Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/1193cf10-90d6-35e0-9915-3646f2eb71e1.roa
File:                     1193cf10-90d6-35e0-9915-3646f2eb71e1.roa (raw, json)
Hash identifier:          zQpxQbfQ4gAE1Np5G5LN+f+DVAcjVbf0Whl6eXrjCmg=
Subject key identifier:   67:4B:A4:D9:87:6F:8A:69:01:A1:2C:F2:09:AA:1C:03:DF:47:39:95
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F4328584B78574C51E9B0470E843A4400
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/1193cf10-90d6-35e0-9915-3646f2eb71e1.roa
Signing time:             Fri 10 Oct 2025 01:00:30 +0000
ROA not before:           Fri 10 Oct 2025 01:00:30 +0000
ROA not after:            Thu 08 Jan 2026 02:00:30 +0000
asID:                     5744
IP address blocks:        2610:20:5010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:78:57:4c:51:e9:b0:47:0e:84:3a:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Oct 10 01:00:30 2025 GMT
            Not After : Jan  8 02:00:30 2026 GMT
        Subject: CN=1ea7e111-7379-43be-9277-6132eb97930e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1f:5c:d9:81:46:cd:25:8d:b0:77:67:09:b2:
                    d7:52:94:d0:a2:2a:e1:2a:29:33:5b:f8:e2:7a:c3:
                    11:96:33:db:f0:05:dc:37:e7:ce:21:e1:cf:50:9e:
                    28:1f:1e:71:e4:d4:bc:5c:b2:5f:2c:0b:8c:c6:c1:
                    83:f8:f1:93:28:7a:9c:15:47:ec:3f:43:07:fd:46:
                    22:f4:2d:d5:19:92:15:8e:26:e7:85:00:8b:a8:52:
                    43:9d:73:69:96:79:5b:2b:5a:20:88:06:70:f0:50:
                    eb:ab:be:ea:72:26:ae:61:ac:90:03:1c:7a:89:2b:
                    f9:29:5a:71:71:a4:85:56:b8:0b:cc:53:4a:d9:4f:
                    38:68:38:53:ca:40:65:fc:ab:c2:0d:9f:9d:b5:c9:
                    bd:2a:a7:1a:31:c0:98:d1:74:be:ad:fa:02:31:48:
                    24:9b:a0:e8:8d:48:5c:48:eb:77:3f:bd:04:72:2a:
                    4c:65:d3:ff:ba:30:d3:7a:cb:f0:85:46:eb:89:bb:
                    98:1f:17:fd:95:8e:29:7b:86:64:84:60:56:26:cf:
                    7c:03:d0:a1:9c:a5:e3:d8:90:3b:0f:21:96:dc:d5:
                    3a:e3:c4:13:9a:d4:da:d2:09:aa:88:ae:47:cc:db:
                    3e:cf:9c:4e:12:8a:6b:df:06:7e:7c:6e:f8:f7:9d:
                    2f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4B:A4:D9:87:6F:8A:69:01:A1:2C:F2:09:AA:1C:03:DF:47:39:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/1193cf10-90d6-35e0-9915-3646f2eb71e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:5010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:9d:01:5d:c1:16:a2:73:e4:6d:54:6c:58:ee:5c:b5:a1:0f:
         c8:98:ba:06:f1:6b:97:ac:7b:13:8e:97:2c:6a:6f:85:dd:0e:
         ab:eb:dd:fe:ad:4d:68:0e:b5:76:69:e2:13:71:3b:45:58:aa:
         d3:6b:2c:6f:cf:2b:92:b5:ab:cf:ff:cc:e5:6d:3a:1e:c0:8d:
         cb:a2:1d:bd:ce:52:1d:c5:09:f6:ba:b8:3f:c6:b3:68:79:12:
         f6:18:fa:7d:09:d0:61:57:36:8d:af:39:36:d7:bc:18:06:a6:
         22:88:af:63:5d:3e:61:4f:42:fe:4a:13:36:89:aa:ab:46:6a:
         a1:39:1f:10:7c:56:c2:f5:d7:63:28:db:a6:24:f1:a7:f6:ba:
         10:e8:67:6f:ca:5a:61:43:fb:35:08:47:7c:54:68:7c:b3:f1:
         38:cc:7c:8b:c7:28:f9:95:51:63:94:86:81:81:c0:7f:b2:67:
         83:f0:58:97:15:9e:97:73:fe:e8:7d:c3:15:71:b4:14:b4:0e:
         f6:1a:19:34:8e:07:eb:cf:76:d1:b2:a1:c9:6f:d0:b2:97:8c:
         40:b2:64:06:9b:df:6c:ec:65:2c:42:a1:e3:fd:22:ba:17:49:
         9c:0a:7c:d5:e6:60:35:39:b2:4b:f8:4b:b2:bc:93:53:6c:0b:
         9a:b3:25:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:34:22 2025 by rpki-client