Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/c74085ab-914c-3b60-852c-80bed856182e.roa
File:                     c74085ab-914c-3b60-852c-80bed856182e.roa (raw, json)
Hash identifier:          wuzbXGR95dUHNMaf4zJFFv5T9srwXdcEj0SBPX0otfg=
Subject key identifier:   26:A8:47:28:A3:7C:77:94:05:0E:46:F3:90:A3:E1:B2:F9:4F:BA:A1
Certificate issuer:       /CN=a92c0e3e-e786-40f1-a211-bf8a9b31315b
Certificate serial:       010D0C9F4328584B5F372639067DA8AA90F44FA0
Authority key identifier: 2C:1F:35:C9:C3:29:F1:59:1E:9C:2E:E5:82:25:B0:79:F5:67:BA:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/c74085ab-914c-3b60-852c-80bed856182e.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     29848
IP address blocks:        2604:9b40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:26:39:06:7d:a8:aa:90:f4:4f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92c0e3e-e786-40f1-a211-bf8a9b31315b
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=e7848180-2a3e-40b3-b3fd-0e2bc8279a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a0:cb:cc:f4:8a:9c:81:18:9a:06:02:98:65:
                    be:f5:b8:3c:f4:eb:06:ce:a0:47:87:1c:0a:75:e3:
                    a7:25:87:28:c3:68:ab:f1:7e:8a:24:67:e9:70:3f:
                    2a:a9:65:ba:91:e2:c5:5f:76:bd:ad:41:3f:4b:c5:
                    7e:6d:75:a4:82:ad:3f:7d:a5:1d:08:b8:6f:66:db:
                    3c:ef:a3:85:15:20:55:22:37:06:51:49:84:af:9d:
                    2c:f0:9f:8f:4f:89:57:d1:26:f3:b8:f3:2b:0b:89:
                    8c:e1:6b:6f:f1:7b:21:47:9d:00:6b:e0:b7:06:85:
                    d9:fe:8e:cc:34:f3:15:c1:db:69:ed:26:e3:8a:c1:
                    58:0b:8a:b9:17:e6:09:87:d8:bf:6e:4a:35:f8:e0:
                    5a:53:f9:17:61:97:9b:d5:58:ca:a5:d2:e7:ce:ff:
                    93:c4:8a:69:5d:5f:07:42:24:6e:5a:ec:ad:bd:5f:
                    14:cd:55:f3:e8:21:0b:08:cb:c2:06:99:9e:66:82:
                    c2:46:48:8f:b8:0d:61:74:91:c1:22:af:b5:d2:9a:
                    5e:5c:67:bd:6c:84:16:dd:73:70:5c:22:92:a5:3a:
                    19:fb:22:e3:07:11:15:37:50:c1:90:3e:cf:18:60:
                    5a:4a:4a:5b:7d:08:43:b7:53:29:26:1c:63:81:4e:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A8:47:28:A3:7C:77:94:05:0E:46:F3:90:A3:E1:B2:F9:4F:BA:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/c74085ab-914c-3b60-852c-80bed856182e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.crl

            X509v3 Authority Key Identifier:
                keyid:2C:1F:35:C9:C3:29:F1:59:1E:9C:2E:E5:82:25:B0:79:F5:67:BA:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9b40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:12:44:ca:05:1f:c0:ee:e7:17:ac:68:33:6d:6a:b5:ce:04:
         d8:a1:a4:5a:d8:7e:df:26:ed:7b:f4:8e:46:bd:c1:0a:3d:0b:
         d9:ed:b9:49:09:12:26:b8:5b:84:4a:00:cd:63:c3:04:4a:21:
         22:e0:80:d3:76:1a:78:75:69:ab:26:8c:9c:9a:38:2b:da:d3:
         4a:54:ef:ae:6d:9b:c8:78:9a:24:96:ff:00:49:00:88:71:74:
         9e:23:30:fd:cb:9a:7f:d3:c8:66:ca:d0:5b:64:a9:00:c0:33:
         8e:31:4f:8b:9f:e5:7c:46:b8:b9:d3:3c:c3:60:f8:67:6d:43:
         c5:ab:a9:ab:fe:e3:b7:8b:ed:5a:a1:76:e5:d6:a8:f8:2f:2d:
         92:f2:b7:40:5f:e5:26:55:72:6b:ac:0a:f4:9a:81:39:7e:00:
         2b:83:c6:70:1e:54:7f:5c:db:51:33:0c:e6:48:59:12:42:29:
         73:d8:ba:f5:21:ec:98:00:ce:75:a7:a6:b4:b5:a0:f5:69:b5:
         77:fb:6b:fe:b5:f2:66:07:45:88:3a:4e:6a:a9:3b:03:b5:e7:
         8e:07:46:95:e0:94:ce:74:63:c8:8e:12:5c:28:7a:a4:57:f4:
         81:12:ff:1f:ce:30:75:f1:f6:43:97:f6:65:ae:ef:47:4b:56:
         f0:a6:05:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 10:30:13 2025 by rpki-client