Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/2aaeb1c2-92f7-3251-8149-72558a4ea315.roa
File:                     2aaeb1c2-92f7-3251-8149-72558a4ea315.roa (raw, json)
Hash identifier:          WNqC1zUnZ26gOZKODdBZdITHEHsCNUbMqcQTvpnx0JA=
Subject key identifier:   91:BD:9C:F7:59:D1:B0:E1:23:2F:EC:95:68:D0:E7:E1:C7:90:D0:5C
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584B74B0A639F6A9AD3F832E0A00
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/2aaeb1c2-92f7-3251-8149-72558a4ea315.roa
Signing time:             Wed 08 Oct 2025 17:37:24 +0000
ROA not before:           Wed 08 Oct 2025 17:37:24 +0000
ROA not after:            Tue 06 Jan 2026 18:37:24 +0000
asID:                     19901
IP address blocks:        2607:6c40:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:b0:a6:39:f6:a9:ad:3f:83:2e:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Oct  8 17:37:24 2025 GMT
            Not After : Jan  6 18:37:24 2026 GMT
        Subject: CN=4a1e255a-523c-4f28-a400-ad6a96c370ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6f:b5:1d:81:b1:00:34:f6:a8:3c:9c:02:0c:
                    5b:a2:68:5c:e0:ad:6f:b3:0e:d5:31:9e:22:e9:08:
                    70:90:9d:83:b7:fb:51:23:0f:51:b4:c9:a9:28:17:
                    16:23:2b:91:ab:ad:0b:c4:36:cf:cc:01:0b:ba:30:
                    53:a5:76:d9:cb:f8:df:77:b0:0d:2d:66:3c:1e:c4:
                    b7:9b:28:34:11:90:52:7a:eb:59:af:f2:7a:22:0d:
                    d0:db:ad:63:69:db:f2:a7:a8:53:84:7c:fe:e9:ab:
                    86:b4:d5:e3:01:5f:f3:e8:dc:96:ec:7d:1b:72:a5:
                    ee:7c:80:05:8c:4f:f8:90:6b:3c:3c:22:66:13:92:
                    0f:5e:6b:67:3b:f0:bc:15:a7:06:ac:82:47:81:ce:
                    2b:d7:9c:2d:1d:6f:9d:d3:fa:d7:47:4b:ad:72:f6:
                    c5:7e:2d:c0:53:e4:b2:e5:41:24:02:70:8e:27:75:
                    ae:be:88:3f:9e:36:8f:c3:0a:78:04:5a:5c:24:dd:
                    f4:33:1d:f6:ef:e7:89:78:86:f6:8f:db:8f:1b:8f:
                    01:12:d4:f4:ea:f5:94:16:27:86:fc:26:32:34:33:
                    1e:d1:dd:01:0b:e2:31:63:0f:95:29:0e:d8:10:98:
                    58:a9:87:8c:e1:ee:c2:a6:40:15:33:f5:14:fd:c2:
                    a6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BD:9C:F7:59:D1:B0:E1:23:2F:EC:95:68:D0:E7:E1:C7:90:D0:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/2aaeb1c2-92f7-3251-8149-72558a4ea315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6c40:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:38:37:ed:81:79:f2:25:a4:7d:74:f6:ea:f2:42:0e:8f:6e:
         7b:46:81:0d:2b:e5:a4:54:be:39:0e:9d:5b:48:c0:b8:51:a3:
         91:24:84:39:d0:bb:41:aa:f3:ff:f5:67:69:68:e7:ca:ff:cf:
         c3:5a:c3:f1:45:db:dd:4e:ae:cd:de:f6:8e:37:b8:22:97:27:
         8c:49:05:33:16:0e:ff:c6:aa:d7:29:1e:ad:4e:b8:eb:82:14:
         f9:71:78:6e:96:f0:9b:87:83:7a:f5:be:e5:68:e9:1f:79:5d:
         d1:b3:02:36:de:de:ee:79:b2:ff:25:08:77:5d:9a:2e:7a:40:
         e6:fe:fd:18:76:4b:1c:70:e1:d3:b5:61:26:3c:13:47:5d:fd:
         bb:9a:ab:ed:99:45:ea:50:13:f1:6e:6a:33:e3:6f:3c:77:0b:
         95:f7:d1:5d:0d:93:70:61:b6:56:b8:79:25:0b:cf:91:65:6a:
         b1:fc:89:97:62:aa:69:bc:81:5a:8a:ef:d8:7b:a1:9b:aa:14:
         9d:a7:d6:4e:0e:09:a4:88:e4:2b:37:bd:48:5f:d6:7e:df:ff:
         33:d0:c9:a2:7f:2c:04:eb:b2:00:3a:75:64:91:c9:1e:c7:f0:
         6d:2f:a5:38:40:74:eb:24:79:33:f1:56:56:fc:5c:ad:a9:29:
         de:c4:a1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:57:37 2025 by rpki-client