Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f79d9fec-cf46-3ff5-925a-996e640f63a3.roa
File:                     f79d9fec-cf46-3ff5-925a-996e640f63a3.roa (raw, json)
Hash identifier:          SKPv202vKTyfTmc7fOwxOTx1G39Di1RXDuiABiAT56o=
Subject key identifier:   60:64:54:3A:CA:31:31:30:BD:EA:3A:13:A4:D5:67:D6:43:AC:00:A0
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584B5C6CB73DD48F93E2FC6C9800
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f79d9fec-cf46-3ff5-925a-996e640f63a3.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     394905
IP address blocks:        2607:f790:fff8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:b7:3d:d4:8f:93:e2:fc:6c:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=5a194fe8-3ff8-45a4-8ca4-bc11f0e6667d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:22:b4:15:3d:a5:43:ea:f7:b7:81:63:db:1e:
                    cd:ac:84:42:b7:e3:f4:43:62:b2:aa:37:11:27:4a:
                    66:4e:08:5a:aa:3a:79:44:67:23:df:b2:42:43:ce:
                    d2:10:89:27:99:86:8a:3f:44:c2:9b:8a:5d:ab:36:
                    57:30:a4:0a:7b:1c:7d:bf:c9:da:3c:b5:6f:d4:b0:
                    44:fb:97:fc:9c:29:ab:4d:e1:86:07:5a:b9:d1:c3:
                    61:0b:34:e5:eb:e6:a7:d8:3d:d6:6e:74:c3:13:a5:
                    06:a8:8a:e8:bf:ac:cc:f3:41:4e:2d:66:e9:99:36:
                    35:4f:bc:d3:57:c4:a7:40:bd:20:c4:23:ff:b4:9d:
                    06:69:75:da:5f:9a:33:8a:f7:4a:8c:96:68:a3:d4:
                    f4:ee:73:dd:61:c3:7e:67:58:c3:60:52:9f:e8:59:
                    ac:c8:30:ba:0f:cb:55:4b:56:ab:30:cd:85:ac:01:
                    a3:22:3a:2d:bc:87:89:4a:fd:d5:f4:82:ce:fd:bd:
                    63:60:68:ff:14:43:0c:b9:ed:71:30:84:18:2f:60:
                    0f:20:95:20:26:da:2d:13:dd:05:47:d1:4f:4f:a8:
                    46:63:a1:1c:88:2c:6c:10:fb:87:0e:0d:f6:e6:df:
                    57:09:b3:d4:eb:71:79:46:8a:7b:57:22:e7:bc:ea:
                    0f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:64:54:3A:CA:31:31:30:BD:EA:3A:13:A4:D5:67:D6:43:AC:00:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/f79d9fec-cf46-3ff5-925a-996e640f63a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f790:fff8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f7:25:c9:36:d9:b1:9a:49:80:a3:99:79:3f:bf:92:e8:00:
         f0:18:87:8a:65:8f:7a:ef:4d:4e:86:32:6f:61:ed:d7:10:3e:
         eb:43:4d:7e:80:70:b2:ba:1b:b0:c3:02:7c:59:f5:99:d5:88:
         30:cf:be:14:02:37:3a:31:51:56:59:37:95:4c:be:a2:0f:43:
         d3:63:9f:22:a3:9e:06:f7:1c:a7:3c:90:30:51:18:ce:8b:fb:
         dc:41:ab:24:a8:53:05:48:a0:b4:92:ce:18:09:5e:cd:c6:ee:
         31:f6:c2:91:ae:39:cc:c6:16:ce:09:b3:24:f6:6d:80:3c:91:
         9e:f1:c9:d6:e7:04:bc:17:ca:99:1b:cd:8e:e4:d1:08:94:7c:
         01:28:9b:f1:6a:fe:90:26:47:ad:b5:08:e7:11:82:0d:ad:28:
         70:72:99:38:2f:73:89:49:45:3a:ff:2b:34:6f:f9:9a:bb:31:
         fc:16:2f:44:16:7a:82:ec:f9:02:ba:ee:8e:ce:c7:19:7c:76:
         4c:7e:7e:52:b5:4c:4b:04:05:98:74:ad:67:96:97:3c:83:88:
         0f:c0:f6:6a:65:ca:4e:fd:56:6a:11:73:ed:c4:35:d8:ff:bc:
         e6:ab:44:d5:e6:fb:59:da:39:81:85:8e:3b:80:ef:3f:90:af:
         62:00:ab:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:54:27 2025 by rpki-client