Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b922cb90-ac5c-3ee4-86ab-d8526f308bf0.roa
File:                     b922cb90-ac5c-3ee4-86ab-d8526f308bf0.roa (raw, json)
Hash identifier:          YL3vo1Fr1ogfm7x0IavwQtej8GzQ9Dr4os7faBN0pM8=
Subject key identifier:   36:2A:47:C0:40:30:4D:E9:2F:E4:BC:52:FE:00:D2:B2:9E:C8:AD:21
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584B4FDC72010B79E1B2E0ADB580
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b922cb90-ac5c-3ee4-86ab-d8526f308bf0.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     15164
IP address blocks:        2607:da00:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:72:01:0b:79:e1:b2:e0:ad:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=f72e638e-8899-4557-814c-f476ab824ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9b:b6:4a:ba:d1:7f:e0:3a:71:b8:45:97:13:
                    b0:11:a0:72:55:2e:52:78:34:65:8c:39:50:1f:07:
                    dd:78:a8:ae:1f:fb:41:67:9d:a3:89:51:a1:22:43:
                    57:3a:ab:9b:2c:c5:84:6b:91:52:34:16:10:c0:59:
                    81:33:e9:04:54:b4:f5:07:dd:36:fb:b5:5e:c2:d1:
                    fd:44:ea:ab:b7:76:d7:d4:ec:a9:34:3f:7c:1d:76:
                    00:8d:25:43:7e:95:43:57:35:0d:b5:dd:0f:df:91:
                    e0:3c:a0:64:dc:4d:ae:c4:26:b6:9b:19:0e:18:52:
                    84:3d:1b:2b:a5:87:6f:55:a6:59:b9:29:3c:dd:0c:
                    5b:1f:59:eb:90:0c:f1:da:47:f5:58:fe:ba:dc:3c:
                    46:65:b2:13:45:a7:4c:50:1e:4a:b3:67:fe:79:38:
                    85:05:0f:de:7d:67:1c:0c:20:48:c6:a7:a8:ba:27:
                    ec:ca:c0:63:72:cd:9c:cc:58:44:34:39:5f:d8:9a:
                    6b:28:fe:2b:52:b3:e5:71:d1:13:ac:23:38:ce:1f:
                    bc:c3:d5:5b:6d:16:87:17:a1:55:47:0e:97:38:6c:
                    c6:60:ca:ce:6c:76:91:1b:42:72:2f:19:ed:e1:d1:
                    c9:05:ee:62:f9:a6:80:8b:0f:b7:42:d9:fb:08:a0:
                    15:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2A:47:C0:40:30:4D:E9:2F:E4:BC:52:FE:00:D2:B2:9E:C8:AD:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/b922cb90-ac5c-3ee4-86ab-d8526f308bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:da00:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:75:17:24:9d:73:95:9a:5d:72:1d:e7:ec:65:6c:03:af:8a:
         0e:0b:b0:9b:ac:9f:97:e6:1d:40:52:41:87:2c:d6:6d:aa:d6:
         60:6c:8d:49:d4:52:66:d7:f9:76:c6:96:7f:b5:c1:2c:eb:db:
         7c:79:4b:99:9b:c0:06:0d:a1:1a:a8:d5:fb:98:a6:ef:c3:34:
         19:59:51:16:a2:95:c4:9a:2f:6b:68:61:b2:8e:11:d6:3d:0c:
         63:1c:6d:de:52:09:80:ab:0f:24:96:aa:89:24:ab:fe:8a:66:
         25:70:48:42:dd:39:a2:b1:56:aa:4c:fb:a7:53:5e:96:1c:6d:
         85:d8:04:ae:24:7b:f6:7d:6b:06:dc:3f:fc:1d:d4:99:66:e5:
         e0:01:db:8d:32:c1:05:c4:e0:75:7b:a7:7e:8f:a8:a6:e6:b0:
         49:30:b1:2d:bd:14:97:e9:46:ee:97:35:3d:0d:43:d5:c6:78:
         a4:74:ba:5e:0a:91:51:79:e5:d6:32:60:6f:45:96:a8:88:51:
         03:82:88:d3:85:72:8c:9f:3a:73:a3:2f:06:c8:23:6a:85:76:
         47:d1:58:d4:d4:b6:76:a5:d1:1a:25:0d:49:39:08:48:e4:16:
         f6:e2:9b:64:01:ac:e0:a8:bf:1e:f1:ea:77:66:64:74:db:ee:
         f8:c5:b2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 11:07:35 2025 by rpki-client