Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d73e39de-6391-3965-943d-1420254127aa.roa
File:                     d73e39de-6391-3965-943d-1420254127aa.roa (raw, json)
Hash identifier:          cck4nEsaCdYIQMErdedTw27N0WymCYWe8vU0hWqgLKI=
Subject key identifier:   26:73:01:A5:5E:25:1D:DC:16:F5:E9:0E:11:67:14:23:E9:95:A9:35
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95AA48B412DA2EE0EF96C720
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d73e39de-6391-3965-943d-1420254127aa.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        2601:407::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:aa:48:b4:12:da:2e:e0:ef:96:c7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=1b48ff29-1275-440f-9bae-1ba9bbd8f233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5a:ff:50:eb:f9:d4:da:39:9e:73:44:5d:91:
                    3b:a1:b1:8b:b4:8c:25:1f:03:7e:7c:05:d9:c4:59:
                    be:36:b0:72:54:04:ef:a5:0b:b8:ab:46:69:db:af:
                    33:6a:f4:02:0a:10:7f:15:0f:5b:9b:fb:fa:b8:ad:
                    15:f0:9d:53:38:76:97:05:2e:06:e9:3f:cc:dd:7d:
                    61:e0:c9:b8:56:5b:d5:71:b6:cd:4f:55:5b:4c:86:
                    94:61:4a:ad:fb:c0:dc:a2:21:12:a1:84:fa:54:65:
                    f1:d1:f5:f5:f2:78:c7:ef:fa:ae:53:72:20:6b:27:
                    c6:47:ef:9f:c4:65:9a:23:f9:9c:28:a3:14:23:bb:
                    de:06:33:5f:0f:07:4c:ef:9b:61:53:26:62:34:9d:
                    91:05:12:2f:67:c0:75:1a:33:57:08:62:2a:01:97:
                    33:64:12:b8:a4:bf:bd:27:da:78:1e:c3:7c:ee:ec:
                    47:9f:14:77:b2:cc:62:13:bd:9a:09:e6:f8:d1:bd:
                    b9:15:b3:3e:d8:cc:7e:ef:89:c9:5b:0a:d1:d2:77:
                    98:ce:79:8e:97:23:27:02:ba:34:31:64:fd:da:6e:
                    fe:f6:70:5a:5f:82:88:fe:1a:70:b2:94:06:50:7b:
                    82:39:a2:66:b2:75:26:a3:11:01:be:56:6b:f0:a1:
                    b7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:73:01:A5:5E:25:1D:DC:16:F5:E9:0E:11:67:14:23:E9:95:A9:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d73e39de-6391-3965-943d-1420254127aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:407::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:0f:67:19:03:ee:c0:ea:96:06:c6:a0:f3:05:57:05:33:be:
         aa:cf:06:bb:b5:f9:b8:7b:4f:70:da:dd:cb:0b:71:7c:24:90:
         7c:e0:74:03:10:45:6f:14:5e:24:98:9a:de:f9:36:77:cd:d1:
         71:fb:44:30:57:ad:c4:de:dd:33:c2:2c:f9:49:8d:1b:f7:8c:
         d4:e9:f9:25:2c:b6:6a:fa:a5:3d:0f:2a:a1:40:72:ef:8d:b9:
         f8:5f:bc:91:fd:f7:4d:c5:57:00:6e:0d:9e:50:72:ec:43:35:
         bd:f4:af:00:b9:e1:39:a6:8d:4f:69:af:12:02:de:0f:aa:ae:
         8e:83:a9:7e:8d:d1:6b:a5:7b:d3:4b:b7:eb:7b:d3:e9:0e:5b:
         be:21:15:74:23:f7:38:a9:fd:57:f0:d8:89:f9:7b:69:11:95:
         fc:3b:81:03:ab:a7:dd:4d:f6:ad:0b:cd:78:26:1b:88:91:7a:
         9d:12:8b:01:90:a1:26:1a:ec:57:25:98:fa:68:73:48:d1:74:
         4b:8a:9a:d6:b2:bc:9f:c2:70:da:17:b2:49:5d:45:37:f3:95:
         1f:7d:c7:e1:9a:bd:01:29:36:e4:11:da:b6:76:54:d0:d8:91:
         47:8a:80:57:3f:ba:4d:41:9e:f2:1c:74:30:68:fc:b8:10:73:
         50:4c:4a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:46:10 2025 by rpki-client