Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/310695b2-42cf-3a7c-b379-21d69206da74.roa
File:                     310695b2-42cf-3a7c-b379-21d69206da74.roa (raw, json)
Hash identifier:          zlBeNj7alSPJdrojtYgDN2vqVziLumVmaUVdovH+oN0=
Subject key identifier:   31:40:E0:89:20:E8:AE:94:6B:8A:D2:0E:94:4D:75:4C:41:FC:3F:24
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584BD8AB20EC89A36A5D86DF4980
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/310695b2-42cf-3a7c-b379-21d69206da74.roa
Signing time:             Thu 13 Nov 2025 13:07:06 +0000
ROA not before:           Thu 13 Nov 2025 13:07:06 +0000
ROA not after:            Wed 11 Feb 2026 13:07:06 +0000
asID:                     812
IP address blocks:        2606:f900::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d8:ab:20:ec:89:a3:6a:5d:86:df:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: Nov 13 13:07:06 2025 GMT
            Not After : Feb 11 13:07:06 2026 GMT
        Subject: CN=f94be2ff-61c6-4fe9-ac7f-7430e685795b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:8c:2c:43:a8:94:d6:93:72:6d:7f:16:e6:
                    36:d1:e2:e0:11:c9:e7:ff:bb:88:94:1f:5d:2f:20:
                    e1:96:33:dd:d8:f9:7b:62:c7:91:55:c5:1d:4e:30:
                    5d:44:8d:3f:00:90:b4:b4:51:36:e4:6f:12:3b:2e:
                    f0:cb:7d:b8:7d:47:b5:8b:0e:e3:ea:c0:57:d1:5e:
                    6c:b5:4f:b3:00:dd:f8:36:85:8c:a8:7e:0f:19:c8:
                    8d:b3:40:9d:95:c2:9f:43:61:dd:14:0b:0b:a4:a7:
                    44:dc:8d:9c:af:c1:64:48:8f:90:99:4b:c3:ad:22:
                    05:f6:d9:b7:05:71:03:0a:78:90:de:e5:a9:ac:c3:
                    e5:bd:3d:d3:42:67:4b:d8:9f:5b:2c:20:9d:39:0a:
                    e6:5f:cb:9f:02:eb:4b:9a:e7:ce:f7:c5:be:fa:4e:
                    9a:8d:96:66:e6:a3:f4:4d:c9:9f:80:5e:db:db:df:
                    e1:83:f6:85:48:ef:3a:95:86:52:e4:8e:f0:15:c5:
                    39:9f:9b:a4:6e:22:d2:3e:8b:62:d9:79:cb:6c:5a:
                    b3:28:3d:fc:0e:74:10:17:ec:6f:82:f6:97:c1:5f:
                    c2:94:5d:98:0d:fe:77:7c:2d:4d:f5:14:5f:21:fa:
                    c4:20:b7:df:dd:14:32:43:fa:60:c8:08:47:81:9f:
                    4c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:40:E0:89:20:E8:AE:94:6B:8A:D2:0E:94:4D:75:4C:41:FC:3F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/310695b2-42cf-3a7c-b379-21d69206da74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f900::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c9:26:d7:0b:cf:c1:7b:dd:55:43:84:b8:95:d1:4b:fe:3e:
         5b:62:6b:b9:64:8a:86:cb:a2:69:6e:21:3f:d1:a7:5d:23:7e:
         5f:7e:fb:7e:4f:34:09:9f:46:a2:64:06:67:0d:f0:7d:71:34:
         53:28:c8:9a:9a:79:37:f6:f4:f2:d1:19:50:4c:da:c8:3e:05:
         06:12:b4:2d:0b:20:0e:f8:c5:21:14:1e:27:37:2f:9f:08:2e:
         f2:33:56:0f:85:a4:1e:30:d6:13:4e:42:24:4f:aa:d0:51:cb:
         bf:70:94:01:68:c0:af:cb:ff:1e:3b:3e:72:60:1b:87:1e:c9:
         56:bd:a2:7e:97:dd:db:a7:4b:80:75:5c:26:50:72:58:d1:85:
         53:69:34:32:15:5c:da:b3:58:23:14:52:84:7d:6b:40:ac:e3:
         13:45:46:5b:9e:09:c4:b8:c1:4e:6d:1a:b3:7c:6f:93:12:72:
         ef:27:d7:ae:a5:1e:a2:82:e4:a7:e4:2a:99:50:65:2e:1f:73:
         43:35:6d:89:9d:af:1c:44:f1:26:3e:0d:15:41:46:ee:e6:1c:
         83:80:8c:3f:03:53:03:3a:03:90:0e:ee:33:ee:85:2a:34:8a:
         cf:ff:90:62:c7:d9:ce:27:63:02:f5:55:87:43:db:4d:08:da:
         86:a3:24:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 16 22:05:20 2025 by rpki-client