Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f805119-2eb2-3f53-9550-6a0b86669f2b.roa
File:                     3f805119-2eb2-3f53-9550-6a0b86669f2b.roa (raw, json)
Hash identifier:          2AZDwdHyFJ1nsdO90PNYUAfSv0PlhyvWIsiknAZ9eeY=
Subject key identifier:   B1:E0:E7:8D:9B:19:D0:54:31:44:9A:2C:C4:BC:E2:2C:98:E2:B6:1D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AAA00FEA83CEA2B4C205C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f805119-2eb2-3f53-9550-6a0b86669f2b.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33662
IP address blocks:        2603:300c:1800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:a0:0f:ea:83:ce:a2:b4:c2:05:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=bc2cca88-79ec-4a3e-8954-61c4d16d7939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d9:fa:cf:43:04:17:62:e3:6a:16:08:b0:e9:
                    36:49:b4:a3:8d:f1:ad:9f:ea:56:ee:25:00:4e:75:
                    ad:e9:dd:a2:47:53:63:2d:22:52:6e:ad:2b:87:9c:
                    b9:b2:e3:fa:5e:fc:13:5b:fe:f5:36:69:1e:7b:33:
                    29:9a:4b:11:cd:46:10:7d:52:4b:c5:2a:4a:58:3c:
                    cf:11:d1:ab:84:d5:26:c0:b2:86:14:f8:73:c6:61:
                    9c:e3:94:eb:fb:58:72:a8:65:9d:e2:67:b5:e5:54:
                    77:9b:83:b9:52:cb:9f:e2:0a:6e:3e:5f:6b:8c:a7:
                    a0:a6:5a:92:04:e6:8c:96:62:7d:35:86:85:95:5f:
                    73:9f:4f:c8:b5:0c:de:e6:0c:46:51:b5:75:aa:1b:
                    6d:23:e3:6c:58:6e:b5:ab:71:34:0d:12:d3:7e:11:
                    7e:ec:be:96:e1:3d:8f:7a:0b:82:4b:e6:a3:f4:7b:
                    13:44:bf:fa:ba:24:bc:dd:dd:04:00:73:cf:b8:20:
                    00:b6:98:0f:b2:3b:21:47:ba:79:9d:76:06:50:c0:
                    f4:b9:82:c9:a7:99:70:67:1b:b7:e1:55:21:14:94:
                    d7:a2:8e:da:a9:f9:e4:f0:e4:93:43:02:c0:aa:36:
                    fc:ae:11:26:49:07:a1:29:d5:8b:d0:14:b8:a2:81:
                    78:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E0:E7:8D:9B:19:D0:54:31:44:9A:2C:C4:BC:E2:2C:98:E2:B6:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f805119-2eb2-3f53-9550-6a0b86669f2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:300c:1800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:98:74:6c:8a:13:34:28:60:13:3e:46:0b:42:9c:00:cd:be:
         f1:d8:be:17:6c:f1:6e:42:ee:01:fc:e0:5e:ef:ad:12:c9:67:
         6a:82:0f:ee:e1:1c:5d:f0:f0:7a:cd:f8:fe:b2:68:0d:5e:a1:
         de:a6:4c:eb:77:c5:cd:cb:60:b2:3f:2e:7e:e6:76:b2:1c:3a:
         94:fc:13:56:1f:de:bd:e7:a5:d4:52:e8:c8:31:f0:f0:2e:61:
         7f:f4:53:5b:53:62:ef:91:f5:e2:27:c3:b2:23:0b:b6:99:79:
         ae:05:2b:a4:15:03:0d:1c:c2:bf:7d:0b:cb:20:e4:15:11:9f:
         c2:e8:8f:33:69:ad:da:c0:09:5f:45:5c:68:f8:60:c4:7a:bc:
         7d:1c:6d:e5:c3:29:39:e8:53:f2:f5:14:a4:ce:81:e9:f8:15:
         12:fc:ab:f6:14:64:0c:ca:da:95:b2:b0:19:ce:03:17:d0:00:
         0d:e9:e4:c9:2a:37:89:57:3a:8f:3e:29:bb:f5:f2:e7:34:fa:
         f9:b0:f1:56:af:2d:d6:c8:12:66:50:05:03:fd:4b:fc:30:ba:
         2c:64:aa:97:cd:a8:3a:49:98:57:44:da:f8:30:a5:5d:a6:a5:
         dd:a7:12:ec:0f:19:ab:ff:ea:a9:6a:ea:19:f9:c3:43:41:1a:
         95:30:47:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:26:00 2025 by rpki-client