Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3c97cab3-405b-3220-bcab-f0c1eedf3b3a.roa
File:                     3c97cab3-405b-3220-bcab-f0c1eedf3b3a.roa (raw, json)
Hash identifier:          9npTrnHphV/nWN/EUYl8th4iOd1a15SGEAv795JZ/m8=
Subject key identifier:   E4:DC:EE:32:A4:71:63:1F:4F:9B:0A:F5:A5:8C:12:F8:CB:D9:5A:2F
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584BBB75A42C72689F8C70AF9880
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3c97cab3-405b-3220-bcab-f0c1eedf3b3a.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     396982
IP address blocks:        2605:4300:3b07::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:a4:2c:72:68:9f:8c:70:af:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=abde93f2-3f6e-40de-a2f8-1d11dbb6d956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fd:2f:eb:d5:dd:f0:1f:30:3a:88:f6:1f:21:
                    4e:8c:03:a6:3b:94:93:2e:35:44:1f:1c:b6:cb:7d:
                    b5:ca:df:1f:f3:9a:5c:42:02:3b:9e:7e:1b:c9:13:
                    b3:d2:67:8b:1f:b5:b1:7f:1d:a5:ea:a4:02:a3:79:
                    28:92:79:0f:3c:a3:81:02:ea:00:34:00:1c:73:40:
                    e6:fc:29:e4:56:2e:e3:c2:7e:be:f9:c7:75:aa:54:
                    c6:0c:54:a4:77:6f:d9:0d:e5:ba:56:d5:1b:a8:43:
                    de:ea:3f:fb:88:77:dd:a5:41:2d:da:b0:79:21:0f:
                    e8:4f:b8:c2:17:19:c8:05:92:c8:4e:91:6b:70:ff:
                    c1:ea:17:9c:fa:34:21:51:27:10:e6:67:ef:c4:81:
                    28:d8:62:e9:e0:67:d6:c5:c0:b3:e7:99:e6:e7:2e:
                    5f:19:90:f8:12:9e:14:ce:b1:46:66:e5:be:b5:4b:
                    a6:72:c9:30:50:a6:d1:fd:15:50:ad:ef:1b:ae:86:
                    a3:9f:5a:f2:f3:c9:29:83:6f:04:12:41:28:32:e5:
                    d3:83:f0:5f:0e:a4:ce:4f:74:1d:b8:1c:dc:46:90:
                    67:b1:46:d4:ee:27:0a:f9:1b:6b:a0:d1:87:a7:fb:
                    77:41:cc:f2:78:51:bd:de:41:3f:4f:99:48:25:73:
                    64:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DC:EE:32:A4:71:63:1F:4F:9B:0A:F5:A5:8C:12:F8:CB:D9:5A:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3c97cab3-405b-3220-bcab-f0c1eedf3b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3b07::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:f2:d6:46:b4:81:a5:08:ba:21:87:4a:de:29:4d:34:8e:00:
         f8:8f:65:63:1d:ef:96:04:75:be:86:00:1b:ec:b8:f5:32:4b:
         e4:9f:f9:5a:53:38:0f:b4:ea:45:6d:1b:6a:ca:6f:42:6b:e9:
         56:3d:36:a6:b8:d9:c7:ec:b5:a1:d0:87:45:07:71:94:ac:3c:
         59:d3:d3:17:6d:e4:74:6f:c9:21:8b:0b:30:22:29:35:3b:84:
         71:1c:1e:4f:e5:8c:34:75:4d:7a:0e:59:da:6f:96:d6:5e:11:
         e6:2c:80:fd:6f:d7:53:b1:7d:2b:50:34:4b:9c:e4:98:e1:f0:
         8a:23:a1:4a:21:79:5b:da:68:ec:91:57:d1:8f:7b:5f:d7:19:
         16:40:74:dc:20:a0:02:46:48:b4:5e:03:79:d6:ff:92:e0:4a:
         a5:f0:e7:f9:22:8d:98:a1:e4:fd:46:d0:1f:4c:89:b0:26:18:
         06:0d:2f:2f:bb:d3:e3:2d:00:ed:e4:06:48:67:51:24:e5:ec:
         01:c0:01:00:95:c7:07:73:7d:bf:9b:e3:85:c2:d5:6c:bf:41:
         aa:91:23:72:48:71:17:75:c8:cb:17:cc:91:bc:c6:6e:1d:67:
         a5:9b:76:20:fa:34:12:66:9a:31:d0:77:f4:b9:b6:f5:1e:eb:
         dd:4e:1f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:30:02 2025 by rpki-client