Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9d977c-9af9-342d-a220-6ee8a2985aa3.roa
File:                     cf9d977c-9af9-342d-a220-6ee8a2985aa3.roa (raw, json)
Hash identifier:          D5M8j6zzpA34KY/GLfcq/waXRmsjCix3bgyGXtEd2jA=
Subject key identifier:   4A:BE:98:62:9D:6D:6D:88:CE:82:01:55:A6:B9:7B:D2:61:7C:DE:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A80616CA351EC219CE2300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9d977c-9af9-342d-a220-6ee8a2985aa3.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        2601:191:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:06:16:ca:35:1e:c2:19:ce:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=f1281eec-076a-42e8-aa75-24420e6f38ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6d:a7:5c:eb:5e:39:e9:2a:74:fa:f3:9e:5f:
                    df:c1:5b:2e:b2:4e:08:91:58:70:26:62:aa:ac:4f:
                    e4:ea:72:bb:6d:97:7a:f3:01:64:64:06:44:98:c3:
                    ce:d7:cd:6a:22:0e:32:0d:37:a9:a2:9c:d3:14:c3:
                    0f:28:54:29:6a:42:ce:44:36:a4:d9:9b:85:da:5a:
                    bf:f5:ac:61:de:6f:e9:f4:93:18:67:5e:d4:7a:7e:
                    34:27:6b:a6:d5:6a:70:6b:e3:dd:0c:6d:60:75:0e:
                    fe:41:45:3e:60:5d:27:f0:aa:40:88:7c:44:c0:7c:
                    cb:30:96:b4:d9:6a:4f:a7:9d:0d:86:8e:db:6c:ef:
                    fc:fa:b0:5f:d9:1a:ca:0a:88:f3:af:f0:7f:cd:9d:
                    87:74:6a:04:aa:7c:de:a3:9c:04:ec:1f:42:87:28:
                    bf:62:4b:66:86:33:db:30:c5:69:ae:5e:3b:db:c7:
                    64:fb:d2:d0:93:b7:d4:bc:95:b0:79:e6:68:d7:ad:
                    fe:3f:5f:bb:c6:65:04:d8:29:5c:2a:26:25:b0:d3:
                    40:e2:e9:e2:7a:3e:02:2b:9f:d2:12:25:6e:27:84:
                    40:98:08:c3:5f:f8:91:a3:e5:53:78:50:a9:c7:c3:
                    fe:da:ab:12:47:1c:04:67:5d:a3:cd:53:f8:ac:02:
                    ca:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BE:98:62:9D:6D:6D:88:CE:82:01:55:A6:B9:7B:D2:61:7C:DE:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf9d977c-9af9-342d-a220-6ee8a2985aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:191:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:9f:c8:57:df:e8:1f:08:97:6b:79:fa:3c:cf:cf:2d:26:aa:
         50:97:04:12:84:8d:ad:fb:63:73:15:76:aa:c2:8c:32:de:e8:
         2a:e7:2b:3d:d0:e1:15:7a:02:ad:74:bc:bf:a6:8e:67:b6:3e:
         1c:e4:d2:6a:fe:c5:cb:99:17:bd:86:7c:e8:fa:35:db:30:28:
         c5:f1:bc:1d:1c:61:00:7a:ec:29:8c:5b:21:5d:76:2c:b1:e0:
         bd:6c:81:41:2e:e7:77:75:49:fc:ec:82:b9:61:3a:8d:a9:3a:
         31:d7:de:00:a4:0f:83:95:f2:41:67:8b:c3:ef:8f:e0:59:04:
         09:d5:f9:70:50:f5:06:29:57:62:64:19:69:bf:32:8b:68:ad:
         4a:ae:fc:ae:2d:6c:a7:aa:83:cf:ec:a3:81:b7:94:4e:49:91:
         72:a5:99:6c:d0:26:f4:c2:fe:5c:24:08:30:6e:63:d0:9b:1f:
         04:d8:9f:f3:17:29:e0:0e:36:d6:13:9b:89:62:10:be:b9:9f:
         aa:7a:a0:27:40:50:e2:70:79:7c:2d:1d:fc:90:53:e0:93:c1:
         30:a3:6a:4f:13:ca:47:86:08:d5:a2:10:65:2c:b4:4e:f0:56:
         35:07:6d:1e:47:b8:0c:fb:6b:f2:b6:2b:37:d6:26:d1:40:96:
         70:df:ff:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:52:36 2025 by rpki-client