Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac65e949-6883-33da-ae30-4c9b596a49a8.roa
File:                     ac65e949-6883-33da-ae30-4c9b596a49a8.roa (raw, json)
Hash identifier:          77dWxlTi65mbU+S9J8hIeBkdhBVqGlUVovJCuHGJsJE=
Subject key identifier:   BA:0D:64:AA:76:13:3A:10:D9:C5:6E:94:54:C7:F5:00:0C:2C:6D:92
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584BC10B7A4AA5AAD8F319E6BE40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac65e949-6883-33da-ae30-4c9b596a49a8.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     7725
IP address blocks:        2603:3001:1a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0b:7a:4a:a5:aa:d8:f3:19:e6:be:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=db9f2778-17d6-4614-953f-9cdd9e18e147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:69:ef:8e:58:bd:d9:c8:d9:d4:99:3c:c9:e9:
                    79:48:e1:fa:dc:fb:c7:04:b6:c1:92:69:f6:7f:eb:
                    20:cd:4c:6d:3b:4d:01:e2:d4:1f:89:99:21:39:99:
                    59:ca:7c:42:88:78:ec:ac:ff:9e:d4:48:57:dc:f7:
                    79:44:48:10:d0:99:5e:ca:a6:c9:27:18:63:81:ca:
                    65:ce:4f:61:00:09:1d:72:5e:18:77:31:f8:6a:fd:
                    ea:f6:92:5e:84:e8:3b:b2:e4:15:6a:43:dd:e7:12:
                    dd:78:e2:73:f2:88:3a:8d:35:c2:41:00:a8:36:8a:
                    a6:48:0e:84:fc:72:5a:b5:28:1f:09:8a:bb:fa:d1:
                    6e:c4:b0:eb:44:f4:04:a8:a3:36:2d:5a:e8:b7:48:
                    fc:1b:63:bf:be:23:ad:8a:5a:b8:a3:3e:92:11:a3:
                    16:90:8f:1a:d5:ad:26:50:76:2b:5a:f2:72:c8:73:
                    c8:00:a9:a7:a8:8c:51:40:36:ca:29:75:16:2c:32:
                    67:39:0e:2f:c8:b6:17:e8:22:5c:09:47:49:20:f0:
                    5f:2f:80:39:c1:f8:13:01:6a:84:87:89:26:fa:cd:
                    78:08:5c:4b:3b:2d:b3:4d:80:c5:43:81:15:60:dc:
                    8d:c0:f5:eb:52:c5:76:0d:3e:ae:01:69:c0:27:a7:
                    5a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0D:64:AA:76:13:3A:10:D9:C5:6E:94:54:C7:F5:00:0C:2C:6D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac65e949-6883-33da-ae30-4c9b596a49a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3001:1a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:35:18:f9:db:14:39:41:4b:c1:22:47:88:ad:6f:c1:23:9b:
         53:91:f0:10:65:90:7c:16:6d:75:cc:0b:8e:66:c6:1a:12:df:
         51:6c:ed:42:28:98:1c:33:01:0d:c2:14:96:2a:30:4b:14:3e:
         1d:43:5f:49:65:ea:55:75:0a:42:55:b7:21:33:50:06:b9:ba:
         83:5b:e3:92:26:f2:01:7b:49:22:4f:46:14:0b:3a:a3:35:42:
         32:61:43:83:56:f7:d6:87:61:5b:25:8d:85:60:fe:b4:73:14:
         45:0e:d1:c7:87:8c:6e:f6:64:17:22:0a:52:30:97:61:0d:38:
         0c:97:2f:e0:77:40:b0:40:3a:90:07:93:f0:05:cb:c7:e5:26:
         9e:0c:e8:3e:79:d4:16:b9:97:15:43:84:ff:e5:5a:3d:59:ca:
         06:ff:db:be:2f:1b:c1:70:01:db:83:d4:4a:5e:f7:ec:37:94:
         2f:30:c9:b5:de:c8:e1:c0:c6:6d:a6:6f:15:8d:cc:a2:f4:6f:
         2a:61:d7:fe:b2:7d:5c:13:f2:1c:48:51:d8:ce:3f:99:50:8d:
         af:c3:e4:1d:33:b6:d2:c8:ad:30:db:88:51:aa:d7:f2:98:8b:
         a3:8d:14:c7:8e:01:55:02:86:e6:d2:1b:35:25:a9:bb:be:3a:
         d8:fe:df:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:22:33 2025 by rpki-client