Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/c941777b-4f01-3cf0-b2b2-6392b9825a72.roa
File:                     c941777b-4f01-3cf0-b2b2-6392b9825a72.roa (raw, json)
Hash identifier:          sWhxCbIb7Fz8SRclcFvNZAR11WfOow0O8/IE/HUkzDQ=
Subject key identifier:   FE:03:4A:35:5C:53:28:35:47:0A:E8:78:58:40:A4:71:5C:FF:56:B5
Certificate issuer:       /CN=4e5cccc9-30d7-416f-83cb-af13d1079fb3
Certificate serial:       010D0C9F4328584B41E717B4F55F6D61AF18EF00
Authority key identifier: A7:7D:99:20:83:4D:A0:3A:06:B7:F7:9A:D6:D7:9C:D5:69:9E:E0:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/c941777b-4f01-3cf0-b2b2-6392b9825a72.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     397735
IP address blocks:        2606:3740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/4e5cccc9-30d7-416f-83cb-af13d1079fb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/4e5cccc9-30d7-416f-83cb-af13d1079fb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:17:b4:f5:5f:6d:61:af:18:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5cccc9-30d7-416f-83cb-af13d1079fb3
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=3f898099-c22e-4562-b12c-64bab1e00a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:89:7d:94:e4:9f:d8:f8:6f:b5:ee:7d:42:91:
                    b1:af:8e:6f:24:77:8d:2a:8e:ba:ad:43:c7:0b:0e:
                    18:41:3f:78:51:54:41:3a:06:a6:13:2f:dd:27:ed:
                    1b:1b:da:fc:03:f9:d2:e3:3a:c6:c5:6d:23:d3:f9:
                    cb:e6:ee:47:5d:f2:5d:9a:90:5a:30:90:8b:c3:f8:
                    6d:a4:0a:18:0e:a2:f7:77:a8:81:06:eb:36:49:c8:
                    3c:18:08:8a:f2:92:46:e5:f7:ae:45:b7:f8:52:59:
                    98:db:33:57:6e:7f:e1:17:58:a4:10:0e:cc:ea:95:
                    0a:16:4b:d7:6a:9a:1e:3f:1c:a6:3c:13:1b:13:ba:
                    96:ca:57:25:e9:e7:fe:41:fd:84:85:36:3c:8c:4e:
                    93:ef:68:ab:8c:ae:52:6c:74:ef:51:01:f2:ab:cb:
                    7f:11:12:a6:5a:a8:95:25:a0:67:87:ec:4a:7c:02:
                    77:5d:a0:3f:0f:09:25:86:40:70:f4:cf:1a:86:db:
                    21:2f:92:da:d4:ba:35:26:0e:da:11:15:1a:cd:0f:
                    e9:38:42:5c:0b:b2:68:aa:01:10:90:86:1e:f9:ac:
                    08:9d:f1:f6:9d:cb:43:d5:e0:03:45:7d:69:81:7f:
                    2d:c4:51:e1:da:92:c7:03:e9:a2:f0:19:6f:54:85:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:03:4A:35:5C:53:28:35:47:0A:E8:78:58:40:A4:71:5C:FF:56:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/c941777b-4f01-3cf0-b2b2-6392b9825a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3/4e5cccc9-30d7-416f-83cb-af13d1079fb3.crl

            X509v3 Authority Key Identifier:
                keyid:A7:7D:99:20:83:4D:A0:3A:06:B7:F7:9A:D6:D7:9C:D5:69:9E:E0:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e5cccc9-30d7-416f-83cb-af13d1079fb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3740::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:d2:03:4c:32:38:d7:0c:82:a8:38:29:db:77:59:80:21:01:
         dc:4a:37:d3:24:b2:fc:81:be:5b:fc:dd:1b:1f:98:95:cc:00:
         c1:0b:e5:7a:bd:1f:11:d2:67:a7:10:8e:d8:e5:01:93:81:a0:
         fd:80:ca:10:e0:b2:58:de:69:cf:2c:6a:d3:65:74:46:d1:48:
         6c:d8:44:97:cf:2c:55:fc:20:17:f3:18:0e:f1:b8:cd:2c:6b:
         0a:ed:e9:df:e8:33:88:20:9c:d2:3a:a0:da:0a:27:7b:f0:ae:
         93:dc:08:4e:51:e7:d2:d9:fd:ef:95:99:5d:f0:3c:24:2a:91:
         d5:b2:b0:5e:b4:62:d4:0d:ea:b8:b3:a3:56:fc:52:a7:65:a0:
         2c:6f:cd:68:8f:55:8d:da:9d:d8:45:de:e0:6f:1f:0d:9d:47:
         cc:db:09:d1:87:a6:b5:fe:18:ae:01:ae:36:b3:84:b6:4c:9d:
         22:0e:35:63:15:ae:c8:ef:30:03:8c:95:bf:6a:3b:7b:d0:cc:
         4b:2b:7a:e0:ab:2b:d8:dd:da:6e:7d:9b:e1:46:d3:5b:b3:8c:
         d5:ed:86:db:ad:8a:19:f9:ef:f1:25:03:66:7a:f3:6c:ad:d5:
         b8:14:e9:09:03:06:9f:35:25:0e:93:d2:f5:06:84:f0:a4:0a:
         1e:ea:e2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:49 2025 by rpki-client