Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/bfbc81aa-8e83-3e3a-b2ad-03ee9f8450c6.roa
File:                     bfbc81aa-8e83-3e3a-b2ad-03ee9f8450c6.roa (raw, json)
Hash identifier:          otmp4IItrUnnodYc47y6QXOE2ISszOWoS0hfmljNC20=
Subject key identifier:   D1:2B:35:58:8C:4E:A9:EB:2A:FE:61:93:A4:F6:AB:E2:1E:39:A7:2B
Certificate issuer:       /CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
Certificate serial:       010D0C9F4328584BA39D3E89EA899708B04E7380
Authority key identifier: 1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/bfbc81aa-8e83-3e3a-b2ad-03ee9f8450c6.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     36692
IP address blocks:        2603:5001:30::/44 maxlen: 44
                          2603:5001:1030::/44 maxlen: 44
                          2603:5001:2030::/44 maxlen: 44
                          2603:5001:3030::/44 maxlen: 44
                          2603:5001:4030::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:3e:89:ea:89:97:08:b0:4e:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=c4195183-5453-4c91-abfa-c995dfde1176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:be:e5:43:6e:f3:18:40:5d:67:47:73:43:6a:
                    9c:07:4a:f5:9f:57:c1:5d:33:25:c5:89:d6:bb:e7:
                    9f:f7:fc:eb:5b:df:3a:d9:08:45:9b:f8:a7:c2:0c:
                    15:dd:14:ef:dc:28:fe:9d:27:9c:9b:2f:ec:a4:f8:
                    18:ad:65:16:6c:c5:f4:cc:55:d1:16:b0:46:00:22:
                    60:da:b5:6d:aa:9a:80:c7:d1:89:9b:cd:6b:7c:8b:
                    dd:f9:b5:af:53:4d:9b:af:94:25:7b:e3:35:e6:85:
                    5f:a9:22:ee:45:75:01:a3:f4:83:29:34:2a:50:c3:
                    78:df:0f:1d:07:30:41:19:2e:05:f3:ce:ca:bb:9c:
                    74:4f:9f:50:9d:ea:89:fc:fd:e4:3c:01:8a:d5:d7:
                    84:9c:61:b1:c9:4b:ac:d9:23:1a:a8:a2:8f:18:b8:
                    6f:fc:6d:89:f9:d3:d9:30:d1:6f:d5:68:8c:7a:2e:
                    97:23:f0:15:2d:a9:0c:e5:c5:92:81:ab:02:cb:24:
                    bf:a1:26:0c:77:f3:83:75:77:c5:ff:d2:c9:07:da:
                    bf:a5:f0:05:d3:2a:fe:4d:6b:bc:06:e8:bd:5d:d2:
                    25:7c:40:fc:f3:23:d9:63:e2:ad:52:3d:8b:98:1c:
                    03:26:78:78:c2:bc:53:63:cf:0b:bb:f5:86:f5:73:
                    cc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2B:35:58:8C:4E:A9:EB:2A:FE:61:93:A4:F6:AB:E2:1E:39:A7:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/bfbc81aa-8e83-3e3a-b2ad-03ee9f8450c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5001:30::/44
                  2603:5001:1030::/44
                  2603:5001:2030::/44
                  2603:5001:3030::/44
                  2603:5001:4030::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:40:cf:b7:b0:06:e2:48:54:0d:6d:86:f5:2a:2a:b6:1b:2b:
         44:1e:9c:ad:ba:3e:56:d5:8f:17:b8:0c:e5:37:aa:cd:00:e9:
         a0:66:51:99:aa:ae:50:f4:ba:c5:10:69:b7:37:77:f4:68:0a:
         00:da:d7:b9:22:e5:82:3c:db:a6:06:4b:65:6b:56:ed:0c:00:
         54:bc:45:62:1f:2d:e3:87:b6:c8:a0:a4:ab:70:fc:e1:05:64:
         12:a2:f2:cb:3b:0c:be:6f:7e:e9:d3:84:3d:a4:87:9a:6d:16:
         82:6e:cb:f3:1a:b4:4d:8b:8f:07:a6:9d:00:6c:76:e9:17:43:
         15:15:f7:bf:c5:a8:6a:65:8d:f0:a8:64:16:27:68:50:6e:1a:
         77:95:67:11:4b:bf:8e:c4:2c:09:1e:45:2a:a1:a8:03:b9:85:
         96:46:d6:54:42:2f:16:b8:1f:8b:76:29:01:89:95:2e:5e:2f:
         fb:69:41:31:1a:f6:e5:61:a8:46:f3:03:cb:c3:fb:71:ba:70:
         10:3a:cf:7f:e4:74:25:6b:3c:e0:58:12:09:ca:0e:fa:14:72:
         2d:03:d2:82:49:55:36:9f:84:85:b2:b5:3c:f5:0c:87:8d:2d:
         77:9e:87:b3:bf:8a:e6:66:e6:76:a7:3e:e7:11:53:95:48:3f:
         13:6a:9e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:07:50 2025 by rpki-client