Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dd65ecdf-f6de-3a44-984c-cbb3719773c3.roa
File:                     dd65ecdf-f6de-3a44-984c-cbb3719773c3.roa (raw, json)
Hash identifier:          oz+5S475jmJsIZzg4toudDtcdC7ffeacOS4lhJ1aLpk=
Subject key identifier:   21:10:F2:D8:1E:0F:8C:56:A8:5B:29:95:EF:DB:50:08:B2:51:3C:C9
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584B9B3D0C2929ADA2D08CF99AC0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dd65ecdf-f6de-3a44-984c-cbb3719773c3.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     22616
IP address blocks:        2605:4300:3200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3d:0c:29:29:ad:a2:d0:8c:f9:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=c34d12b0-bcb2-4e99-ba48-f268ecbf33c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:39:6e:52:fe:27:b4:ce:7a:c7:02:a8:49:89:
                    37:31:03:cd:62:28:6c:b9:d5:7e:00:97:98:1e:d3:
                    35:86:b9:dd:12:69:02:b4:9c:2c:00:27:4c:76:e5:
                    9e:02:0e:4e:38:96:88:6f:1f:2e:e5:b8:8e:d0:61:
                    e7:9b:99:14:dc:d2:a4:4a:b4:13:7b:1f:c3:6f:5e:
                    ae:2d:65:9f:bb:41:3a:29:17:ee:5e:5c:3b:89:0b:
                    92:51:15:f6:08:14:44:fb:0c:f9:69:80:0a:1e:ed:
                    15:8f:2e:8e:06:18:31:b1:7a:fe:9a:ad:96:ff:e0:
                    34:11:ba:2a:89:e7:1a:4f:1a:13:63:82:a8:d6:26:
                    43:72:8f:b4:5a:83:77:36:d1:ea:97:45:30:e2:86:
                    ec:2b:2f:63:00:19:ae:1a:1e:eb:05:30:99:33:cf:
                    09:f0:33:ed:3d:7e:fa:ca:14:e7:59:09:61:85:e1:
                    47:ca:90:54:a2:27:33:35:4b:58:c3:57:b4:38:51:
                    1c:91:23:24:8d:96:64:0d:94:49:81:6b:fb:e1:f0:
                    ed:19:b4:8e:87:46:16:02:b8:4f:1c:ec:d8:69:46:
                    8d:6e:44:76:e5:72:4b:bc:e2:7a:42:41:4f:7a:5c:
                    74:dc:f3:d0:52:62:99:ce:88:0c:80:79:4b:7b:de:
                    dd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:10:F2:D8:1E:0F:8C:56:A8:5B:29:95:EF:DB:50:08:B2:51:3C:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dd65ecdf-f6de-3a44-984c-cbb3719773c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:da:71:96:83:ce:41:7d:e6:98:2f:fd:1d:61:da:9f:ef:f6:
         96:ea:f1:27:37:fd:cb:87:3e:f3:6d:0a:ff:5c:2d:ad:82:b8:
         b6:51:57:ac:44:a9:ed:c6:8b:b0:fa:3f:82:9f:16:af:05:aa:
         66:81:5f:8c:71:77:e2:11:7e:2f:ce:42:77:97:c6:bc:bd:7f:
         f0:4d:8d:bf:ba:0e:a9:7e:b7:c2:db:7d:1e:1b:41:f6:c7:62:
         a4:db:ec:8b:ec:93:ea:ae:eb:b3:e1:3b:46:7f:f9:4d:9b:96:
         02:02:a9:ac:ce:11:04:64:02:47:22:e1:df:ce:ca:65:32:b8:
         9a:22:30:b0:c1:43:42:ca:06:6a:6d:70:e5:53:ca:37:62:7c:
         c0:13:3a:48:c0:8a:30:c5:e4:29:97:79:84:b2:c7:19:86:d8:
         6b:a8:dd:a8:27:5d:a3:3b:42:4f:b1:7c:23:dd:d5:2c:fe:11:
         f3:2d:d6:3d:16:18:23:e1:bc:f8:23:99:61:cc:e7:4a:a4:e6:
         03:93:af:16:22:6f:00:45:6b:3c:5b:f5:57:d8:4b:57:68:8c:
         c3:c8:d0:5d:12:7b:62:33:f6:eb:e3:6f:2d:2c:37:4f:17:0e:
         58:ec:25:2c:be:41:7f:fe:ed:cc:b9:38:a3:e4:20:ea:9a:43:
         09:88:51:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:20:47 2025 by rpki-client