Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/115264bd-130b-36c3-8efa-f52284b6ea50.roa
File:                     115264bd-130b-36c3-8efa-f52284b6ea50.roa (raw, json)
Hash identifier:          bL2NwyD8+fnE5f8z0lJCg5YjLb+5DdzBA2hyrelPewI=
Subject key identifier:   A1:18:F2:3D:9B:9A:0D:3A:E1:6B:A9:71:7C:9A:D7:D3:AF:E6:E0:C1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A9ADF4FD3E360DEFE1E480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/115264bd-130b-36c3-8efa-f52284b6ea50.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        2601:19b:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:ad:f4:fd:3e:36:0d:ef:e1:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=cfc6f1c9-681d-4d33-980c-1e11d699eceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:25:7c:e6:54:9f:2f:fa:a6:7d:db:42:d5:cb:
                    16:c7:04:cd:d9:ca:1f:20:58:bb:57:48:82:3c:1f:
                    cf:80:de:69:6f:35:3f:67:41:98:a3:99:c7:c0:03:
                    f9:b6:9c:40:4b:6c:d6:34:06:3f:e7:c3:01:30:92:
                    86:17:9d:e6:2a:9f:5f:14:13:e9:b1:95:a6:54:30:
                    3c:d9:6f:23:94:4a:a4:53:8e:5a:7b:bc:31:11:cb:
                    d4:ca:62:c5:31:36:12:88:45:43:9f:a1:5d:2f:01:
                    35:01:b8:57:de:86:f5:eb:a8:fb:0d:d8:f5:18:d6:
                    01:6a:58:b5:f7:58:b8:a5:83:2b:9a:b6:80:0d:70:
                    29:1d:44:30:c7:09:85:5a:9d:94:9b:60:32:41:29:
                    fd:c6:b6:37:f7:58:99:c2:06:b5:d0:ea:39:6e:ef:
                    40:82:b2:40:cf:5a:91:fe:6b:72:32:df:79:9d:e7:
                    b5:66:f4:6d:31:71:04:68:0b:1b:db:80:08:d2:57:
                    05:b9:67:39:f6:cc:76:27:81:3e:62:30:10:2c:4f:
                    4f:07:22:2f:7f:29:85:01:dc:ae:a0:1f:8e:d6:7a:
                    be:a2:b1:dd:6d:1e:84:be:36:a2:b6:d3:39:fd:ec:
                    85:37:ac:40:cc:f8:fc:f8:c9:1a:b6:ed:e1:93:4f:
                    dd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:18:F2:3D:9B:9A:0D:3A:E1:6B:A9:71:7C:9A:D7:D3:AF:E6:E0:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/115264bd-130b-36c3-8efa-f52284b6ea50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:19b:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:79:e0:d8:49:be:80:82:fc:18:7b:e1:46:c3:d7:e7:5e:f9:
         e9:aa:a3:e8:13:ae:b8:42:61:54:4a:5b:0b:8d:45:98:d8:96:
         6c:fb:2b:da:77:1f:56:8d:c0:be:4f:c8:9a:26:a1:b7:7c:bd:
         37:53:1c:9d:ae:b7:46:f6:92:2b:4a:8d:cf:cd:bd:e4:c7:bc:
         ec:7f:29:fa:38:e0:a1:d8:7d:14:3a:d4:0a:90:ff:9f:8b:8a:
         b5:55:f7:7b:e8:1b:9a:f1:5c:52:44:62:63:d6:f8:ac:d5:e9:
         ee:de:07:8e:2a:ec:1d:f5:8f:a0:38:2f:48:2e:0e:9c:7c:de:
         10:a1:ee:4d:01:ff:c2:06:ab:58:87:fb:6b:df:be:a1:fd:8e:
         7f:e4:5c:92:df:7f:c5:7c:e0:5f:1e:3f:87:93:50:3d:a4:aa:
         a6:3f:ff:e6:26:a1:d0:9e:eb:c7:63:a4:83:98:53:41:e6:13:
         b9:23:77:c2:d5:9d:1b:47:22:b3:66:db:ec:d2:aa:29:6a:13:
         d1:e1:aa:4c:05:03:4e:d9:15:68:43:b0:58:44:f2:83:2a:95:
         9e:31:92:91:52:36:0f:39:52:b1:2e:10:27:aa:1c:c3:64:7d:
         1d:69:61:3f:99:83:6d:ce:4d:45:11:af:4c:f4:5f:ed:0d:06:
         7f:69:5d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:35:46 2025 by rpki-client