Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8/457b6738-f991-3981-8cbb-5f1607a3d8c4.roa
File:                     457b6738-f991-3981-8cbb-5f1607a3d8c4.roa (raw, json)
Hash identifier:          p262bIodTAqdY9syHDEuSHXHDlHAkhEsK/VPmVG2qWU=
Subject key identifier:   12:5D:51:1E:7C:27:D6:90:7A:95:61:0D:4F:00:B7:44:22:B4:B3:3E
Certificate issuer:       /CN=20274ef5-a895-4a21-8558-063f5cf922b8
Certificate serial:       010D0C9F4328584BBFA5955EAF9D3C49759C0280
Authority key identifier: 7D:34:DE:E2:FD:74:12:DB:62:8E:63:C7:28:16:F3:69:0D:82:89:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8/457b6738-f991-3981-8cbb-5f1607a3d8c4.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     17172
IP address blocks:        2620:a7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8/20274ef5-a895-4a21-8558-063f5cf922b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8/20274ef5-a895-4a21-8558-063f5cf922b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:95:5e:af:9d:3c:49:75:9c:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20274ef5-a895-4a21-8558-063f5cf922b8
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=a1f78fb1-d542-48b7-929e-eeb7ccbd9afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:6e:07:99:f8:77:c0:b9:89:60:56:be:aa:
                    32:81:f4:66:5f:bc:ea:1d:fe:0a:72:e0:87:5c:33:
                    ce:67:dc:36:16:4e:bd:aa:74:34:e8:f0:30:e3:27:
                    06:9b:82:fe:ce:f8:b2:2b:cb:55:6e:58:93:29:92:
                    a8:50:8b:f8:10:78:5e:82:9b:33:74:70:3c:4e:b5:
                    1c:ff:a8:58:5a:34:ac:d8:a4:e5:df:45:27:3c:c4:
                    ae:41:8b:35:b2:3e:44:a7:89:f3:53:2c:c1:ae:ba:
                    c3:73:89:3f:75:36:cb:c4:30:8f:22:0c:ea:12:bf:
                    02:24:db:3d:c6:f3:59:a0:f5:97:51:4c:ba:bf:bd:
                    46:c5:24:91:d1:ac:98:6b:e9:79:5b:dc:ab:1a:33:
                    7d:39:b2:c4:14:0f:ce:4a:79:58:c7:4d:a0:4c:cf:
                    e7:37:77:5f:75:9b:bb:aa:df:9b:3e:57:24:71:ad:
                    ef:8b:ee:75:f3:a7:d4:0a:18:d5:fa:2a:47:a9:4c:
                    a8:e3:cb:f9:25:e5:91:80:c1:d9:3c:fb:93:14:72:
                    7c:9e:7d:b9:e0:9e:35:e7:11:6c:5b:a1:20:72:9e:
                    ef:3d:42:2d:35:a7:11:8e:c4:e8:66:68:96:73:3b:
                    73:ed:30:14:45:16:05:60:9e:72:3c:08:37:32:6f:
                    09:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5D:51:1E:7C:27:D6:90:7A:95:61:0D:4F:00:B7:44:22:B4:B3:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8/457b6738-f991-3981-8cbb-5f1607a3d8c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8/20274ef5-a895-4a21-8558-063f5cf922b8.crl

            X509v3 Authority Key Identifier:
                keyid:7D:34:DE:E2:FD:74:12:DB:62:8E:63:C7:28:16:F3:69:0D:82:89:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/20274ef5-a895-4a21-8558-063f5cf922b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:a7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:92:85:81:f2:5c:f6:d7:46:ed:06:52:02:dc:0f:99:7a:45:
         56:33:a1:41:87:26:3f:e5:d7:68:8c:e8:1b:9b:b7:f1:8a:74:
         2e:0d:68:c2:f8:69:84:23:86:ae:99:8d:36:75:fc:06:e5:fb:
         77:6e:39:5d:66:cf:a8:75:75:18:5c:43:b8:53:1e:d5:6b:bb:
         e5:15:b2:d7:25:ab:ed:81:74:96:66:76:c3:3f:e7:92:cf:17:
         2d:83:3a:31:fe:6b:27:4b:40:46:ab:70:3b:26:80:67:6b:a6:
         a1:3e:49:4b:3d:30:52:28:3a:74:3f:a6:3a:16:06:29:07:85:
         5b:a5:60:e0:7f:26:d2:07:99:9d:4a:48:3b:4f:98:fd:e7:e6:
         25:5c:f7:0d:b7:55:70:65:11:14:ef:d3:c2:d8:af:c5:6e:b9:
         5d:30:97:5a:fb:da:96:14:4a:89:3d:2d:42:89:6c:a8:27:dd:
         c6:35:a9:f1:86:96:50:06:f7:40:83:30:90:f9:ff:47:78:00:
         c1:98:85:56:5b:0b:72:56:78:c4:4c:82:0d:a8:53:0c:7d:1f:
         ad:c2:92:17:69:dc:5b:dd:64:7a:4b:b3:79:ff:72:65:6d:02:
         98:69:65:35:e0:f0:96:fd:e9:dc:ee:57:e9:f1:e5:3c:04:b5:
         f9:aa:93:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:10:23 2025 by rpki-client