Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2eed118e-1a68-3d2c-beb9-6e8f19d3e244.roa
File:                     2eed118e-1a68-3d2c-beb9-6e8f19d3e244.roa (raw, json)
Hash identifier:          YGKpxuYItdAdUa6v32FPLzOyPUV0OQU6Z8LRAeypbOY=
Subject key identifier:   22:B0:AD:BE:7B:D8:8F:CB:DE:37:34:68:E8:1D:7B:A4:A7:F4:ED:4A
Certificate issuer:       /CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
Certificate serial:       010D0C9F4328584BA39D206DC73BC6C9980E7BC0
Authority key identifier: 1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2eed118e-1a68-3d2c-beb9-6e8f19d3e244.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     14618
IP address blocks:        2620:113:80a0::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:20:6d:c7:3b:c6:c9:98:0e:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=162cbfec-8615-4a72-bc77-bccdc2ef4679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3a:02:ea:3d:88:61:85:df:cd:2a:7c:4f:78:
                    b7:e3:06:e5:fb:60:d7:19:62:25:87:53:e0:5a:fc:
                    2c:37:82:26:26:44:92:ad:75:a8:3d:5e:3a:96:4f:
                    ae:82:5b:b5:ce:b0:f9:e7:46:e5:b2:12:3b:d6:f5:
                    ac:9a:f9:97:c6:4b:9b:b9:f8:42:14:cf:d5:93:61:
                    9a:2a:a5:43:cb:12:ce:b6:dd:33:02:36:94:df:d7:
                    a6:02:ef:26:08:3b:39:21:7e:39:16:25:ff:d2:25:
                    d9:74:a5:37:57:5b:53:7e:a9:cc:b2:75:eb:04:0f:
                    5b:08:73:a3:3f:74:37:7f:93:2c:5b:22:4f:44:6c:
                    15:99:e2:ea:8f:d5:e4:30:da:9b:d9:86:39:5c:7f:
                    6e:b9:50:83:98:6b:ed:31:f0:7c:65:f5:c0:e8:63:
                    fe:04:1b:f7:75:8b:c6:dc:e5:5c:94:15:54:2e:2c:
                    5a:9e:b0:22:82:36:1c:ae:c4:3a:0d:c1:36:0c:01:
                    9a:da:4b:ae:41:da:41:a5:8e:c7:34:f3:6b:62:15:
                    30:53:cc:fa:23:54:e4:e4:89:02:8c:21:b7:39:ad:
                    34:99:db:74:d4:3e:fc:a6:01:a0:08:1c:7d:93:56:
                    dd:fa:db:d0:ae:8d:9a:4d:b9:49:f1:98:06:0b:2b:
                    aa:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B0:AD:BE:7B:D8:8F:CB:DE:37:34:68:E8:1D:7B:A4:A7:F4:ED:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2eed118e-1a68-3d2c-beb9-6e8f19d3e244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl

            X509v3 Authority Key Identifier:
                keyid:1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:113:80a0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:2f:62:0f:03:72:9b:01:26:ce:cb:6e:8a:f6:30:d8:97:18:
         e0:ef:bc:72:a8:09:f9:ac:c0:52:37:8c:ba:f3:1a:b3:c8:7c:
         26:2a:2a:18:1f:0f:78:18:d5:af:35:70:8d:3c:10:e8:27:da:
         1b:19:8f:11:db:b8:58:34:4d:74:60:34:1f:50:28:f6:d4:3f:
         5e:24:ff:48:d3:0b:56:a8:50:ef:1f:94:62:cc:1f:75:5e:e3:
         04:19:da:5f:fa:5a:ea:98:56:d8:57:32:f4:1b:3f:ea:f7:72:
         e7:e7:0e:97:21:c8:99:fd:d9:df:8c:5a:0d:87:c1:98:93:06:
         72:fd:18:3a:65:1e:86:d7:c4:59:4a:67:e0:b0:fd:6f:fe:72:
         dd:0f:7d:71:cc:4c:4a:b7:e7:dc:82:09:11:e7:f8:ad:92:58:
         8e:93:61:c3:bb:41:fa:24:4b:09:42:27:08:96:49:84:5a:63:
         73:55:72:6b:45:a1:db:43:97:50:d6:62:4f:cd:b4:d1:3e:d8:
         be:cb:cc:f5:6e:14:5e:84:5e:21:12:cd:e0:63:50:17:a0:d4:
         49:c6:1d:22:c3:bf:e5:ab:18:7b:e5:79:c2:e5:3e:cd:3c:81:
         ee:b9:65:74:a6:84:d2:cd:41:4a:86:8f:50:a3:da:f2:2f:ed:
         cc:43:27:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:40:07 2025 by rpki-client