Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7964d6a-a76e-3131-81c1-69907588b296.roa
File:                     f7964d6a-a76e-3131-81c1-69907588b296.roa (raw, json)
Hash identifier:          F/jWoVrs0oYs94KWnwwEMVSMCq4YfW9S1SUETo/GBoc=
Subject key identifier:   C0:0B:3B:38:26:D8:34:F0:D8:32:47:B7:D9:B1:B4:2B:61:18:64:29
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A80E411B4D22E5A31593C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7964d6a-a76e-3131-81c1-69907588b296.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7015
IP address blocks:        2603:3005:4c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:0e:41:1b:4d:22:e5:a3:15:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=70dcce54-7e8a-4da8-8a3c-a0f804a79774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:b4:90:1d:2b:3c:c9:28:15:a1:bc:e9:16:
                    bd:fd:ca:b0:1c:90:49:79:53:b6:76:f6:eb:e1:a5:
                    ca:1b:06:22:51:b1:c3:30:75:34:f0:a5:1e:23:7b:
                    04:1c:1a:89:21:d9:b5:27:08:d4:4f:88:b6:49:1e:
                    a8:52:ab:a7:58:2a:3c:3a:8b:2f:e1:f5:86:c5:69:
                    0f:51:38:31:cb:f1:9a:a7:72:8d:df:7b:00:6c:13:
                    02:3a:82:0f:08:c2:20:63:a8:4e:28:42:9b:df:2e:
                    67:a9:bb:c8:50:52:fd:a4:fe:b5:51:ce:36:d6:e8:
                    97:6c:f0:7a:0d:1f:d9:9b:e7:f8:51:3d:7f:4f:4f:
                    46:86:bc:55:29:02:dd:d0:e6:40:cb:7c:78:fa:53:
                    e8:1e:8f:d1:e3:11:29:16:1f:01:d5:15:81:ff:f0:
                    c2:0f:98:56:d9:6c:9e:77:0e:cb:05:e4:23:37:b6:
                    62:14:00:18:51:1d:2b:63:30:f0:fc:21:1f:23:fb:
                    a1:ae:38:21:63:ee:2c:32:24:35:71:04:9c:70:fd:
                    a4:1c:02:8b:55:2f:ca:38:28:0c:7d:0c:33:0f:58:
                    5e:c3:e3:8e:9c:a2:1f:10:61:53:0d:48:e1:ad:40:
                    b2:32:18:1c:07:1e:0f:f0:80:16:e6:b6:4b:42:a7:
                    71:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0B:3B:38:26:D8:34:F0:D8:32:47:B7:D9:B1:B4:2B:61:18:64:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7964d6a-a76e-3131-81c1-69907588b296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:3005:4c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ba:22:47:62:7f:11:02:f2:3a:b8:85:0f:56:3b:ed:7f:fe:
         35:c2:6f:48:13:63:16:e2:00:9e:6d:34:bb:99:fb:60:86:99:
         82:26:1c:af:ea:c8:b6:28:56:df:06:fc:10:85:87:95:9b:d5:
         9f:9d:13:90:58:cd:f0:61:c8:73:64:e8:6f:3f:d1:52:d2:d3:
         9e:e8:74:c3:7c:cf:08:d4:81:f8:86:32:25:d6:54:79:4b:0c:
         49:65:9c:3a:b1:2d:1b:15:af:cb:12:2b:6f:b0:12:10:b5:e0:
         9e:dc:f5:9c:cb:31:2a:17:03:ae:4c:93:dc:9a:a9:03:41:06:
         4c:63:5a:fc:6f:2d:4a:57:0d:d8:71:1b:11:53:47:40:50:fa:
         d5:7d:0d:32:c7:cb:ed:b9:1e:be:67:98:95:01:48:71:58:2f:
         13:48:dc:6d:3d:c2:7d:61:59:f8:75:f1:70:eb:cf:14:d2:13:
         8a:a7:9e:53:b0:5f:f4:5d:05:39:8b:b6:ca:bf:5b:e2:d4:41:
         eb:81:02:11:67:55:d0:ef:97:9e:2c:53:e1:3f:b9:d9:71:61:
         01:25:29:36:2e:0f:5d:ee:09:50:a0:75:55:38:70:07:71:8b:
         8c:41:50:c5:cb:c5:ec:21:6a:7b:32:0c:26:24:6d:13:c8:ee:
         23:e8:d6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 19:19:03 2025 by rpki-client