Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/878804ae-2c92-32cf-a079-f9b1123410d3.roa
File:                     878804ae-2c92-32cf-a079-f9b1123410d3.roa (raw, json)
Hash identifier:          MjSB/T5P2Zd95E83WRk346sga/RAZzp/kr82AezLTws=
Subject key identifier:   07:66:C6:31:C1:1A:6B:F7:A8:3F:66:9D:32:BA:0B:EA:BC:1F:4A:F7
Certificate issuer:       /CN=95461742-42f0-4cce-8182-baf4cdd0bf5d
Certificate serial:       010D0C9F4328584B16A16F3A86C51E001E764F80
Authority key identifier: F9:FA:06:67:CA:72:8E:83:22:19:F0:C1:E4:03:6E:D5:98:B6:03:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/878804ae-2c92-32cf-a079-f9b1123410d3.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     393657
IP address blocks:        2620:13b:a000::/44 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/95461742-42f0-4cce-8182-baf4cdd0bf5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/95461742-42f0-4cce-8182-baf4cdd0bf5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:6f:3a:86:c5:1e:00:1e:76:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95461742-42f0-4cce-8182-baf4cdd0bf5d
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=d97b4385-3703-4789-9ede-f9e2506970ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:42:18:f7:e8:99:c1:e3:22:fc:3e:08:86:ad:
                    02:63:52:76:fb:dc:7f:fe:b1:1f:f1:c4:2f:38:e8:
                    01:ea:c6:5f:e9:69:36:e4:95:6f:67:84:05:51:b7:
                    17:2f:4d:a6:23:da:b9:da:94:f9:73:00:62:02:06:
                    48:43:43:44:b6:07:6b:6e:5c:e6:a2:d9:77:ab:13:
                    44:c4:89:62:1b:d7:6a:8f:ab:3c:00:74:46:f2:5e:
                    97:47:b1:41:51:19:52:75:18:af:c7:4b:c2:c1:71:
                    a2:70:e2:48:be:6b:d1:ce:0a:6e:38:f2:52:dd:64:
                    65:56:f8:18:5f:5a:23:7e:56:65:cd:10:f8:ac:df:
                    d4:df:64:5f:d2:35:04:09:a3:ba:1e:38:21:6a:57:
                    11:82:f2:87:da:f4:4d:1d:6d:a1:0c:73:ae:a3:ff:
                    d4:a5:ef:da:1a:78:2a:c2:55:05:22:92:dc:2b:58:
                    36:2b:0f:d6:c7:26:ac:c5:1d:ea:2b:65:2d:97:8d:
                    cd:c1:d8:6e:b2:d2:21:50:b0:f8:08:fb:ed:94:24:
                    d0:af:a2:7e:e8:4c:8c:95:dd:7f:2b:b5:7e:46:38:
                    58:f7:78:b0:f7:cb:8e:4c:21:37:db:b1:ec:91:83:
                    37:72:7c:6e:47:5d:1d:46:b5:7d:cf:50:b9:29:7a:
                    c4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:66:C6:31:C1:1A:6B:F7:A8:3F:66:9D:32:BA:0B:EA:BC:1F:4A:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/878804ae-2c92-32cf-a079-f9b1123410d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d/95461742-42f0-4cce-8182-baf4cdd0bf5d.crl

            X509v3 Authority Key Identifier:
                keyid:F9:FA:06:67:CA:72:8E:83:22:19:F0:C1:E4:03:6E:D5:98:B6:03:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/95461742-42f0-4cce-8182-baf4cdd0bf5d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:13b:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:81:c4:e5:a5:57:d1:33:8a:7e:5a:ba:77:73:0b:ae:6c:90:
         0f:72:89:5f:b8:b8:a1:4c:0f:89:ed:42:2f:c8:2c:c9:ba:42:
         e3:87:85:e0:82:4f:c9:b2:f5:3c:c8:3e:ef:5b:e7:6e:63:42:
         54:c3:c2:ea:f9:ac:34:76:39:fa:16:1a:e7:04:ec:d1:a9:ea:
         93:26:a8:20:5c:f7:f1:56:85:a8:fd:84:f1:20:77:57:1b:81:
         14:0e:9f:77:1d:5a:ae:78:2e:e1:60:2e:40:4a:86:8d:bf:71:
         b7:3c:3d:a4:c3:67:88:20:3a:8a:ba:b4:34:8e:fb:7f:79:5a:
         d5:b5:9b:0a:ef:90:c2:79:fd:74:59:c8:68:a5:53:bf:4f:e6:
         aa:30:6c:92:b0:6e:9d:4d:f5:6f:90:dd:c6:4d:04:5f:0b:70:
         06:6c:a9:8a:8a:4c:7a:01:5a:02:7a:d9:1f:c1:2f:ad:e3:ad:
         fb:dd:8c:37:1e:6e:71:d6:f1:5e:09:92:ba:97:e6:70:c8:0b:
         be:ac:9c:ea:a1:2b:89:f4:64:b4:8c:a9:10:eb:95:dc:cc:1c:
         57:b2:5e:d6:7b:67:d9:c4:8a:3d:17:c6:be:05:6e:b7:4e:2c:
         7f:f1:27:a5:ae:91:e0:9a:9d:db:43:7e:47:eb:7c:2e:03:a5:
         fb:42:b7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:09:23 2025 by rpki-client