Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d/6e647f1d-6f03-36bc-b383-449352c5cbb0.roa
File:                     6e647f1d-6f03-36bc-b383-449352c5cbb0.roa (raw, json)
Hash identifier:          JJ7ZVmGrJZejTn7bIIbkO1lkN5Tac5X5vq++LmrtdMc=
Subject key identifier:   F6:94:B0:AC:8F:74:B4:98:7F:0F:55:0B:7D:74:2F:34:22:54:37:D4
Certificate issuer:       /CN=4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d
Certificate serial:       010D0C9F4328584BB88D2DE66E682B24526A83E0
Authority key identifier: F9:F4:15:A4:E0:21:DA:02:94:48:A1:45:8D:63:D0:99:9A:65:C7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d/6e647f1d-6f03-36bc-b383-449352c5cbb0.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     40127
IP address blocks:        2607:90c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:2d:e6:6e:68:2b:24:52:6a:83:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=fedc0e1e-381b-4341-a8ff-44d0e2d4f3c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8e:ab:f7:f4:39:f2:12:3d:ef:5a:82:23:42:
                    71:e6:b9:b9:29:5b:2a:58:e7:34:be:6a:22:59:10:
                    5b:1f:96:9b:67:8f:7a:ae:61:86:11:59:95:ce:69:
                    a0:14:ac:03:14:c3:50:59:f3:ca:d9:7a:d1:b6:72:
                    ae:06:64:61:5d:60:41:e8:19:29:4e:36:4a:8c:07:
                    d2:e6:4a:ad:6e:95:ed:13:b1:90:55:c5:26:03:45:
                    50:37:c4:df:39:bd:ca:ef:fa:44:97:61:35:82:50:
                    ef:40:da:15:01:aa:8f:e7:4c:de:12:51:95:15:c1:
                    3f:61:d3:f2:47:0c:c1:95:b2:ab:b7:74:e4:95:1e:
                    b2:32:70:63:02:3a:76:6d:a2:2b:7f:ae:41:13:fe:
                    41:a0:88:df:3a:3a:2e:45:54:88:9b:d1:5c:1b:67:
                    0b:8b:47:3e:bf:59:33:d1:13:16:68:73:6d:5b:bc:
                    61:4c:2f:c8:24:11:25:d1:4b:7c:f8:85:ea:58:96:
                    2d:47:56:74:ed:69:ce:ea:d1:d3:68:d8:e0:28:92:
                    b8:be:a3:28:4d:ce:c3:81:67:40:76:09:52:c8:9f:
                    8e:23:3f:ea:92:6b:01:b6:ee:08:9b:e4:31:5f:49:
                    5f:d9:c4:56:c0:10:87:d0:7a:40:12:e6:80:3f:63:
                    93:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:94:B0:AC:8F:74:B4:98:7F:0F:55:0B:7D:74:2F:34:22:54:37:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d/6e647f1d-6f03-36bc-b383-449352c5cbb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d.crl

            X509v3 Authority Key Identifier:
                keyid:F9:F4:15:A4:E0:21:DA:02:94:48:A1:45:8D:63:D0:99:9A:65:C7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:90c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d7:dc:57:fc:0c:43:54:21:8d:55:2d:14:d9:ed:41:f3:2c:
         2e:f9:fe:5a:fc:27:ac:26:3b:db:af:81:15:8d:cd:ab:b7:a9:
         87:57:6e:0d:61:9b:7d:ac:c9:4b:67:0a:ab:87:47:85:fc:f1:
         31:44:6e:99:d3:86:da:8e:c0:5f:6d:44:4e:39:7b:ae:ff:a7:
         cb:73:4a:ec:3e:0d:bf:6b:37:2b:64:86:3a:71:5a:e1:95:ec:
         4f:c8:26:dd:9d:d3:c5:ec:cd:39:7f:72:3e:bb:67:5c:ce:bf:
         22:64:79:89:b4:fb:ad:a0:ea:fb:2c:de:2c:51:ab:06:e9:18:
         b1:07:e3:81:83:34:e0:16:f8:1a:ad:f1:25:da:e0:42:7f:16:
         f2:51:8b:ac:fe:89:63:39:81:e7:97:4f:bc:98:ad:f3:4d:5c:
         96:f1:04:e0:cb:7f:b7:06:1d:e6:e4:5a:0c:17:44:76:64:dc:
         18:d5:0e:0f:a4:26:0a:79:b3:ca:52:fd:8b:54:09:83:e7:4f:
         f8:b8:07:2a:e5:8e:d7:4e:ea:2f:db:bf:d9:be:d2:c6:52:59:
         30:0f:e0:3e:c6:d7:57:c0:4d:dd:cf:ac:9c:7e:57:16:74:74:
         9a:a4:36:c8:91:a2:9e:bb:87:dd:2b:67:92:d2:31:b9:2a:76:
         e6:94:83:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:46:10 2025 by rpki-client