Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfeb727f-877d-3998-8755-4c1a04a8a0ab.roa
File:                     cfeb727f-877d-3998-8755-4c1a04a8a0ab.roa (raw, json)
Hash identifier:          jaBgXcMy56go3FVds6YTqGqo9QKrecD6X2fsPGx5Xd0=
Subject key identifier:   77:68:86:C8:14:BE:74:77:3C:13:56:3B:53:69:E3:06:4E:FD:FF:2B
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F8266B8C2E03203FF05940
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfeb727f-877d-3998-8755-4c1a04a8a0ab.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397219
IP address blocks:        2620:74:1b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:26:6b:8c:2e:03:20:3f:f0:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=4c15f601-1116-43b6-bf28-4a14ad09ca50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:27:be:fc:c0:5e:28:29:a8:fc:ec:bd:6e:3d:
                    4a:c2:9e:70:4f:28:dc:a9:8b:46:9e:8c:b6:77:a8:
                    33:60:72:3f:ed:77:3e:26:07:9d:59:00:0d:a1:fa:
                    ac:45:17:6f:4e:a2:8e:91:2b:92:a3:d6:90:8a:b4:
                    40:09:0c:c6:aa:fa:a3:c8:d7:2f:08:5b:7e:4a:18:
                    49:97:2d:5f:67:1d:a7:1f:15:69:78:76:76:b3:73:
                    04:27:58:1e:3b:4c:63:f3:0b:03:2a:d3:34:99:a9:
                    7d:ea:cd:1f:60:6d:01:74:a6:0d:42:a8:d6:d1:87:
                    46:1e:71:b8:5c:f1:8d:c7:5c:88:10:53:83:c5:de:
                    22:4a:32:6a:74:32:2b:14:a9:53:ca:05:a4:f2:a6:
                    61:06:0e:3a:2b:e6:35:7b:31:65:bc:8d:01:6e:d6:
                    6a:45:40:80:09:9f:4c:01:cb:00:3d:de:eb:fd:bc:
                    27:dd:1b:88:ae:be:a4:b3:07:b1:32:e3:c1:30:4d:
                    43:0f:21:23:83:e8:cc:ae:95:c4:ee:45:4c:30:36:
                    12:9c:2a:13:d8:90:93:63:45:b2:dc:11:9c:15:b9:
                    e2:1b:12:92:2b:cb:2d:ab:a7:0f:9c:9f:07:b6:a4:
                    88:7d:1e:57:70:d5:14:66:2e:5d:74:67:7c:3a:a9:
                    a2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:68:86:C8:14:BE:74:77:3C:13:56:3B:53:69:E3:06:4E:FD:FF:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/cfeb727f-877d-3998-8755-4c1a04a8a0ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:88:25:29:34:2f:75:80:22:6d:cf:27:25:37:c7:53:3d:6e:
         5f:36:5f:b3:cd:8a:b5:2b:33:ed:37:4c:0a:84:3e:f7:5a:99:
         da:c2:f6:5e:48:ab:4d:8f:cb:bb:61:d6:04:24:0e:11:f5:d0:
         e0:65:bf:a5:8f:25:40:1c:b3:cf:2e:c4:07:8f:b7:e6:31:0b:
         7f:e7:6c:c3:a9:77:0d:e2:ad:09:b4:ae:59:d4:85:83:64:ab:
         e5:e1:fd:1f:ed:d4:8b:8a:8a:3f:70:d8:13:69:a4:25:01:9f:
         72:9b:e1:67:d5:7b:22:5e:25:6a:31:a7:ba:5b:48:25:85:9b:
         29:0b:dd:92:63:d5:64:5f:41:ed:57:5e:50:3a:05:8e:b0:60:
         b3:33:22:6a:2c:12:53:40:1f:95:d0:f5:ba:df:e7:fa:13:c4:
         dc:f8:79:72:87:db:79:34:e1:ea:f4:45:3f:17:68:61:ef:ee:
         cc:ee:0f:ae:2c:1f:d9:d3:eb:e8:8d:b8:62:cc:c2:8f:09:b3:
         81:68:14:59:8b:71:3c:4a:08:1a:7e:e6:b3:68:6f:30:84:36:
         32:59:8c:38:4c:4a:d2:a3:20:99:aa:c1:7f:d4:0d:cf:b4:e2:
         7f:7c:17:81:c9:18:df:36:f2:13:31:e0:93:8d:b3:8a:fb:af:
         7c:82:3c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:17:35 2025 by rpki-client