Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/26a3945c-536c-33b5-a3e4-158628fc3739.roa
File:                     26a3945c-536c-33b5-a3e4-158628fc3739.roa (raw, json)
Hash identifier:          OC7aHWUtxLhjZ2KX2lkFAMkx2Yq5hbJS9zKhJ8MEo2Q=
Subject key identifier:   4C:78:54:28:75:82:E9:84:27:B5:CB:DF:5F:06:3E:79:CE:89:D5:1F
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584BB2F7A78D293849DE1723F8F8
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/26a3945c-536c-33b5-a3e4-158628fc3739.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397378
IP address blocks:        2607:ff00:b00::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:a7:8d:29:38:49:de:17:23:f8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=54aed1cd-54ae-4824-aedc-65c9931d4802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:3c:12:ac:16:0c:5e:eb:85:68:90:e7:8c:
                    22:55:96:c0:59:52:39:c5:ee:55:5e:06:c0:91:61:
                    33:b8:85:eb:fa:3a:fd:c7:6a:8d:86:2f:79:a8:19:
                    dc:af:b7:59:66:7a:dc:e2:96:55:a5:06:2b:60:d8:
                    ff:08:9c:e7:8b:d7:4e:a8:60:6c:a5:8d:1d:37:82:
                    5c:08:70:08:57:10:29:bf:5e:51:55:57:a4:94:1b:
                    77:52:65:31:8c:3f:c8:92:7e:06:03:d4:ea:a9:77:
                    e9:47:ba:02:52:a9:9a:a0:92:3f:d1:15:d1:4f:9f:
                    1c:55:eb:81:90:ae:14:fb:2a:74:b7:1a:97:b9:be:
                    5d:ee:2a:36:d8:37:c7:a0:16:5b:7d:c8:e5:74:b8:
                    0e:37:37:b5:12:24:5f:fa:f2:c6:59:0d:9b:90:48:
                    f6:0d:5d:ce:3b:3a:47:3e:f7:a4:73:a4:d8:7b:e3:
                    30:33:00:f9:ef:3a:8a:ce:99:e0:da:25:2e:a7:de:
                    9e:e6:45:fe:36:e0:e3:5a:69:fc:d5:3a:6f:14:92:
                    a4:fd:7b:43:e4:f1:27:d6:b5:9a:3f:86:11:da:36:
                    e1:7f:6e:54:e1:63:c0:86:87:20:0c:06:d9:10:3e:
                    56:50:bf:6b:59:22:d0:46:81:d2:43:24:30:e1:f7:
                    2b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:78:54:28:75:82:E9:84:27:B5:CB:DF:5F:06:3E:79:CE:89:D5:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/26a3945c-536c-33b5-a3e4-158628fc3739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:ff00:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:1f:26:17:b4:e3:d7:21:ec:ac:65:62:ed:93:bc:80:a8:a2:
         f5:d0:9a:ac:ad:0f:8c:9d:1c:3d:95:4c:e6:6a:56:ec:e2:76:
         be:c4:16:09:f6:05:34:86:13:8b:4a:65:4b:95:81:a2:de:5d:
         43:60:d1:b4:3f:20:40:cf:27:db:fb:cd:85:28:93:42:91:f4:
         83:2a:af:b7:29:83:00:b6:18:a9:dc:fc:45:23:4f:1d:64:0f:
         77:b6:a1:26:94:65:4f:06:fd:df:1c:70:23:92:df:2c:3d:e8:
         2b:9a:5c:f4:f9:1a:23:85:56:44:76:b3:54:46:af:49:17:3b:
         79:2f:b6:4b:df:09:33:62:25:dd:53:8b:a2:15:9a:4f:d0:d4:
         fb:39:ca:75:07:f8:a2:89:07:32:1c:88:27:c7:5a:64:2f:fb:
         80:f1:58:9e:1b:58:85:9b:8b:d0:83:8e:68:f0:cb:e2:d9:b6:
         97:d7:57:87:d4:ab:ee:ba:dc:4a:09:f5:84:f0:65:2e:07:b0:
         99:6f:6b:06:a9:10:fe:e5:8f:2b:24:57:1e:e2:cf:07:d9:04:
         57:33:24:12:41:83:49:e7:e1:69:b9:88:e8:8a:d4:0c:21:79:
         c5:85:1f:17:8c:36:44:9d:e2:42:6e:75:c1:b2:4a:18:62:7b:
         85:6c:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:46:48 2025 by rpki-client