Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/c983825e-c67d-363b-8674-4ab78008496c.roa
File:                     c983825e-c67d-363b-8674-4ab78008496c.roa (raw, json)
Hash identifier:          ZxUhTyi0JyvFsMEwk9bR4gpNpggPtpBcKjc5hnikzRU=
Subject key identifier:   D8:3E:10:91:58:59:9E:BB:19:9A:67:F5:A8:F8:00:BD:74:77:7D:E0
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F4328584BBA103543BC3248593365BD90
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/c983825e-c67d-363b-8674-4ab78008496c.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     20205
IP address blocks:        2001:4950::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:35:43:bc:32:48:59:33:65:bd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=1994055f-1931-4485-aba6-868bfcfc58ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d7:f8:10:18:d4:09:f5:55:e8:bd:80:5c:c4:
                    a7:a3:af:e1:f4:15:d3:72:62:0f:70:e2:cf:86:5a:
                    02:fd:da:e4:11:b4:0a:d3:f7:96:bc:00:88:c7:ce:
                    03:9c:e0:50:fc:d5:88:18:29:c7:da:e3:04:bf:8f:
                    ab:61:66:c7:06:70:82:88:ad:52:35:66:6d:41:6a:
                    69:7a:27:89:5b:9e:1b:91:53:fc:cf:ba:a5:d4:37:
                    5c:23:c0:61:b1:31:18:ce:7b:c6:a9:03:e3:0a:16:
                    1a:4f:8a:1c:04:63:c5:7a:eb:83:7c:39:08:22:e1:
                    84:ad:fe:0b:55:3e:25:84:14:f9:4c:5d:d1:35:b1:
                    35:a6:f8:d0:92:7b:ce:a7:bb:92:c2:c7:05:ef:be:
                    bf:6a:da:ec:4c:73:01:ce:51:85:45:69:24:38:ec:
                    6a:1b:75:50:08:ac:45:c6:08:c4:f7:47:4c:11:21:
                    c7:bb:55:9e:7f:fe:fa:56:ed:20:d3:8b:39:f7:7d:
                    2a:fe:93:55:a6:05:f5:02:26:fd:4c:99:8a:b1:8c:
                    86:56:f0:28:90:d7:aa:2c:87:c7:23:ce:ac:72:35:
                    6b:f5:5c:89:56:e4:35:11:2a:d5:84:41:0f:73:15:
                    a1:37:0e:df:5b:70:d8:61:41:4c:48:94:fc:d0:9f:
                    0d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3E:10:91:58:59:9E:BB:19:9A:67:F5:A8:F8:00:BD:74:77:7D:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/c983825e-c67d-363b-8674-4ab78008496c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4950::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b9:1c:44:1c:40:aa:be:70:1f:85:61:a1:67:fd:7c:9f:f1:
         e6:20:03:5d:31:f9:66:d3:fb:e8:3e:7c:32:fc:e8:3b:29:3a:
         d7:2e:4b:49:57:e8:f9:b2:21:67:25:4e:10:30:ea:b4:34:89:
         e9:de:64:79:33:fb:ed:f5:66:0e:b8:2a:cb:1e:40:88:b0:18:
         27:2e:45:44:a9:7f:11:24:3a:3d:d2:3a:88:ba:28:a9:07:f5:
         77:0f:34:6a:9f:ac:be:b0:fc:27:94:70:51:8c:d3:cd:38:49:
         5c:50:38:22:f3:16:c3:c0:cc:70:02:58:ea:82:79:ff:b7:e6:
         29:d1:05:ea:67:0a:3c:47:1b:a3:02:d2:15:c0:c6:0f:ae:aa:
         37:b5:74:a6:14:41:ae:52:93:95:a7:5f:69:5d:ac:31:f7:1e:
         e4:05:33:cb:8c:ff:8a:35:4d:41:52:84:22:36:91:8b:77:54:
         08:16:b9:62:c6:ce:34:ff:f6:73:05:10:aa:35:33:ef:60:0a:
         0b:af:2e:4d:b3:a0:db:ad:a1:be:41:fa:8a:0b:49:f6:c1:10:
         3b:ab:42:5a:27:07:c5:1f:46:09:ca:d7:55:08:9a:4c:a9:0c:
         e2:3e:24:c8:97:fe:4e:1e:f6:e9:49:e4:2a:a1:2d:44:05:87:
         a3:a3:2a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:10:13 2025 by rpki-client