Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/41b614f9-8bf2-3058-beb3-ba91615edf63.roa
File:                     41b614f9-8bf2-3058-beb3-ba91615edf63.roa (raw, json)
Hash identifier:          /0OG8EUjTJGrd0C26SS3QcgvyNxae+7qphIzA5F6kRU=
Subject key identifier:   F1:C2:14:6B:DC:6B:09:D7:FF:55:25:F6:65:5D:A3:96:F0:34:A4:77
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584BA39D0B55E5F878D54BF44400
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/41b614f9-8bf2-3058-beb3-ba91615edf63.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        2605:dd40:8f80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:0b:55:e5:f8:78:d5:4b:f4:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=6b29c197-86c7-4f4e-89d7-bbea28140842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8b:61:7d:62:0a:37:aa:53:b7:c0:02:9d:c6:
                    e2:2c:ca:48:e8:bc:58:db:f2:8d:b7:fd:44:53:1c:
                    52:e2:e8:08:b2:09:5f:7a:ee:f2:e7:42:b2:09:67:
                    d5:31:78:8f:e9:6e:49:6e:77:35:1f:82:8f:57:55:
                    c0:3a:19:5b:7a:ce:df:0b:ba:db:13:1a:44:b7:b2:
                    16:25:06:69:f3:c5:d0:84:52:eb:32:77:f5:27:ed:
                    ef:d1:f9:13:25:0d:8b:30:ef:6d:42:61:e4:8e:f9:
                    92:95:cb:03:68:ff:c4:a0:17:d1:23:66:65:6c:0b:
                    7a:12:a3:62:3e:b1:ed:11:92:86:2a:53:10:18:e8:
                    de:15:4d:b3:83:fb:d4:4e:36:77:93:73:9c:43:03:
                    06:f6:46:1e:3f:ba:01:a2:fd:8d:b4:28:68:bd:35:
                    c6:ec:70:ec:6c:ef:9c:12:05:7e:25:79:e1:3a:7e:
                    25:93:f5:26:1d:1d:97:a6:ca:58:7a:b4:db:7f:ef:
                    28:bd:83:f0:ae:b6:03:5d:5e:ed:60:e9:49:86:a1:
                    a9:68:fa:54:61:e6:46:f1:82:5f:6e:dc:77:29:5b:
                    9e:34:76:54:1b:8c:a4:81:27:63:5e:34:fc:88:23:
                    58:5a:0e:29:d1:08:1c:9b:8c:b2:9e:38:f5:8c:c8:
                    81:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C2:14:6B:DC:6B:09:D7:FF:55:25:F6:65:5D:A3:96:F0:34:A4:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/41b614f9-8bf2-3058-beb3-ba91615edf63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8f80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ad:65:4c:42:04:d1:08:c4:ed:be:5c:b7:01:e3:4e:b8:29:
         2b:d3:7f:09:3f:34:80:5c:da:6d:b4:0d:04:7f:a9:05:de:33:
         4b:43:86:40:31:ec:b5:4f:81:ae:48:46:05:d3:30:fd:9c:82:
         3f:0d:2c:27:e6:2f:e2:ca:af:7a:1c:a3:54:09:fb:1a:63:8f:
         c1:53:1b:f0:d5:53:5e:ed:77:60:f1:1b:0f:ed:c9:fc:46:4f:
         1a:d9:20:f1:14:27:00:89:29:46:d7:b3:84:37:57:a0:6c:b7:
         88:62:f2:bd:aa:aa:90:ce:c0:c0:8f:e1:06:db:62:6e:1c:af:
         83:2a:6e:9b:06:54:8d:4b:49:60:03:fb:4f:1c:a9:16:ad:1f:
         6f:8d:05:d9:3e:c6:75:3a:3c:b3:ae:b0:64:2e:f4:a8:7e:ad:
         c6:44:98:27:1a:90:74:f6:af:7b:11:b5:39:6e:21:01:e6:f8:
         72:97:04:c8:8d:9d:0c:34:9a:03:47:02:04:07:67:8d:1f:0f:
         bd:d9:65:60:e4:75:e8:03:ec:f1:76:a1:6f:7d:0f:26:28:55:
         c3:65:d0:c9:4d:92:c1:39:4c:9b:86:a2:a1:8c:f1:5f:cd:a2:
         8c:e2:90:80:60:d9:14:18:36:ac:de:fd:43:6c:c3:ae:1b:87:
         59:bb:5c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:08:34 2025 by rpki-client