Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/cda767fd-689e-3dcf-a2c6-6ed6b1a7b71f.roa
File:                     cda767fd-689e-3dcf-a2c6-6ed6b1a7b71f.roa (raw, json)
Hash identifier:          kms6cptu8e7jZQy2YbRyx1cfc3XQCR+vIAvhMdDPoUM=
Subject key identifier:   D9:50:31:D7:25:7C:C6:D2:D6:8A:4C:60:AA:E7:FE:40:97:70:14:44
Certificate issuer:       /CN=03a7a8d3-26fa-4915-bacf-2848f9754758
Certificate serial:       010D0C9F4328584B434C58DD8F75A3BF27932D80
Authority key identifier: 53:99:8A:12:01:32:65:4D:FD:B5:26:2B:D5:F8:28:BC:E6:EF:7B:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/cda767fd-689e-3dcf-a2c6-6ed6b1a7b71f.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     394102
IP address blocks:        2606:3f80::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:58:dd:8f:75:a3:bf:27:93:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a7a8d3-26fa-4915-bacf-2848f9754758
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=8c74419a-4edc-4540-a40a-ce846482efb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:54:d1:fd:bc:0d:d7:62:0d:8b:6f:58:2a:27:
                    3e:69:f2:e8:b1:ff:21:8f:a2:48:5a:d4:1f:11:07:
                    ec:00:e7:c0:54:87:2c:24:8a:03:99:e7:34:13:2f:
                    02:f7:b7:c4:00:5a:be:77:e0:34:46:b7:07:13:48:
                    d6:ac:4a:bd:99:14:e4:6f:63:c5:6e:2e:49:92:85:
                    c6:33:81:d8:c0:1c:26:25:ef:df:a7:52:fd:ec:f4:
                    1d:99:27:9c:61:89:f6:c2:6e:72:36:7c:05:ab:d5:
                    09:05:cb:1c:a4:05:45:52:fa:d9:46:33:2a:c0:69:
                    11:14:1f:a4:ec:99:ad:e3:64:3a:60:35:b6:c7:eb:
                    33:b7:fc:ba:6d:82:03:0f:d0:95:1a:f3:54:e2:3d:
                    a8:72:d3:c6:96:05:33:60:2b:8d:21:5f:fb:cf:94:
                    ba:d5:84:20:e7:43:63:72:3a:31:e7:a6:33:60:b1:
                    08:28:85:eb:f4:af:55:77:e8:75:47:c1:1e:0e:01:
                    17:90:ba:a7:c7:f7:be:78:6d:95:98:6b:9f:70:79:
                    8b:1f:1c:89:4e:eb:0e:14:0a:b9:69:d3:69:b7:8a:
                    e2:a7:63:da:5d:40:c5:ba:d1:f2:98:34:14:18:26:
                    91:12:a1:fd:dc:d5:08:a3:9f:40:38:d9:02:53:63:
                    b9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:50:31:D7:25:7C:C6:D2:D6:8A:4C:60:AA:E7:FE:40:97:70:14:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/cda767fd-689e-3dcf-a2c6-6ed6b1a7b71f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758/03a7a8d3-26fa-4915-bacf-2848f9754758.crl

            X509v3 Authority Key Identifier:
                keyid:53:99:8A:12:01:32:65:4D:FD:B5:26:2B:D5:F8:28:BC:E6:EF:7B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/03a7a8d3-26fa-4915-bacf-2848f9754758.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:fa:8e:f9:f8:2b:3c:e6:83:6f:dd:f6:22:27:e5:c3:bf:ca:
         dc:0f:d1:7f:b6:66:ef:b8:3c:a8:a6:c7:aa:85:1c:e9:2e:0e:
         6d:d5:a3:84:66:3f:52:d1:11:43:02:5a:4d:ec:3c:1f:1e:33:
         b5:1e:89:00:48:f6:39:c2:c5:01:3d:3f:cc:2c:49:0c:a6:86:
         d3:b9:e1:fb:db:0a:11:de:b0:83:f8:2a:57:5d:09:2c:4f:bb:
         97:12:0c:ce:b6:49:89:fb:94:33:17:39:96:69:c9:91:d0:68:
         df:de:63:61:99:fb:78:f3:a5:9a:f3:d7:2d:c3:2c:cb:3c:95:
         0d:f0:b8:65:f1:27:d3:e5:72:b2:a1:72:84:df:c4:f9:07:bf:
         2d:47:dc:b7:76:e2:21:d6:67:28:a8:f3:51:c9:9f:c6:4c:bb:
         01:ef:dd:1c:80:03:a2:8c:21:b5:fa:59:ef:c9:0b:de:bc:33:
         1c:86:f2:38:f1:e7:34:b6:d4:67:3b:bc:17:03:a4:a0:68:8b:
         ef:c0:72:6a:a7:a7:bf:2f:ea:06:f7:d2:ae:ef:c3:0f:80:d4:
         9e:65:23:06:8c:ad:ec:59:58:fb:a9:bc:48:2c:20:31:09:6d:
         7b:ce:c4:75:a2:2d:4d:35:7d:7d:ec:8b:87:d0:22:8f:9a:3c:
         73:ab:45:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:31:07 2025 by rpki-client