Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/58f07506-97c8-3904-8b06-4a0f88e44d70.roa
File:                     58f07506-97c8-3904-8b06-4a0f88e44d70.roa (raw, json)
Hash identifier:          PUzondOxrANAFIh47Vu4qmA6u8jijDMsA/7N5CTGxvE=
Subject key identifier:   DB:CD:A3:0D:9C:1A:2F:73:28:7C:B2:15:E1:4B:D2:F0:C1:F1:A7:8E
Certificate issuer:       /CN=a110574b-b0a8-4116-8fba-63e69eba9d92
Certificate serial:       010D0C9F4328584BAD625132A9C8E58A34089980
Authority key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/58f07506-97c8-3904-8b06-4a0f88e44d70.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     31942
IP address blocks:        2607:61c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:51:32:a9:c8:e5:8a:34:08:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a110574b-b0a8-4116-8fba-63e69eba9d92
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=6b884e3d-4722-458a-9161-a2d8bb4f85bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:f0:f5:1a:55:fe:88:34:43:47:8c:73:2c:
                    f7:47:25:9e:ef:9b:5f:82:7d:3b:b3:ee:eb:13:7d:
                    46:09:90:bd:7b:39:2c:79:67:0d:84:ac:c7:75:d3:
                    87:b8:8a:8f:d0:58:07:69:9b:45:f8:5a:43:41:88:
                    5c:6f:90:80:9d:4d:00:0a:4b:7e:b3:26:06:f7:5d:
                    40:3e:2e:1f:60:be:4e:35:78:46:02:c1:3e:1c:e6:
                    84:f7:b2:51:6b:ae:af:95:02:d7:ed:c9:69:ad:ea:
                    c7:3a:53:82:cb:e8:0f:dd:13:aa:d2:69:48:c5:ab:
                    86:c0:d1:d8:e3:bd:a1:37:4e:11:23:9a:df:e7:2c:
                    cb:d8:20:8d:2e:8f:6f:b5:26:3e:26:4d:5c:24:86:
                    e3:28:54:8a:a7:78:6b:75:33:20:ac:26:62:c8:b5:
                    08:61:cc:c1:d6:8b:e8:73:bd:dd:42:0f:e6:3f:2d:
                    cb:9e:4f:9b:56:f1:ba:58:3d:1d:13:e2:08:9e:62:
                    a9:bb:5b:9e:fd:46:d6:bd:18:e2:cf:de:d9:85:c3:
                    48:24:b5:66:5a:c9:c7:0e:42:67:d5:8c:11:46:e4:
                    d0:b1:c7:bd:d6:28:00:0a:5e:09:0a:87:b9:56:ed:
                    bd:4f:42:d3:4c:aa:83:07:98:58:97:e0:fe:ce:5c:
                    57:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CD:A3:0D:9C:1A:2F:73:28:7C:B2:15:E1:4B:D2:F0:C1:F1:A7:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/58f07506-97c8-3904-8b06-4a0f88e44d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl

            X509v3 Authority Key Identifier:
                keyid:85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:61c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:3a:36:cf:d1:94:39:64:fd:46:57:79:87:e0:8b:f4:01:91:
         75:ef:53:93:de:b3:95:5f:e4:d3:d4:59:7e:cd:d6:71:ff:41:
         77:40:dc:84:57:2a:83:06:95:49:3c:3a:f3:ff:22:1c:b1:44:
         30:24:72:12:a5:87:a2:2a:60:0d:8e:a3:ca:f9:6b:ad:84:87:
         7f:13:c6:70:21:51:82:27:b2:d3:7e:6a:b5:bb:88:7c:8e:e3:
         23:be:23:60:0b:c6:38:fd:b7:cd:4d:fa:06:59:66:93:8b:d8:
         29:76:34:6a:e3:04:63:04:89:97:94:71:83:81:96:b8:63:94:
         94:25:3f:9c:b8:41:3f:b2:e4:a2:1d:f0:14:f5:65:b7:e7:a3:
         13:49:6a:27:79:17:ff:fd:b7:52:bb:23:bb:1b:49:fd:f5:cb:
         37:50:09:6f:62:b6:74:1d:d8:87:af:02:c3:40:f3:da:fb:12:
         9b:d7:7d:43:9b:89:5a:1c:17:cc:66:ae:af:93:41:0c:f3:e6:
         c6:64:c8:aa:4a:e8:f4:01:07:7b:85:c7:89:d1:79:36:29:14:
         36:c9:35:d5:1a:50:6b:bc:eb:7f:ca:74:b8:49:86:e5:e8:6d:
         cf:cd:21:6e:d2:81:b4:72:43:99:2a:cc:b7:10:e6:e5:de:56:
         32:e5:5d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:02:31 2025 by rpki-client