Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/255bb3fc-187b-3f8c-9677-3842e9537e0d.roa
File:                     255bb3fc-187b-3f8c-9677-3842e9537e0d.roa (raw, json)
Hash identifier:          E7PXXRyjv8VRD4CszQue+zqikAAGwwA0wh7zK7ZjmFI=
Subject key identifier:   94:64:D8:17:FB:B0:82:F7:22:A2:1B:C5:49:35:E6:05:3F:9C:89:12
Certificate issuer:       /CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
Certificate serial:       010D0C9F4328584BBFA5A9BF502C7A2313AF3F00
Authority key identifier: 1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/255bb3fc-187b-3f8c-9677-3842e9537e0d.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     14618
IP address blocks:        2603:5004:8000::/34 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:a9:bf:50:2c:7a:23:13:af:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=491c885e-dd58-4d2e-b506-36b53b230d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d3:c0:83:30:07:0f:eb:3d:a1:a6:af:42:8d:
                    92:54:e2:7d:d0:03:ab:83:ff:75:c4:55:77:a3:49:
                    eb:ad:ff:d2:ed:bb:78:67:e8:9a:8e:49:d5:61:a7:
                    19:1c:0e:83:89:23:92:ee:d5:eb:8a:1c:0f:7c:79:
                    71:b0:6d:92:d7:fc:61:40:d3:39:8d:8a:5f:cf:3f:
                    71:8d:b9:4a:fd:af:ce:6a:71:e3:54:d8:f0:cf:51:
                    82:04:60:71:1c:dd:16:82:99:c7:f4:71:5f:94:29:
                    18:ec:96:be:c9:14:c6:ca:1c:13:97:7c:86:17:c2:
                    30:92:42:f4:5b:0a:ae:09:a1:a4:25:d9:44:e7:a5:
                    02:8f:07:28:8e:d9:ca:b0:b0:9c:30:bb:4d:f1:ab:
                    e5:40:d1:ad:4e:97:e2:12:bb:03:48:61:41:10:c4:
                    3e:98:91:72:47:e1:08:5b:35:9f:2f:5f:58:67:23:
                    bd:47:17:6c:70:a9:89:d8:96:06:0e:7e:06:95:f6:
                    30:e5:9f:86:df:e5:59:26:97:f3:2d:2b:2e:65:8f:
                    20:ee:84:e2:4f:9a:47:d4:c6:07:78:52:ef:24:47:
                    bf:dd:87:5f:55:3c:ef:51:79:a2:9b:68:d0:3b:bc:
                    eb:5a:d7:e5:85:a5:4a:f3:8b:ca:53:67:66:1c:c4:
                    38:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:64:D8:17:FB:B0:82:F7:22:A2:1B:C5:49:35:E6:05:3F:9C:89:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/255bb3fc-187b-3f8c-9677-3842e9537e0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5004:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:b6:a9:e2:04:8f:72:b8:16:36:2a:ba:6f:6c:d1:89:3b:16:
         54:20:3b:75:80:5f:e4:5a:73:fe:61:29:9d:93:cc:19:08:2c:
         8f:a4:fd:78:aa:e3:29:4d:33:df:97:c8:15:c1:b8:6b:03:04:
         fc:95:92:ae:a9:0f:31:80:a1:8b:f9:e4:31:52:6c:20:11:eb:
         ee:71:7f:a0:39:67:66:d6:bc:b5:12:a3:21:a8:6e:4d:c1:62:
         ab:98:29:dc:b4:dc:89:dd:f2:d4:59:72:e9:3f:89:89:e6:c2:
         86:7c:d0:92:a8:27:a0:30:a0:27:27:eb:9a:89:cf:99:c1:00:
         9d:9b:49:67:87:46:d6:f7:22:89:6c:9c:ec:59:09:ef:32:1c:
         bb:76:ff:25:c3:78:29:17:23:34:3c:68:02:36:85:74:c9:54:
         d6:30:c0:18:9a:f9:2e:17:a0:fc:71:f1:13:2d:a1:37:7c:b9:
         2e:c3:ca:4d:df:2b:a4:66:73:a7:46:37:92:9f:1a:a8:99:75:
         b1:99:49:75:e1:60:6f:86:27:44:db:ba:dd:52:a4:04:40:b6:
         df:03:7e:6c:53:96:3e:88:ae:b8:dc:b1:32:68:a9:5e:4b:23:
         1d:81:b6:40:5a:7b:c5:d7:66:83:3e:72:90:d7:83:60:87:75:
         fb:d8:e5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:42:33 2025 by rpki-client