Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7dbc4ee7-19d1-367c-9b9f-79a7675bcdff.roa
File:                     7dbc4ee7-19d1-367c-9b9f-79a7675bcdff.roa (raw, json)
Hash identifier:          2CNtqbY7mIAmsZz/j8URMLWypTAaPIwcquDXyexwfkM=
Subject key identifier:   4C:34:AB:98:23:6D:6C:0F:3D:61:4B:7C:49:58:E0:D7:95:1B:9A:94
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3D0C7F5994BAD53EA3B630
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7dbc4ee7-19d1-367c-9b9f-79a7675bcdff.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     22616
IP address blocks:        2605:4300:e200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3d:0c:7f:59:94:ba:d5:3e:a3:b6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=f4b49230-0c02-4272-a44e-c6658596eac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:93:c0:bc:94:7b:2d:47:37:fe:3d:70:ac:16:
                    0e:6c:9f:2f:1f:dc:de:ec:72:c7:7e:cf:5b:df:93:
                    24:26:df:00:a2:96:d0:0d:93:54:73:6c:c7:c0:00:
                    5b:1f:48:47:90:4e:9a:cc:27:c0:b4:8a:17:94:a6:
                    83:f4:fc:f7:e3:33:ea:29:37:af:0a:72:6c:27:bf:
                    bb:f0:8c:63:5a:e4:8d:ef:85:40:37:e1:49:f7:c6:
                    f7:6b:a1:d4:84:67:52:8d:0b:88:91:d8:a7:0a:6e:
                    f0:79:d8:37:2f:66:5b:b7:c9:e7:31:0b:51:1b:2a:
                    a1:a6:cd:81:bd:9d:93:e4:c9:8f:b1:78:c3:3c:cd:
                    9c:9b:f0:a6:7f:52:26:43:84:fe:ba:6a:09:b8:c6:
                    67:14:91:74:e0:e6:b3:95:31:cd:06:7b:72:31:d6:
                    b0:f9:9b:ec:21:b0:f2:e7:d7:0b:9b:ae:bd:90:f4:
                    1c:a0:37:65:1a:1b:51:a5:a3:b6:cb:33:ab:41:be:
                    28:54:24:b9:9e:83:9d:7c:7f:0c:ea:8b:88:8f:a6:
                    8c:13:c4:43:ec:f7:1f:2f:aa:b3:8a:ea:a2:6c:ec:
                    31:da:3b:56:f2:f8:03:15:d3:17:fe:63:1b:f6:ea:
                    ea:9c:d8:28:9d:34:4b:38:87:7e:43:1c:65:e0:60:
                    23:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:34:AB:98:23:6D:6C:0F:3D:61:4B:7C:49:58:E0:D7:95:1B:9A:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/7dbc4ee7-19d1-367c-9b9f-79a7675bcdff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:e200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:90:58:af:c0:0d:81:25:5a:66:34:bb:b9:95:53:13:af:79:
         ef:b6:29:7a:c8:2f:17:b8:fb:df:9a:65:e4:d8:70:49:ba:f1:
         77:50:7e:5a:12:d8:e7:d4:f5:e0:51:fe:e6:bc:e1:ad:fb:c0:
         f7:72:c8:94:bd:ed:0b:40:d7:1d:ff:94:97:0a:06:29:91:76:
         f1:c0:f6:02:04:97:25:75:9e:13:d7:1c:e8:ba:9d:c7:fc:2a:
         6f:d5:66:d9:07:c5:f9:87:ec:df:1a:d1:17:54:43:79:39:77:
         49:35:d0:e4:2a:c8:ec:79:8f:34:81:e3:73:84:0a:b8:c4:ba:
         6b:dc:4e:0a:29:bc:75:68:5a:62:ad:77:f5:bb:28:be:ab:e5:
         9e:69:89:24:68:a3:74:7b:ec:4d:29:bc:60:e1:97:63:b7:dc:
         de:6d:69:1a:46:da:8c:05:9d:70:c6:64:81:ad:1a:86:ca:7c:
         9b:79:87:58:4d:ce:43:d0:b4:78:6d:e4:b9:39:bd:01:3d:df:
         38:e8:ad:2a:f5:d2:40:2a:1f:7e:f3:61:0c:34:d3:02:de:40:
         21:33:09:4d:16:79:75:3f:82:80:f9:0e:bf:ac:ba:ec:94:b8:
         70:aa:66:d5:da:f4:a5:69:9a:36:b0:6e:6c:f9:7d:e4:40:06:
         34:24:88:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:33:05 2025 by rpki-client