Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/81c68807-bdab-3ee3-b12f-43b48a2e5472.roa
File:                     81c68807-bdab-3ee3-b12f-43b48a2e5472.roa (raw, json)
Hash identifier:          uQllp2ukqRguVi9B3eHFlPk5oAJr9et7OD/qZLtrKIw=
Subject key identifier:   80:5E:84:89:74:66:1C:6E:0B:15:11:F7:41:45:D5:9A:75:BF:8F:80
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584BBFA59B03E848303B0641A860
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/81c68807-bdab-3ee3-b12f-43b48a2e5472.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     1239
IP address blocks:        2600:2:110::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:9b:03:e8:48:30:3b:06:41:a8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=307ab24b-b163-422a-b74e-ce8c22955fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:95:67:27:96:83:ef:f6:3b:32:04:7c:db:
                    8b:11:ee:8a:24:a4:01:d9:3d:2a:08:a9:2d:57:c3:
                    93:1b:25:70:3a:f1:14:51:7f:ae:6d:13:c2:0c:a8:
                    75:62:36:ca:6c:de:18:49:83:f9:dc:fe:fb:68:ec:
                    4d:f4:b0:43:f5:1e:9e:38:8d:e6:8a:f3:68:0f:4a:
                    76:6b:1d:3a:ad:0b:7e:e1:19:e9:14:d5:ab:a0:3c:
                    d1:80:af:12:b8:63:3a:70:d7:2f:6f:3d:8e:64:c0:
                    6c:85:73:e6:51:18:ba:cc:a0:85:80:9d:84:06:45:
                    fa:0a:f2:99:6b:12:d2:78:8b:b4:46:2c:cb:7a:19:
                    cf:95:4b:71:53:fd:be:99:c0:f7:b0:a5:ca:55:42:
                    6d:48:95:32:9d:99:88:b3:c9:0e:34:32:dc:16:71:
                    21:ad:4c:5d:bf:d3:31:60:0f:12:cf:ae:78:36:51:
                    36:2d:86:64:ea:9b:f2:d2:5e:f0:8f:90:e5:d0:67:
                    84:07:66:90:56:b6:de:c4:34:13:9b:71:56:3b:55:
                    79:32:4c:35:f8:d3:c7:72:6e:fb:25:96:87:6f:6c:
                    72:96:8e:6f:a5:40:6d:96:ce:5f:83:02:02:f3:75:
                    9d:49:c5:84:8e:7c:34:43:35:63:4c:68:f7:4c:57:
                    ff:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5E:84:89:74:66:1C:6E:0B:15:11:F7:41:45:D5:9A:75:BF:8F:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/81c68807-bdab-3ee3-b12f-43b48a2e5472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:2:110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:24:14:f0:61:88:77:d8:f4:3c:c8:ab:0b:92:e5:07:ab:cc:
         aa:f3:71:a5:81:16:2b:7b:a8:e8:b0:cd:b2:c6:e4:80:27:80:
         ab:a2:9b:3d:84:bf:0e:3f:25:aa:28:f4:90:8f:c2:cd:ab:47:
         4a:8b:21:45:78:bc:bf:7a:ec:1b:80:c1:2e:a4:92:ef:f7:6d:
         1f:87:23:04:01:be:db:ad:b3:0c:3e:d0:b5:34:ab:46:f8:81:
         81:de:29:45:c4:9e:55:e5:18:d5:b0:b5:22:f5:90:dd:57:96:
         c2:c8:20:a6:cb:36:3b:57:ed:a8:33:ed:36:10:fa:d3:33:5f:
         c6:b9:e6:46:06:69:47:af:7e:e5:e0:e4:c4:b1:51:35:0c:18:
         c8:b3:e3:ca:67:12:24:73:78:d2:b4:bd:d9:49:95:77:97:3b:
         8c:fe:e6:c4:1a:4a:9e:57:bf:c9:1f:42:aa:f1:f2:ed:cc:c4:
         50:ae:54:ac:a4:97:16:72:1e:8c:5f:9f:e2:df:4d:ec:0b:60:
         21:3c:9b:04:00:d7:a6:35:77:ce:6a:76:1e:96:0b:53:6d:69:
         31:a3:8f:17:bf:fd:89:30:26:74:e1:07:00:a2:17:57:82:2c:
         6d:2d:1b:17:06:fe:ef:a1:6e:97:e5:01:87:de:48:0f:74:5a:
         4f:3c:66:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 10:52:30 2025 by rpki-client