Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/f34e70eb-f511-378d-a8f9-037aebbc577a.roa
File:                     f34e70eb-f511-378d-a8f9-037aebbc577a.roa (raw, json)
Hash identifier:          Oj38r7MWqKINOaKVc4FBBL0D9OllVmV5NsjEaIL7CSk=
Subject key identifier:   2F:FB:75:0F:E7:1D:C1:4B:AC:6E:63:0D:7D:8A:6F:10:15:97:2B:51
Certificate issuer:       /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial:       010D0C9F4328584B5DD1EDED2182381030392D58
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/f34e70eb-f511-378d-a8f9-037aebbc577a.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     0
IP address blocks:        2620:10f:b000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:ed:ed:21:82:38:10:30:39:2d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=e4244eb6-f4b7-4c02-8693-4bebaaa22e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5a:77:bb:0a:0e:6e:0f:48:e5:b4:55:96:8e:
                    c5:d0:0c:d1:be:c9:c2:90:53:49:5d:ff:65:ed:dd:
                    4a:1f:5e:5e:af:53:2a:fc:49:73:a3:d5:90:06:0c:
                    0c:2b:79:d4:b3:53:6d:14:bb:5e:29:45:66:1b:0a:
                    3b:43:c9:65:23:ad:61:ec:4e:d0:63:f1:26:be:ba:
                    c1:31:c4:c2:91:44:b5:65:2a:95:7c:5f:86:70:79:
                    50:b4:41:9e:46:5d:c5:0e:cd:46:9c:47:d7:e3:be:
                    ad:fd:1d:6d:eb:92:9e:5f:2a:93:32:95:c2:6f:c3:
                    44:52:e5:bd:13:f0:79:79:dd:b4:ea:55:4b:44:54:
                    60:90:88:76:5e:84:da:54:a6:f8:fa:3e:72:a7:33:
                    52:19:ef:76:a6:dd:a2:b5:8f:d9:b5:8f:d3:9f:7a:
                    5d:ca:7e:29:3c:01:e7:a9:88:8a:61:c4:5a:a9:83:
                    4c:f6:a7:07:69:9d:fd:c3:39:e1:40:72:ab:79:fe:
                    cb:05:d5:24:21:a9:2d:bf:ff:3f:ed:25:09:89:d0:
                    55:f3:4d:ef:f0:c6:19:9a:5f:c4:85:74:08:c8:0d:
                    3d:77:95:82:b9:69:50:42:f1:f8:1b:76:d8:e2:f5:
                    97:81:71:89:95:bf:1c:de:f7:33:51:8c:3d:b9:48:
                    7d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FB:75:0F:E7:1D:C1:4B:AC:6E:63:0D:7D:8A:6F:10:15:97:2B:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/f34e70eb-f511-378d-a8f9-037aebbc577a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:b000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:8a:83:64:9d:9e:bd:1a:5a:19:ff:f3:b6:6c:ea:74:1c:92:
         a9:b1:1e:21:aa:d7:f6:84:93:01:3a:8a:ec:43:f8:d5:6a:af:
         cd:4b:a2:95:6e:11:17:39:f3:11:da:c0:14:4a:af:55:5e:39:
         e8:90:ca:71:b7:6f:61:f9:77:56:a7:75:b1:3c:fc:99:d6:e1:
         d9:69:eb:1c:f4:1d:eb:2b:ce:f4:a7:b1:5f:5b:8a:81:e7:d9:
         6a:f0:35:27:0a:10:5d:57:c8:48:aa:5f:2f:c8:80:2c:16:d7:
         06:db:6f:91:85:25:5d:51:44:19:29:52:cd:7b:cb:59:22:3c:
         6c:2a:e9:2a:8c:87:e9:67:d1:3c:10:91:bb:26:48:72:58:68:
         92:41:22:02:a0:da:2b:5e:2c:60:1e:38:43:42:9c:2a:82:66:
         9c:ba:d5:fb:dd:4d:4f:65:d1:49:be:2e:0e:cb:ca:31:cb:7c:
         46:66:6c:90:a2:83:95:06:17:e3:15:71:21:01:59:e5:a1:45:
         5c:2a:94:ce:bf:f2:4d:68:f3:08:d7:8b:0c:97:b9:6e:a4:07:
         ac:2c:bc:84:7f:a1:ad:05:08:c6:85:89:f3:61:fc:d2:24:8a:
         81:79:c6:ac:54:ca:a0:a3:b1:c9:54:b4:fc:cd:9e:5a:74:a1:
         c0:3b:21:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 15:01:48 2025 by rpki-client