Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f4273a47-e805-3c92-b50c-7b4a94303cce.roa
File:                     f4273a47-e805-3c92-b50c-7b4a94303cce.roa (raw, json)
Hash identifier:          nq33JLpOC26glU0ZoJ8r0VBtpxKgpMt+UZY8hCy1UJc=
Subject key identifier:   17:64:48:18:3F:63:4D:76:55:71:8D:88:F7:C1:12:72:26:4F:E4:B8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B89F8E58A7917059B2D38FCC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f4273a47-e805-3c92-b50c-7b4a94303cce.roa
Signing time:             Thu 16 Oct 2025 08:34:56 +0000
ROA not before:           Thu 16 Oct 2025 08:34:56 +0000
ROA not after:            Wed 14 Jan 2026 09:34:56 +0000
asID:                     19527
IP address blocks:        2600:1902:40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:f8:e5:8a:79:17:05:9b:2d:38:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 16 08:34:56 2025 GMT
            Not After : Jan 14 09:34:56 2026 GMT
        Subject: CN=e73c0a10-4258-47bc-ba23-238c106d8a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:20:06:ee:a9:0a:d5:c0:03:93:a3:23:e9:ca:
                    ee:e7:2d:18:1d:cb:33:78:b7:51:59:54:eb:ab:6a:
                    59:5b:3c:60:1a:ec:45:2f:5e:68:0f:24:25:ae:a7:
                    56:54:7c:4a:ff:de:8b:63:76:90:f9:da:9f:79:d7:
                    04:5f:50:90:ec:5f:40:da:9c:50:93:58:4c:41:72:
                    27:40:80:8b:b4:a3:c3:b3:86:6a:10:63:f8:3a:0c:
                    9d:2d:31:fb:85:7d:40:f7:8c:42:d9:ef:eb:26:15:
                    cb:4a:9a:c7:bd:51:d6:ea:59:97:c5:3d:a4:14:6e:
                    86:30:45:79:ba:48:d7:29:d6:5a:49:35:5c:3f:a2:
                    40:43:35:47:43:3a:38:8a:cc:1a:fa:37:92:59:c1:
                    d2:e3:50:d6:3c:28:11:50:79:45:2e:da:a3:9c:da:
                    7e:fb:d6:5e:e1:4b:0f:83:6d:88:3a:81:dd:42:10:
                    bf:33:bb:84:e2:1a:68:6e:b5:05:a0:94:a8:f8:41:
                    49:b9:07:b8:d6:e6:20:33:fd:46:82:f2:a5:b4:da:
                    62:c8:18:3a:51:95:6b:d1:73:a8:a0:f6:3b:9d:f5:
                    f7:cd:fe:e2:3d:af:7a:d4:24:a8:9f:59:2f:eb:70:
                    a4:65:f0:87:81:2b:38:59:ba:68:ff:27:57:13:bf:
                    59:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:64:48:18:3F:63:4D:76:55:71:8D:88:F7:C1:12:72:26:4F:E4:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f4273a47-e805-3c92-b50c-7b4a94303cce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d1:c6:6c:72:8e:9f:cd:f7:e3:48:a1:85:3a:68:ac:66:32:
         7e:df:7a:00:b2:0b:f2:b8:b7:d9:b6:11:97:13:57:3f:ab:2d:
         ba:61:65:dc:3e:9b:9b:9b:13:77:df:1f:57:51:34:d9:b7:28:
         7c:a8:ee:9b:0b:be:2b:64:51:9d:fd:31:97:c8:0b:11:92:0b:
         52:9f:5c:a8:e3:8f:71:ce:5d:a4:26:fe:db:32:1e:b6:de:27:
         b3:f9:05:9b:10:f6:3e:3b:16:ee:2e:d7:09:4a:c7:6c:48:4e:
         27:5f:3e:d4:30:d2:88:eb:84:de:8e:0a:97:a4:1f:be:c4:c6:
         0c:d8:19:21:0a:e6:9d:77:08:a4:37:39:27:fb:5e:d7:1c:09:
         ab:87:78:f1:4d:e1:15:73:12:eb:22:58:d2:b9:3f:08:ee:1f:
         2c:6d:3a:76:49:e0:9e:4a:86:f7:dc:98:6e:0a:b5:df:14:5c:
         88:a8:2e:d8:f1:7f:e5:c7:8c:a1:85:99:db:c9:ca:eb:fa:7b:
         3e:d7:18:e9:b4:19:01:54:5c:20:76:38:e7:c3:bf:ef:38:06:
         54:59:59:21:18:13:06:4a:f6:d3:2e:67:4f:b1:77:38:14:2b:
         37:c4:34:f4:20:b8:49:2c:cb:83:74:ed:3f:47:fe:fa:e6:89:
         07:6e:75:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 21:18:48 2025 by rpki-client