Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/7338b4ac-26f7-3af3-b884-306f20df7819.roa
File:                     7338b4ac-26f7-3af3-b884-306f20df7819.roa (raw, json)
Hash identifier:          1XopbLHi/HGb+jqglNE4CewBE0B/HCKuJnHzQ53I+WY=
Subject key identifier:   46:8A:14:6F:00:6C:85:D1:25:0B:44:7F:B4:1D:53:76:D7:E5:47:71
Certificate issuer:       /CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
Certificate serial:       010D0C9F4328584BA39D207C6FC8BC8C08E88480
Authority key identifier: 1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/7338b4ac-26f7-3af3-b884-306f20df7819.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        2620:113:80e0::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:20:7c:6f:c8:bc:8c:08:e8:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2046a800-c379-4c3b-b702-fb1712b4c5c9
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=7b836c4d-9fcf-4da0-a8cd-6c8af5fc97e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:04:84:76:dc:49:72:05:da:d7:94:1b:ba:81:
                    46:6f:f4:2c:51:f8:64:cc:fd:e9:97:b1:43:ae:9e:
                    07:63:b2:06:86:f9:93:7c:0e:7c:9b:55:21:7f:c9:
                    84:dd:ef:0e:c6:0d:28:3f:09:c5:58:2f:be:35:01:
                    f4:76:b4:9b:ee:a9:79:6e:97:91:9f:0f:30:a1:b9:
                    2d:fe:ee:fa:c9:c1:f8:57:50:4d:dd:46:55:35:26:
                    78:83:af:fa:1b:52:97:69:29:40:90:59:da:fa:8d:
                    dd:48:f9:97:44:de:3b:e4:80:27:9f:76:c1:41:ca:
                    a0:ef:1f:9d:b8:ad:be:3c:02:ad:6f:87:fa:12:2c:
                    82:2b:ed:14:34:f3:a6:4b:86:b5:b6:e6:cb:53:b1:
                    1a:36:0d:8f:c2:d9:2f:7e:81:c9:ac:f4:e0:f8:61:
                    bf:6f:c1:ac:d5:12:da:06:3c:6b:13:c7:2e:43:6c:
                    6b:60:bc:65:d2:3f:84:4b:27:96:c6:ca:09:0a:de:
                    f1:12:55:01:b7:98:ea:22:e7:15:c9:f9:5f:e1:46:
                    a8:f2:a8:b5:4d:cc:2e:99:02:ab:79:66:62:d2:b3:
                    76:cc:57:4b:e8:af:9b:90:38:b4:1f:de:0a:95:f2:
                    0f:ad:10:4c:51:5f:4b:e2:f0:56:2e:db:59:02:af:
                    29:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8A:14:6F:00:6C:85:D1:25:0B:44:7F:B4:1D:53:76:D7:E5:47:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/7338b4ac-26f7-3af3-b884-306f20df7819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9/2046a800-c379-4c3b-b702-fb1712b4c5c9.crl

            X509v3 Authority Key Identifier:
                keyid:1B:7C:FA:4A:E5:64:A0:93:02:4D:1E:9F:44:C2:64:A1:D8:FA:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2046a800-c379-4c3b-b702-fb1712b4c5c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:113:80e0::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:3f:09:a8:db:71:4d:6b:c1:0b:c3:68:de:2e:a8:ea:73:0d:
         50:3e:5c:a7:a7:ea:a2:c8:45:2e:2a:e7:42:f7:98:0c:42:02:
         51:c2:c8:66:92:89:eb:d6:85:49:ef:99:21:e1:b8:a2:12:87:
         9a:c7:95:c7:14:e0:49:8f:c7:a1:76:11:27:f5:d2:39:5a:7d:
         65:fc:d5:1c:d0:6e:a4:61:d3:91:27:10:11:04:b2:af:f4:f3:
         cc:59:2b:d2:c9:d9:48:66:ed:5e:a3:65:29:34:32:6c:6a:84:
         89:42:46:09:aa:3b:75:43:5e:51:a3:64:8d:11:cf:45:3f:ad:
         39:d6:72:71:6c:0a:df:7d:5b:18:11:8a:a2:d5:d5:33:b9:1e:
         31:e3:60:31:f5:a3:0d:16:a7:97:c5:71:3b:6f:72:2f:f2:24:
         c3:a3:2e:25:a7:b0:88:b3:35:a5:ba:8a:ea:fe:bb:0f:90:df:
         89:d7:cc:6d:2f:0d:4f:2f:b4:dc:2c:37:7f:28:53:36:47:6d:
         08:ec:b6:24:a0:ec:98:db:4c:69:8e:59:c2:6b:35:0d:60:2f:
         ee:e7:42:e7:e8:b3:da:7c:bb:ed:0a:99:28:cf:37:49:26:93:
         f6:d1:ed:f5:f5:aa:0d:9b:c5:4d:8b:82:0d:14:a9:f6:69:a1:
         49:49:b7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:01 2025 by rpki-client