Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b490e12f-9ee8-3eca-9ff8-92771a4acbce.roa
File:                     b490e12f-9ee8-3eca-9ff8-92771a4acbce.roa (raw, json)
Hash identifier:          oW1XvLkMZJEaq1uQ2Rz0aOsU2vBKyHv9ULwf1cPpFN4=
Subject key identifier:   5D:74:81:0B:6F:D6:C5:91:89:59:85:39:6B:9B:EC:C3:85:8B:9F:A2
Certificate issuer:       /CN=b4b63a03-6fed-4e8c-898c-a5155d0a90ea
Certificate serial:       010D0C9F4328584B477C7E77252F132D5D564C60
Authority key identifier: 66:DD:B8:F3:43:CD:51:B7:14:93:08:A1:88:86:0F:38:A7:49:24:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b490e12f-9ee8-3eca-9ff8-92771a4acbce.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     22439
IP address blocks:        2607:fa98::/36 maxlen: 36
                          2607:fa98:1000::/36 maxlen: 36
                          2607:fa98:2000::/36 maxlen: 36
                          2607:fa98:3000::/36 maxlen: 36
                          2607:fa98:4000::/36 maxlen: 36
                          2607:fa98:5000::/36 maxlen: 36
                          2607:fa98:6000::/36 maxlen: 36
                          2607:fa98:7000::/36 maxlen: 36
                          2607:fa98:8000::/36 maxlen: 36
                          2607:fa98:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:7e:77:25:2f:13:2d:5d:56:4c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b63a03-6fed-4e8c-898c-a5155d0a90ea
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=56fae942-61f1-4025-9e3d-a0a0502706a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:68:54:91:37:13:04:32:4a:1a:c2:95:f2:
                    75:d8:5c:a3:39:ae:0b:6f:8b:d4:91:14:b6:c2:10:
                    39:f8:cc:ae:2e:fc:0d:cc:69:41:af:71:b6:4d:dd:
                    58:43:b2:76:27:fc:ca:1c:81:88:f5:69:6c:d2:7b:
                    a3:2e:18:38:49:b1:91:ec:de:7a:5c:da:2b:16:76:
                    e4:72:dd:eb:2f:88:ba:bc:c7:42:11:88:54:96:95:
                    20:93:3f:bb:5f:c6:cf:4c:a1:2d:e1:ae:4d:c7:70:
                    06:e6:34:98:1b:c6:22:43:44:4f:11:25:df:d2:a0:
                    23:11:cd:db:9c:ad:27:b5:7a:b6:10:fe:d8:50:19:
                    18:df:e0:23:99:34:ad:14:5a:65:2f:0c:7a:c0:eb:
                    fd:11:bc:fb:86:3b:c1:6d:9d:1c:13:54:64:77:99:
                    a5:1e:39:de:c7:bd:07:e1:78:04:56:cf:26:86:42:
                    b1:63:63:1d:d6:ea:7a:21:84:46:00:49:96:36:66:
                    a1:72:f1:99:2c:f0:5f:1c:7e:a9:0b:8b:42:cc:3f:
                    59:77:1f:27:86:0c:4b:74:77:4a:26:13:69:31:d2:
                    1c:d2:14:fb:73:ab:35:d2:03:8b:62:f6:46:d0:e4:
                    66:f3:fc:2f:de:1d:37:43:a0:ab:9c:d7:82:2b:eb:
                    68:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:74:81:0B:6F:D6:C5:91:89:59:85:39:6B:9B:EC:C3:85:8B:9F:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b490e12f-9ee8-3eca-9ff8-92771a4acbce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.crl

            X509v3 Authority Key Identifier:
                keyid:66:DD:B8:F3:43:CD:51:B7:14:93:08:A1:88:86:0F:38:A7:49:24:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa98::-2607:fa98:9fff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:20:6a:d7:0c:7e:d3:68:ac:32:84:fc:8f:d8:61:eb:b5:1a:
         e5:e3:d1:86:2b:97:28:e5:54:02:83:d1:fd:a0:fb:e1:d7:53:
         6d:99:54:98:d8:75:59:69:bb:59:de:90:da:81:a3:81:b9:0c:
         bf:af:cc:80:65:e3:da:bf:cb:f2:c4:76:0e:71:2a:47:cf:49:
         f3:5d:b2:7d:74:59:87:75:60:eb:97:e3:9b:0c:60:c8:0f:a6:
         8f:36:33:8d:de:72:69:64:b7:f0:8c:5b:0f:2b:84:91:5c:60:
         8f:b9:7e:a6:46:7d:55:27:7c:98:e7:63:4a:ee:f1:1f:97:0a:
         b5:95:c0:d8:fb:bf:d1:f0:2f:c1:f5:d7:d9:6d:4e:9b:45:d0:
         9d:9f:59:73:5d:02:95:98:e0:47:87:2e:b8:ee:e1:24:53:69:
         0d:30:17:88:4c:24:20:d7:69:49:cc:e2:d4:f5:1d:ef:20:1e:
         fc:cd:7f:f8:48:fa:a6:fb:87:8f:f1:89:f7:76:ac:b2:c1:cb:
         81:2d:91:a1:c6:14:94:f2:65:00:7f:28:08:44:0f:f4:3d:aa:
         04:54:b4:29:30:84:d1:1e:76:ae:59:87:a8:43:87:ef:c5:35:
         64:0f:98:73:6b:31:17:4a:37:e0:1d:a4:3d:d4:c3:13:80:16:
         f8:9d:38:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:24:16 2025 by rpki-client