Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e95c7538-0a44-3c6d-9640-0733b0687263.roa
File:                     e95c7538-0a44-3c6d-9640-0733b0687263.roa (raw, json)
Hash identifier:          iZSaNr+coEUOSaakI/nwoQmgpSOrCAU6j18sZ8Wdino=
Subject key identifier:   3B:64:C2:13:93:80:0D:64:FB:2B:6D:A2:2A:A8:D8:92:3A:48:55:D4
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584BB2F8160EBF7279559FEA0F80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e95c7538-0a44-3c6d-9640-0733b0687263.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397232
IP address blocks:        2001:500:3682::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:16:0e:bf:72:79:55:9f:ea:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=e0d24068-af35-4ae4-a61e-f91105545612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:fa:9e:92:5e:63:6f:a1:7a:5e:28:2e:00:
                    e4:e5:d0:ed:88:1c:a1:f5:75:c5:fc:e5:3d:84:54:
                    f9:f8:c7:d8:1a:a6:a5:7e:83:bb:ea:f0:63:80:65:
                    25:1c:88:93:70:b3:f2:ee:d8:56:a5:b2:8a:a6:9c:
                    13:25:c1:c2:23:36:d7:6f:68:de:dc:01:83:9b:e3:
                    d6:75:77:4b:49:4f:2c:df:90:f1:52:02:d1:06:19:
                    11:e8:dc:ba:e6:7f:79:1e:37:a5:f5:bc:af:99:ea:
                    ce:f7:d7:0f:02:64:9e:9d:11:d1:54:c0:a5:de:8d:
                    d1:23:ef:17:c2:7c:f5:f6:70:dc:6a:90:f2:2f:9a:
                    de:43:26:1f:d8:7c:11:64:97:d1:d8:13:97:71:43:
                    04:f6:75:04:28:98:0e:d9:8b:d1:ab:a9:d2:29:5d:
                    cd:45:b9:ee:a7:55:52:bd:89:f6:94:4a:e9:30:c6:
                    9f:3a:05:d9:73:08:70:f5:4c:23:ce:c0:29:1d:7f:
                    1a:bf:87:58:8e:f8:71:5c:02:7f:87:e3:69:8d:0f:
                    df:95:c2:fd:52:8a:a1:4c:94:9c:bc:d1:35:b1:68:
                    90:a1:cd:ed:ae:3c:37:f6:9b:47:e4:54:c7:7b:aa:
                    f4:ea:b3:66:36:fd:94:0b:1f:b5:2b:69:06:0e:ba:
                    e4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:64:C2:13:93:80:0D:64:FB:2B:6D:A2:2A:A8:D8:92:3A:48:55:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/e95c7538-0a44-3c6d-9640-0733b0687263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:3682::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e4:25:ac:87:a7:e7:10:bf:20:aa:23:fb:dc:34:cb:84:13:
         c5:78:0d:c4:5d:1c:85:04:91:8b:9a:f1:4c:72:39:19:34:2f:
         3f:2b:91:6e:22:6b:f2:af:67:7c:ed:0b:d2:99:cf:47:1e:63:
         c0:d3:7d:b5:61:d0:32:fa:5f:67:51:61:29:9d:73:31:61:c6:
         57:17:9b:eb:70:d3:63:29:ef:c8:69:19:25:42:2b:be:2e:f0:
         84:23:03:3c:2c:cd:c0:ad:48:01:ac:6d:9f:c1:c4:f5:b5:76:
         2d:02:bc:5b:8d:0c:e5:2d:68:f6:47:9f:09:95:2a:fc:8b:10:
         0e:5f:1c:10:20:e3:d6:b1:50:2a:d1:b1:47:22:d3:d8:f4:97:
         bd:79:ca:6b:ce:d5:db:69:54:6a:2f:4b:84:bf:4b:9f:f9:e8:
         3c:6e:90:a2:04:56:d0:01:15:44:b6:40:aa:a8:57:1a:3f:49:
         44:68:8c:98:56:9f:a7:e7:f4:4e:c9:90:60:3d:7f:fa:85:ca:
         6d:fb:a8:de:39:80:9b:93:e8:a8:2f:44:b2:85:2c:86:3a:43:
         6f:0e:31:6d:82:3d:85:7d:89:ce:5d:3d:bc:1a:32:99:e7:e1:
         7f:54:f3:f8:75:8b:f2:b8:ac:42:6a:57:1e:1d:48:8f:43:ca:
         bb:95:12:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:05:10 2025 by rpki-client