Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/c0745459-884b-33e8-a244-c9b69f9111e0.roa
File:                     c0745459-884b-33e8-a244-c9b69f9111e0.roa (raw, json)
Hash identifier:          iNNA16pUJ04D9xyqwc8GuKWPpDhIGMNLkmj3KFRyw54=
Subject key identifier:   2A:CE:BA:DD:81:5C:E2:FF:99:0F:5E:11:DC:5B:19:01:E7:06:2B:72
Certificate issuer:       /CN=10b5a04a-f4e1-44ae-be5f-312a5d1a57c8
Certificate serial:       010D0C9F4328584BCAD0549CCDDE8470A4B99D00
Authority key identifier: ED:4C:8D:F8:79:6F:9B:C9:5E:AC:3B:10:BA:33:AA:5A:AE:B3:C1:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/c0745459-884b-33e8-a244-c9b69f9111e0.roa
Signing time:             Sat 08 Nov 2025 14:00:39 +0000
ROA not before:           Sat 08 Nov 2025 14:00:39 +0000
ROA not after:            Fri 06 Feb 2026 14:00:39 +0000
asID:                     395649
IP address blocks:        2604:7c40::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ca:d0:54:9c:cd:de:84:70:a4:b9:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b5a04a-f4e1-44ae-be5f-312a5d1a57c8
        Validity
            Not Before: Nov  8 14:00:39 2025 GMT
            Not After : Feb  6 14:00:39 2026 GMT
        Subject: CN=6cf0df18-77ae-4281-b717-4f701e568299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:47:ce:ab:23:59:ea:70:c4:eb:64:87:e8:16:
                    2b:b8:8a:2f:b6:d8:6b:42:1d:9a:6c:22:24:b4:85:
                    0a:4e:29:84:9a:89:dc:19:76:1e:52:f0:61:d6:c5:
                    a2:cb:d1:bf:f1:57:f1:65:27:59:76:b7:93:9e:81:
                    3b:5e:e3:1f:23:3f:bc:24:22:71:54:c1:03:5a:65:
                    db:e3:9d:76:28:50:a3:a6:6a:eb:38:d3:6b:08:ed:
                    8a:27:9d:bb:46:33:fb:86:79:0c:43:78:67:1a:cc:
                    97:56:5f:be:80:41:c6:d2:ba:62:b6:6e:44:c8:62:
                    ac:eb:34:8d:1d:fd:77:58:96:b2:f6:18:1d:8d:a8:
                    bb:02:b8:06:be:69:15:10:07:da:e0:f6:ed:ec:10:
                    83:e0:ae:e6:87:bc:bf:c9:e8:d9:81:8e:20:0b:5f:
                    06:77:86:b5:0c:f5:f0:02:39:5f:4d:ed:5b:8f:28:
                    9f:a7:2f:82:cf:26:42:e4:fd:57:7d:3c:af:5e:dc:
                    17:b8:c0:2a:45:05:ab:29:bf:f1:2c:ac:13:c0:f0:
                    1a:90:96:a9:f0:39:3a:87:4d:69:8c:ea:29:5c:33:
                    b9:55:5f:1c:5c:b4:84:a1:99:d3:5a:f7:21:2d:8b:
                    b4:39:43:9b:21:32:5f:3d:bb:3a:a3:40:4e:53:f6:
                    a2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CE:BA:DD:81:5C:E2:FF:99:0F:5E:11:DC:5B:19:01:E7:06:2B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/c0745459-884b-33e8-a244-c9b69f9111e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.crl

            X509v3 Authority Key Identifier:
                keyid:ED:4C:8D:F8:79:6F:9B:C9:5E:AC:3B:10:BA:33:AA:5A:AE:B3:C1:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7c40::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:42:c8:28:43:43:04:5c:2a:3b:7b:d1:2a:df:ff:58:c5:2d:
         de:65:08:06:36:aa:32:f1:8a:11:48:43:9d:ec:4a:ea:bc:f9:
         9a:15:b2:df:24:91:a8:c0:86:e6:2b:e9:ac:64:2c:4d:b1:b6:
         49:74:cd:43:07:75:45:4c:a7:f9:29:70:dd:9b:2a:33:0a:ed:
         ab:98:8c:2f:13:f9:c7:9f:e2:55:d5:c7:7b:ba:f2:6b:0b:95:
         8f:a1:08:ad:a7:d3:85:20:cf:e7:24:22:fd:01:b9:9a:ac:dc:
         2e:cd:a4:0b:77:73:49:3a:5a:be:63:ad:67:80:ee:1b:25:92:
         ea:53:36:f6:cc:80:c3:70:1a:89:4e:9e:aa:0e:69:d2:80:1a:
         f2:5a:57:f0:88:a4:4a:41:03:2c:b6:23:12:54:53:cd:7d:23:
         89:5a:94:bb:d3:23:a4:6a:22:4d:9d:e1:47:fc:34:78:7b:82:
         c5:d3:5f:5e:30:3b:f8:0f:87:12:31:ef:9b:1f:3e:b2:05:89:
         f5:b8:ec:f2:36:28:2f:b7:bd:85:17:92:d5:79:d6:29:7f:c8:
         4a:b2:ae:78:67:98:c3:21:73:e8:dc:de:42:0e:67:83:94:4e:
         84:c7:85:2d:23:b9:c6:5a:ba:2e:d1:e9:e1:fc:d5:46:28:8d:
         2d:67:21:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 09:58:31 2025 by rpki-client