:b0:d8:a6:4b:3d:52:12:1b:
         45:c5:41:fb:df:11:5b:af:f1:70:9f:8a:e7:68:de:59:b7:6d:
         18:a1:ee:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:22:41 2025 by rpki-client