Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/456e2110-489e-31a1-a7c5-156e1df7e226.roa
File:                     456e2110-489e-31a1-a7c5-156e1df7e226.roa (raw, json)
Hash identifier:          nIkHCuymT0vEedKQrpyTZ2J7/vxCpukWB2gv1zhGdl0=
Subject key identifier:   F3:43:18:EC:AE:07:AA:99:1A:BC:3E:E8:51:18:DF:81:65:86:C9:01
Certificate issuer:       /CN=2a2190d0-2edf-4b5e-a6f6-c788ca636585
Certificate serial:       010D0C9F4328584BBE404472298B8C0A32BF8E40
Authority key identifier: 50:09:31:6F:BA:FD:0F:52:FB:AA:67:0B:4C:76:D2:DC:90:EF:32:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/456e2110-489e-31a1-a7c5-156e1df7e226.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     198949
IP address blocks:        2620:104:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/2a2190d0-2edf-4b5e-a6f6-c788ca636585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/2a2190d0-2edf-4b5e-a6f6-c788ca636585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:44:72:29:8b:8c:0a:32:bf:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a2190d0-2edf-4b5e-a6f6-c788ca636585
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=121e839e-132b-484b-ae94-9aef2245e2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:bf:93:3f:a1:53:6a:73:49:48:f9:a0:08:
                    e2:44:c9:af:01:03:71:3d:d6:fb:20:c4:26:03:0a:
                    63:ba:8e:a3:86:77:7b:d8:b3:ea:81:b0:a7:24:f5:
                    e1:75:94:66:43:e6:7c:f4:43:91:13:9e:2f:33:e0:
                    2f:2e:3c:5a:b5:9b:14:cb:0f:52:18:3b:28:7d:45:
                    43:88:e1:8a:ca:58:d2:cd:96:84:69:10:0a:1c:9c:
                    ab:28:8c:7c:84:8a:fc:df:2c:19:2b:ca:d5:b4:be:
                    55:df:26:40:66:bd:a5:d7:79:20:eb:fa:4f:23:9b:
                    65:37:61:c6:c1:aa:b2:08:e4:61:e1:22:4e:5f:2c:
                    cb:cc:30:18:4d:84:7b:df:c0:bb:7a:00:d3:73:22:
                    ee:70:7f:5d:60:7f:39:fa:c2:12:38:d1:98:e4:a2:
                    ea:51:eb:6b:4b:88:d3:8d:2f:b5:3f:b9:d4:f5:4d:
                    d4:7a:33:c5:19:3a:8e:79:d6:86:33:50:84:dc:1e:
                    b4:51:87:87:52:df:8b:0c:51:c8:08:31:07:dd:2c:
                    78:00:f8:1f:76:ad:71:ba:a5:a5:54:71:c7:8a:25:
                    e6:0d:ca:45:49:ec:52:b7:b9:72:9b:5d:bd:a4:aa:
                    7b:35:78:e7:3a:fe:6f:a2:3b:55:01:20:06:2c:12:
                    d9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:43:18:EC:AE:07:AA:99:1A:BC:3E:E8:51:18:DF:81:65:86:C9:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/456e2110-489e-31a1-a7c5-156e1df7e226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/2a2190d0-2edf-4b5e-a6f6-c788ca636585.crl

            X509v3 Authority Key Identifier:
                keyid:50:09:31:6F:BA:FD:0F:52:FB:AA:67:0B:4C:76:D2:DC:90:EF:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:104:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:90:99:7d:95:c7:92:31:9a:f5:1b:23:ae:2f:7b:18:e1:f0:
         96:ba:af:3b:0c:f3:69:a1:76:ce:37:89:d9:18:cd:cc:6f:82:
         9d:ff:b1:6e:81:37:db:52:cf:6c:69:10:08:45:8e:75:45:ad:
         8a:1a:89:8d:a2:41:5e:c3:0b:b4:17:16:fa:27:6a:27:88:ae:
         50:92:f6:f6:a0:68:41:eb:98:20:7e:f6:53:8f:f8:5e:c7:c3:
         55:20:b6:0d:ed:33:b2:a6:f3:57:ab:0e:23:f9:e8:f4:19:2c:
         8f:4b:97:e3:67:d1:27:46:ce:be:2f:3f:7e:96:b6:f8:b5:5d:
         3e:40:fa:df:fb:37:8d:d5:19:2d:79:f0:dd:29:b7:00:b3:48:
         4f:e7:61:16:19:c6:fd:0c:f8:f5:c4:ad:57:98:3d:9e:4d:db:
         d5:24:88:2d:28:c8:d9:73:04:1e:f6:20:45:65:3f:07:a0:c2:
         eb:53:5c:fc:33:de:c8:b5:3e:39:7a:32:a7:5c:38:65:be:32:
         d9:d4:15:13:2d:7a:f4:38:93:71:b0:54:4d:80:f6:e2:4e:1c:
         2d:de:c6:77:27:8e:dc:4a:e4:cf:fa:5c:43:01:93:63:54:fb:
         1c:8f:a6:66:26:5a:3d:b2:f9:70:ba:d9:95:f2:93:b4:31:1e:
         bf:c6:a1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:46:56 2025 by rpki-client