Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b/7ecfd189-4826-3556-8c70-785555dca56c.roa
File:                     7ecfd189-4826-3556-8c70-785555dca56c.roa (raw, json)
Hash identifier:          TV3UI2rgS35aaH+at/Yi/V5tlWDydzsOwQoCdhvZEIA=
Subject key identifier:   0A:F8:40:12:CA:E3:32:22:E2:CB:95:D3:2E:34:45:54:13:74:89:3C
Certificate issuer:       /CN=c3506568-5ea6-49b1-a753-c6ef423abb8b
Certificate serial:       010D0C9F4328584BA39D3865435FA4B6B49A76C0
Authority key identifier: AB:EF:A6:40:22:51:E7:AA:0A:A6:98:76:48:19:56:4B:35:55:09:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b/7ecfd189-4826-3556-8c70-785555dca56c.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     394142
IP address blocks:        2605:1140::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b/c3506568-5ea6-49b1-a753-c6ef423abb8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b/c3506568-5ea6-49b1-a753-c6ef423abb8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:38:65:43:5f:a4:b6:b4:9a:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3506568-5ea6-49b1-a753-c6ef423abb8b
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=a0941ecd-5f80-4852-ad1f-aed1946fa781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d4:31:76:47:d7:ed:9c:73:38:65:90:50:04:
                    c6:78:55:a0:25:c3:68:05:0f:84:c9:6c:b3:f1:01:
                    28:c9:5e:05:f3:b7:88:15:c1:6c:9a:f5:c5:cd:89:
                    cb:eb:3a:c0:98:82:da:60:f2:97:15:b1:18:62:f8:
                    bb:cf:3a:d9:06:37:c2:cf:a0:ed:59:8e:0b:de:bb:
                    46:f2:05:f6:94:28:2e:99:22:cc:d1:40:4a:9c:02:
                    ad:17:8d:ba:1a:67:ad:6f:d5:bb:05:3e:af:16:e3:
                    a7:c3:8a:79:99:d7:63:25:8c:cb:2f:a9:16:87:2c:
                    29:e6:bd:36:71:40:13:18:8d:0f:18:97:20:a4:52:
                    14:2f:e6:b1:d1:08:01:95:9b:ef:bd:d8:9e:a4:d5:
                    b1:f9:30:5a:4c:3b:30:51:9d:e0:bc:ff:86:8a:44:
                    8a:c3:3e:93:50:ed:7d:ea:21:8d:57:ae:4c:ca:da:
                    b1:7c:f8:54:02:3e:da:76:a6:76:a8:8a:5f:a3:45:
                    75:89:21:a3:15:6c:e1:39:ac:2b:3c:93:36:f4:b3:
                    b0:a2:4d:9d:83:33:64:a5:a2:13:0c:fe:c6:7a:62:
                    0e:51:81:49:06:da:75:0b:72:66:37:a4:15:0d:2f:
                    46:2e:9d:b9:52:b6:3b:05:49:4e:18:ec:d2:f6:ad:
                    5d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F8:40:12:CA:E3:32:22:E2:CB:95:D3:2E:34:45:54:13:74:89:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b/7ecfd189-4826-3556-8c70-785555dca56c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b/c3506568-5ea6-49b1-a753-c6ef423abb8b.crl

            X509v3 Authority Key Identifier:
                keyid:AB:EF:A6:40:22:51:E7:AA:0A:A6:98:76:48:19:56:4B:35:55:09:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c3506568-5ea6-49b1-a753-c6ef423abb8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:be:6f:12:71:44:9d:94:9e:4d:e9:82:47:74:a4:85:e3:c5:
         2f:6f:63:70:cb:43:58:16:1e:d6:53:82:fa:46:de:25:c6:97:
         1b:7b:52:e6:14:dc:dc:e6:aa:86:3f:a8:e2:55:a4:88:e8:7b:
         54:4e:f2:28:7e:90:b1:15:35:0f:08:05:57:34:4f:47:ad:ba:
         f5:19:77:0e:66:99:9e:b0:8f:4c:52:0a:9c:c7:c0:ad:dd:1d:
         2d:25:27:0c:f4:d0:dd:cd:0f:88:4b:fd:85:ba:0f:2d:37:57:
         b6:5c:bd:c5:ae:0d:ce:0f:d7:e5:5d:a5:6f:05:3a:be:60:06:
         dc:03:83:0b:1e:5a:ce:d5:90:ba:4b:7b:c2:8b:79:ad:67:65:
         42:37:13:4d:bc:00:21:d7:e3:49:ec:48:72:5f:00:65:f7:8e:
         87:2e:88:03:57:29:4a:3f:93:f5:05:0f:eb:fa:a2:91:fa:30:
         78:dd:1d:d9:5b:16:10:a4:c9:00:3b:fb:0e:40:8c:0e:fa:94:
         61:53:b6:40:67:a4:78:81:54:06:91:2c:0b:24:b6:9c:77:04:
         18:a7:47:e1:da:64:24:8e:ac:11:b7:04:03:88:71:9b:39:a0:
         12:b9:09:6a:73:c3:58:cf:2f:d4:ee:fb:36:83:ca:18:20:eb:
         a6:6d:9b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:05:05 2025 by rpki-client