Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4f1a4496-1068-3479-8ff5-e4d8cdc81709.roa
File:                     4f1a4496-1068-3479-8ff5-e4d8cdc81709.roa (raw, json)
Hash identifier:          1FlB7iYjLZEfUMINCnANw0EE9Sd0FU6P1SF5AiqwijU=
Subject key identifier:   A9:DA:8C:00:A4:2B:1B:AD:12:33:AF:D6:98:57:6B:7B:5B:D8:F5:93
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F4328584BBB757DB2FF4173798A48C2C0
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4f1a4496-1068-3479-8ff5-e4d8cdc81709.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     49
IP address blocks:        2610:20:6fcd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:7d:b2:ff:41:73:79:8a:48:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=147b3f2b-5ea8-43e9-9299-2126dd8558db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:07:f2:77:1f:b8:a4:3a:4e:8c:6a:0e:d8:8a:
                    7a:84:ad:13:71:a0:73:32:49:31:43:fd:de:b4:7e:
                    1b:5d:35:ba:81:1a:08:ed:99:d0:3a:b9:a0:e4:dd:
                    43:12:3b:16:5e:16:3a:00:c7:ca:9e:a2:2b:c0:2a:
                    00:8c:1f:e7:70:3e:cd:79:83:17:91:65:61:b1:ef:
                    bf:c8:80:6d:b0:c6:bc:e9:de:00:39:99:d4:4d:a0:
                    f3:54:4c:07:49:a2:e4:97:ec:e4:29:bb:8c:78:46:
                    bf:91:b4:76:64:78:79:11:37:cb:d2:d4:b2:c5:49:
                    e5:82:8e:a4:2b:53:c4:0b:2f:b6:1f:46:bf:d2:8e:
                    f9:a9:0b:62:99:34:43:12:13:c8:3c:a3:e1:2b:e0:
                    dd:fe:80:e8:b6:67:28:e3:64:e3:ba:57:19:f0:f7:
                    3b:10:52:0f:42:c4:50:46:9c:53:f7:ec:60:6e:ce:
                    a0:91:0c:d0:5f:b5:d4:1b:92:c5:a7:80:98:96:db:
                    82:c7:d4:3b:b9:1d:39:ac:89:9b:e6:35:11:c8:0f:
                    11:70:73:a7:df:6c:0c:24:c3:bb:fd:77:59:d0:48:
                    a4:ed:7c:ee:1d:b1:cd:c2:47:07:3b:87:41:3e:99:
                    c9:24:f7:e7:e6:ad:39:a7:76:b7:e2:e9:bd:d9:b0:
                    e2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DA:8C:00:A4:2B:1B:AD:12:33:AF:D6:98:57:6B:7B:5B:D8:F5:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4f1a4496-1068-3479-8ff5-e4d8cdc81709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6fcd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f2:ec:e3:ca:99:3c:be:75:c2:02:33:a8:bd:ab:f4:f9:e5:
         c5:c2:ba:bd:21:92:c6:d9:81:3b:5a:9d:0d:a0:c1:84:02:35:
         6b:c4:98:3a:44:5a:41:22:0c:31:e7:4b:c8:8d:37:fb:ea:89:
         9d:6b:c2:82:ab:f8:56:a5:7e:e3:38:b4:3f:9f:62:0f:8e:38:
         a0:09:f2:76:32:d3:e3:67:ad:67:f5:4d:e5:f2:56:d3:81:21:
         9e:1f:6c:a8:71:98:22:07:21:1c:eb:11:82:2c:7a:d3:2e:b3:
         42:50:35:7e:8b:4a:6d:66:b5:f9:c3:56:85:3c:e9:13:e4:b8:
         c5:48:cd:f2:65:4a:5d:64:77:ee:a3:e0:7a:d7:96:fb:24:d3:
         1d:ac:70:60:d7:2e:33:a1:12:0d:39:18:98:5b:75:83:0f:6c:
         d7:a8:5f:ea:ee:a4:52:df:80:29:f0:8b:90:12:3f:17:2f:7e:
         21:bf:91:e3:f1:4f:ff:13:e0:66:14:01:37:3a:0f:b7:1d:a0:
         c3:ee:05:85:ab:d9:20:b6:b9:fe:42:e2:51:11:fb:0e:1c:39:
         c7:b6:d1:46:46:be:85:18:08:49:ab:94:17:95:53:84:83:5e:
         db:1f:2f:e6:62:71:1c:cd:5f:c2:82:f4:f1:96:35:db:96:af:
         74:2c:ae:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:04:23 2025 by rpki-client