Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/1c9fd5a0-05e0-3a7b-9892-34e07addc3e1.roa
File:                     1c9fd5a0-05e0-3a7b-9892-34e07addc3e1.roa (raw, json)
Hash identifier:          9SbHjznEaMsKPDnIhIZsGf6cWb7DbnTREmP3Zx/+BrQ=
Subject key identifier:   A8:F0:0C:AA:2D:84:13:01:87:6A:9C:62:3B:B0:10:8B:BA:D1:6A:83
Certificate issuer:       /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial:       010D0C9F4328584BA39D1ADB7BF970DA4A54EDD0
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/1c9fd5a0-05e0-3a7b-9892-34e07addc3e1.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     6142
IP address blocks:        2620:9:a008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:1a:db:7b:f9:70:da:4a:54:ed:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=e64e18c7-284f-4052-93cb-27bac6264d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bd:9d:27:d8:83:b9:c6:a4:ba:23:f5:aa:09:
                    dc:9e:ad:f7:57:6b:b9:e8:1c:78:15:84:88:fa:c9:
                    e6:1a:91:e9:d2:a4:1a:2e:cc:83:cc:18:96:34:bf:
                    1e:37:6f:cd:66:92:51:44:cb:00:d5:7a:7b:62:36:
                    91:dc:39:ca:92:6d:f9:59:a8:6f:b7:a1:00:af:b6:
                    6a:45:04:9e:00:01:55:fb:53:e0:1b:23:f8:90:b6:
                    2f:b5:0e:1f:3b:93:ed:3c:85:d0:b6:70:44:33:1f:
                    4c:50:5d:e2:6a:82:cc:95:0a:8d:d9:b7:a6:32:07:
                    ae:0a:98:8e:33:e0:e7:37:a8:8a:ce:8a:37:02:ea:
                    fb:9f:d5:47:dd:43:17:83:b8:a8:36:23:46:8f:5c:
                    56:94:a2:fd:1d:00:ad:ad:2f:dc:0d:f0:44:5d:ac:
                    9e:81:fc:68:1b:c6:0e:82:34:8e:e7:2f:51:14:54:
                    cc:c1:59:af:82:7c:2a:c5:6a:53:00:7e:26:85:7d:
                    c1:fd:43:aa:cd:a4:be:47:39:9e:4f:9e:cb:32:05:
                    e5:b6:9c:1d:a2:2c:3d:ee:82:50:ec:66:14:0a:32:
                    00:8d:21:65:17:ad:0f:02:cc:2a:e4:03:54:dc:49:
                    f7:53:f2:ad:a1:0b:5c:dc:90:79:da:b3:96:63:a1:
                    51:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F0:0C:AA:2D:84:13:01:87:6A:9C:62:3B:B0:10:8B:BA:D1:6A:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/1c9fd5a0-05e0-3a7b-9892-34e07addc3e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl

            X509v3 Authority Key Identifier:
                keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9:a008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:cf:85:9a:4c:3a:ed:ba:b7:e5:37:34:99:a3:be:a1:9f:18:
         81:aa:a7:1a:7c:e5:37:3e:ce:e5:b1:08:f8:69:a0:04:29:bd:
         0f:09:07:d5:8a:5c:6c:fb:a5:12:2f:65:a6:50:b6:29:c5:f5:
         73:ec:97:54:07:4d:b3:72:6b:9f:bf:14:b3:ac:f9:2e:41:40:
         54:15:43:a1:1e:bd:82:92:c0:99:fe:ab:3e:12:8a:bf:91:48:
         35:3f:93:32:c1:a8:0b:14:c1:1c:ad:5d:ef:c0:35:ab:9c:ca:
         53:d2:4a:3d:65:3f:15:e7:a9:6a:fd:f7:9a:e8:7e:2a:d3:e7:
         17:a2:ab:09:f5:0c:0a:91:26:7f:b2:97:44:81:78:4e:3d:b4:
         72:65:e4:86:e8:ea:08:56:73:96:86:a4:32:ca:29:84:75:cf:
         13:e8:ca:d7:bf:51:0d:c9:a4:db:13:0b:0a:df:0b:06:89:47:
         26:01:62:95:ef:f5:73:13:37:24:d0:51:9a:26:b6:97:d1:0a:
         18:73:1d:bf:74:1f:db:d9:58:90:c7:04:27:3b:4b:01:0c:c2:
         a6:25:b0:b9:eb:ad:9d:46:92:ec:d9:07:b7:2c:12:45:f5:e3:
         e2:c4:a7:d4:9b:bb:7e:2d:a0:ec:2a:37:2e:6a:60:88:5d:80:
         c6:95:d5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:31:00 2025 by rpki-client