Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f79b1730-10ef-3049-be1a-da73706e7a54.roa
File:                     f79b1730-10ef-3049-be1a-da73706e7a54.roa (raw, json)
Hash identifier:          3bunrjjT6mM9wxKlvnpGBthm0Qn7mLVc4evym5dbyf4=
Subject key identifier:   37:FF:01:88:10:7D:B4:EB:DD:59:EA:E9:F5:51:97:40:A2:F4:E3:5D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B89FAE7372E86F9DDA232EB60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f79b1730-10ef-3049-be1a-da73706e7a54.roa
Signing time:             Thu 16 Oct 2025 08:38:59 +0000
ROA not before:           Thu 16 Oct 2025 08:38:59 +0000
ROA not after:            Wed 14 Jan 2026 09:38:59 +0000
asID:                     19527
IP address blocks:        2600:1902:1b0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:fa:e7:37:2e:86:f9:dd:a2:32:eb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 16 08:38:59 2025 GMT
            Not After : Jan 14 09:38:59 2026 GMT
        Subject: CN=0c7a22a6-56bc-47cf-ac0a-779cb64b4fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a1:d1:38:cb:d0:eb:4e:e6:7d:9b:c9:f5:02:
                    8c:04:33:40:b0:78:4c:78:9a:1a:4c:49:66:8d:72:
                    22:63:ed:82:f5:99:5f:a5:b7:8b:b1:a9:3d:52:e6:
                    d9:f2:2b:48:04:c6:62:46:7f:b1:19:77:08:b7:2c:
                    39:2a:28:b0:f9:3b:71:eb:a8:41:dd:44:82:a7:d6:
                    61:ea:c9:0a:c7:ec:9a:e0:30:40:54:82:72:df:2f:
                    97:f7:81:39:f0:7a:e5:0b:e4:ca:f9:f7:e3:48:78:
                    69:1b:26:cd:14:9a:98:c1:93:a2:0d:d8:01:88:c3:
                    ae:82:5b:0f:35:f8:b1:2a:5c:86:5c:bd:94:e3:db:
                    9b:8c:84:7d:f1:38:ca:ec:64:d4:99:33:1f:96:36:
                    b3:d6:89:af:bc:e3:f8:f6:75:ed:c6:82:ca:df:c6:
                    c6:04:33:a0:5e:a2:31:88:ad:a6:db:f1:0f:f8:f0:
                    c6:8a:fb:67:e3:43:6a:cc:9e:13:fa:b5:de:6e:1b:
                    07:37:5d:e5:1b:d0:2b:2c:cd:15:55:46:62:0a:d6:
                    53:d3:e2:bc:73:fd:60:da:19:32:ba:f9:c2:78:0a:
                    59:2a:51:bd:9e:66:4a:64:9b:77:b2:46:e0:e4:ff:
                    3a:65:fe:10:7c:f4:af:ef:b3:3d:d7:38:4a:70:a1:
                    65:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FF:01:88:10:7D:B4:EB:DD:59:EA:E9:F5:51:97:40:A2:F4:E3:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f79b1730-10ef-3049-be1a-da73706e7a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1902:1b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:8c:ae:37:9e:7a:b2:a6:86:b8:5b:b6:8f:4f:bc:16:1b:c0:
         82:de:0f:4d:9f:28:5d:a7:e5:ac:49:fe:8a:e2:12:60:f0:bc:
         36:04:97:fd:92:7e:2b:84:38:21:b5:e2:be:8e:c3:fd:1b:04:
         18:4f:b3:df:6f:da:1a:8f:b7:50:12:a1:dc:24:18:e3:60:93:
         a8:f4:18:4a:a5:dc:ca:a6:5a:9e:a9:ee:2e:36:2e:b6:df:3d:
         53:9c:a6:5d:2b:3c:cd:2c:9c:9a:3f:67:28:f8:1c:85:97:77:
         d0:b4:70:c6:a8:58:6e:f0:fb:c2:d3:cc:31:da:f7:6f:9f:36:
         63:78:f9:8a:d5:fb:8d:85:4d:13:e2:3d:e9:24:ee:22:0d:5b:
         e9:0a:9c:99:0b:98:71:8e:16:54:49:8a:fc:1e:8d:09:6b:3a:
         49:b9:53:da:b6:23:b0:8e:60:54:8f:86:a4:19:b0:63:72:4b:
         18:24:c8:fc:18:08:01:ec:11:8c:88:b3:cf:32:99:b9:2b:96:
         06:a5:9d:96:82:1e:a9:86:46:f4:4e:07:6f:2a:54:ba:7b:3d:
         4a:5d:65:93:a9:2d:1e:08:90:80:8d:b0:30:45:05:47:50:51:
         89:3e:fb:3f:6b:75:22:6f:48:96:c1:f9:f2:db:75:81:7f:0b:
         cf:2f:0b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 21:18:48 2025 by rpki-client