Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/c6c88393-16b9-310a-b642-d7f7a7119804.roa
File:                     c6c88393-16b9-310a-b642-d7f7a7119804.roa (raw, json)
Hash identifier:          C3K0sjO9Ipg99L2xaNAKcpbz4ouQwRP0z7C8J80f0vE=
Subject key identifier:   86:48:4B:D3:03:EA:A4:48:26:2E:D2:97:87:BB:D9:54:8B:28:A4:EF
Certificate issuer:       /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial:       010D0C9F4328584B78574D65D6C738B38CC17C00
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/c6c88393-16b9-310a-b642-d7f7a7119804.roa
Signing time:             Fri 10 Oct 2025 01:00:30 +0000
ROA not before:           Fri 10 Oct 2025 01:00:30 +0000
ROA not after:            Thu 08 Jan 2026 02:00:30 +0000
asID:                     5744
IP address blocks:        2610:20:5100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:78:57:4d:65:d6:c7:38:b3:8c:c1:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
        Validity
            Not Before: Oct 10 01:00:30 2025 GMT
            Not After : Jan  8 02:00:30 2026 GMT
        Subject: CN=7c1cb8cc-2f12-4b17-a33b-3321a928928b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5a:df:08:09:2b:d6:e5:80:16:30:e6:bb:02:
                    ec:c0:ec:65:28:cc:8b:4b:dc:89:72:af:f7:b0:1a:
                    a4:2f:97:d3:10:b5:a3:aa:ea:8d:b9:12:f8:45:43:
                    2b:6f:1c:f6:6b:19:c0:29:cd:ce:1b:03:9f:bb:0f:
                    ff:72:9d:2e:1c:69:4b:a7:96:9d:ff:bb:fe:ef:9f:
                    e4:89:36:94:3c:75:c0:6c:6d:8c:57:cd:0f:0e:c3:
                    3a:40:55:e2:4a:16:24:ff:e8:90:77:a6:de:ea:3e:
                    2a:76:1a:3b:d2:05:53:e8:4b:71:ee:42:29:ce:28:
                    95:91:86:df:ec:a9:0d:61:f2:57:bc:89:5f:7b:64:
                    81:5f:cc:02:35:05:77:be:56:c6:04:6d:99:9f:0d:
                    f0:b4:15:02:60:2a:74:4b:2a:a2:9c:92:79:0e:cf:
                    ba:1f:b5:bd:72:c7:b1:ec:6d:19:13:df:ee:f1:33:
                    6f:b8:9b:d5:a2:7d:ac:9c:51:44:24:1a:77:6a:b3:
                    62:d1:01:4f:bb:af:f4:b8:0e:63:fd:58:c3:61:da:
                    af:1b:b8:d7:8b:00:38:b3:54:45:b1:37:5d:29:1d:
                    9e:d2:d2:5a:6c:91:da:3e:4a:51:24:0f:77:6b:e2:
                    47:19:19:17:cb:40:31:30:71:6d:af:11:53:d6:5d:
                    e2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:48:4B:D3:03:EA:A4:48:26:2E:D2:97:87:BB:D9:54:8B:28:A4:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/c6c88393-16b9-310a-b642-d7f7a7119804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl

            X509v3 Authority Key Identifier:
                keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:5100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:0f:48:30:11:c8:c0:26:40:f4:d1:82:7f:ca:5b:f6:40:dd:
         d5:06:ed:58:a7:ec:11:1c:bd:d4:08:71:8b:58:8a:fe:a9:94:
         0b:ca:d4:cf:27:a0:87:d9:ea:07:e5:82:b1:66:85:15:1e:61:
         be:b9:38:f0:bd:d0:fb:0d:12:69:52:f7:f6:97:9b:b9:ab:88:
         88:1b:27:24:2e:fc:81:a9:07:1b:17:7d:a5:e3:8a:31:70:07:
         c4:b6:a7:84:46:e2:2e:24:f7:05:8c:48:38:4c:4f:73:53:f7:
         39:70:6a:ee:d9:db:4d:62:48:9f:8c:3b:10:f0:02:72:1c:03:
         f0:eb:6e:ec:f3:73:d9:11:a6:53:a3:c7:cf:cd:e3:1f:1b:5c:
         d2:90:a7:fd:97:1c:fc:11:f1:a4:a6:55:0f:f4:8c:05:8a:53:
         e9:14:9d:8b:e8:10:2b:f7:f5:95:99:fb:8a:0f:f3:ae:18:74:
         3d:3e:b6:02:79:f1:38:1a:e9:da:34:a1:56:f4:70:80:00:c2:
         2a:eb:80:58:1e:40:c5:68:8d:99:2a:e5:3a:dd:ca:00:93:75:
         a1:6d:97:dd:33:06:73:16:f1:b1:e7:2b:3f:0d:35:f8:73:80:
         fb:52:3c:db:07:7c:94:4a:40:2b:36:2a:87:ce:f4:1e:59:ea:
         1a:11:71:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:34:23 2025 by rpki-client