Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa
File:                     ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa (raw, json)
Hash identifier:          2Ru8+1jOqSDqH9l2iqgbinCCs30j4iqRuuyOxYqiu3Y=
Subject key identifier:   1A:AB:54:03:D1:D4:85:85:A6:5B:43:2A:20:4B:8A:37:28:AB:F2:B9
Certificate issuer:       /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial:       010D0C9F4328584B6631FDE77AF613A6B687C900
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     62494
IP address blocks:        2604:9440:2300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:fd:e7:7a:f6:13:a6:b6:87:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=92823d7d-31a1-4959-923e-b69177ca245b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:56:67:71:31:4f:76:04:c7:b5:3f:f2:8e:db:
                    a4:72:50:da:36:16:d1:fe:cb:f9:f8:71:8c:33:34:
                    ba:9e:b3:61:f7:c7:0a:df:38:fe:1a:d7:a8:97:4f:
                    5e:44:02:6b:8f:cd:e1:f2:0b:72:24:45:f2:bd:44:
                    18:22:01:1f:33:97:67:81:7e:e5:76:e1:f7:32:63:
                    fe:83:d9:73:1b:37:62:5e:2a:53:3b:ce:39:1d:be:
                    f8:7e:e3:a5:88:1f:0a:d7:b7:f6:4f:1f:fb:ab:de:
                    cf:54:1f:e5:38:8c:a8:cf:9e:1b:98:c4:d4:a4:30:
                    ba:30:46:82:81:5a:d5:72:31:ee:61:b4:f8:65:7c:
                    d3:2d:8f:23:06:7b:06:7f:10:68:cf:4e:95:c0:ce:
                    f6:cc:f6:66:c0:f9:da:c4:ab:7f:b5:88:b2:e3:6c:
                    c0:5d:7a:85:b5:37:64:01:32:89:67:23:0c:94:5f:
                    66:9b:bb:b0:48:fd:00:49:2a:57:cb:e6:ba:9c:bb:
                    69:8b:2b:8d:d4:04:14:42:92:4b:96:30:ee:3a:c9:
                    09:4d:3b:e8:ba:08:e4:a9:ff:6d:e2:32:30:42:d8:
                    be:38:a6:8a:5a:1d:fc:53:ca:be:5f:89:e0:c3:c5:
                    07:b6:44:ae:7d:66:b0:fb:4a:39:a9:6b:48:49:e1:
                    f0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AB:54:03:D1:D4:85:85:A6:5B:43:2A:20:4B:8A:37:28:AB:F2:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/ad35fae4-8934-3f28-a147-f28cdf3b31fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl

            X509v3 Authority Key Identifier:
                keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:9440:2300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:9c:84:92:82:8a:5a:b4:8c:f9:11:17:00:14:18:f8:39:1c:
         ea:d0:5a:71:46:b2:8c:86:7a:75:af:8c:6a:88:b3:1a:8a:59:
         eb:ec:ce:d4:e9:46:dc:78:0b:a1:39:0b:99:ec:15:15:2c:9c:
         3c:ba:b1:b4:e8:f2:8b:34:c2:0d:ce:6a:51:41:14:64:f1:3d:
         8e:82:57:a0:46:28:41:68:fb:83:94:d2:2e:fb:69:4d:6e:e7:
         d3:a0:37:f6:22:38:1b:58:d0:79:64:41:7b:67:ae:36:af:35:
         3e:10:89:63:d5:a1:29:4e:88:fa:50:21:3d:b3:32:39:f1:c8:
         95:4b:1d:2f:23:cf:7c:5f:2c:fc:06:de:30:f5:9d:cb:32:17:
         2f:ce:b0:44:3b:16:b1:b8:7c:9d:91:58:76:4f:aa:dd:80:80:
         5e:94:14:60:a5:4a:1e:6c:26:f7:37:3f:2f:d4:72:1c:57:e8:
         f2:c6:80:d8:c6:93:4d:1a:dd:e7:98:2b:8e:b5:31:cc:18:72:
         b7:34:f6:6f:22:d4:15:55:a0:c5:c2:64:90:39:e4:6d:a2:93:
         b1:69:75:c8:34:b1:a1:e3:b5:3f:c8:cc:b1:44:6b:8e:a5:26:
         52:b0:df:6f:dc:26:75:8a:6f:b9:68:ae:44:9d:bc:04:1d:26:
         db:cc:0f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:54 2025 by rpki-client