Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/b7c92564-bd30-32e3-ad36-ab7b59176993.roa
File:                     b7c92564-bd30-32e3-ad36-ab7b59176993.roa (raw, json)
Hash identifier:          mft/Js0ryQodalA2K84s5nLkjUAEpaeRdAfIQxSQQmA=
Subject key identifier:   A4:E8:45:38:DF:10:62:5A:6E:7C:09:9A:49:0B:B5:7D:F7:91:37:73
Certificate issuer:       /CN=d08a2975-c6d9-49a4-818f-c7bcd8c4e11c
Certificate serial:       010D0C9F4328584B917784B796640A9A37A6AF80
Authority key identifier: B8:89:F5:94:64:04:B5:5F:9D:B0:AC:3C:52:BF:69:86:62:B7:CF:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/b7c92564-bd30-32e3-ad36-ab7b59176993.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     401866
IP address blocks:        2604:19a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:84:b7:96:64:0a:9a:37:a6:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08a2975-c6d9-49a4-818f-c7bcd8c4e11c
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=e8cb165d-c0b1-41a2-b9ad-1902617ba575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:59:5a:a0:c1:11:a6:b7:f6:b5:c5:53:fc:1f:
                    ca:86:7d:62:e8:de:04:e5:3a:ef:65:18:bd:16:3f:
                    bc:78:47:2b:8c:6d:f3:e4:c6:6b:95:76:00:da:15:
                    ea:d9:c9:76:db:37:43:e0:82:cf:d8:ac:48:c8:0c:
                    fc:c0:02:bd:c2:68:10:da:3e:df:f7:97:ed:5e:c5:
                    21:4a:e1:3c:14:e9:db:c3:bc:0f:85:2f:44:04:99:
                    0d:72:92:09:cc:8f:f0:8d:6f:53:05:c6:b2:c0:d0:
                    2c:43:23:b3:ba:cc:5d:40:22:54:d1:62:e0:8a:f9:
                    7d:66:1f:50:ef:a1:7a:bc:6a:67:a2:5a:2d:e8:f5:
                    37:30:40:3b:d4:51:53:68:a8:f6:e7:9b:b7:6d:7d:
                    22:46:26:b9:99:d2:07:e9:bb:40:dd:26:7e:7b:78:
                    d5:d4:05:d9:a5:67:c3:e4:3d:0d:50:66:fd:e5:6b:
                    24:6d:19:1e:b6:1c:30:ca:6a:6e:29:4e:f4:6b:e6:
                    8b:93:de:88:7a:c4:e6:9f:9d:d7:63:5c:2f:77:0a:
                    8a:90:e1:c8:83:45:58:78:0b:4a:4c:0e:c2:a1:c8:
                    69:61:88:52:73:c2:e9:b4:b6:39:6d:ad:8f:3c:70:
                    79:a9:15:d4:24:5d:38:53:f8:84:f6:f8:8c:f1:db:
                    af:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E8:45:38:DF:10:62:5A:6E:7C:09:9A:49:0B:B5:7D:F7:91:37:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/b7c92564-bd30-32e3-ad36-ab7b59176993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.crl

            X509v3 Authority Key Identifier:
                keyid:B8:89:F5:94:64:04:B5:5F:9D:B0:AC:3C:52:BF:69:86:62:B7:CF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d08a2975-c6d9-49a4-818f-c7bcd8c4e11c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:19a0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:7d:62:7f:d0:31:4d:e8:b8:25:0a:1f:7d:5d:13:4a:64:49:
         29:c8:e2:7c:11:a0:03:b6:4c:c2:fc:db:b3:b2:27:dc:8c:75:
         d3:50:91:f0:3c:b4:76:d0:21:01:c7:05:a1:2e:ab:18:12:14:
         32:f9:2a:77:d2:04:cb:7f:b6:21:77:c7:4a:fd:72:01:4a:3e:
         c5:fc:85:f6:50:e9:b0:e9:d2:01:6f:77:e6:aa:62:1e:11:be:
         f2:21:61:90:41:c7:01:8d:26:b0:16:67:22:2c:31:a1:79:27:
         30:84:31:22:b2:4b:d5:9d:6c:36:63:0d:54:29:d4:d7:6b:63:
         a2:d1:3c:0d:9f:8f:18:88:8a:5e:62:73:1e:23:2b:ba:6b:5a:
         db:64:5c:d7:00:eb:8b:84:eb:ca:30:9b:92:89:00:0a:0c:79:
         fd:6a:84:87:cd:42:a4:07:7a:17:9b:30:1d:ed:4d:b5:87:9d:
         ac:21:4e:16:6e:fc:f3:b7:41:b2:8c:f7:8b:bf:92:ff:4e:c9:
         74:43:32:6f:c9:2d:2a:b9:e7:b0:4c:5a:03:d5:c2:6b:21:05:
         21:71:aa:40:82:3f:97:d2:6a:e4:1c:e6:0d:6d:79:12:28:69:
         63:96:de:91:d5:9e:9e:3f:14:fe:45:8b:62:94:1a:d1:f1:6b:
         3a:00:3f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:40:16 2025 by rpki-client