Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/fe5229f3-b61d-3484-9dde-6dc0e05b2028.roa
File:                     fe5229f3-b61d-3484-9dde-6dc0e05b2028.roa (raw, json)
Hash identifier:          QZMyH4IeEKlBGvcI+FwbzU+wALi0tjKPlrBfgvv98YA=
Subject key identifier:   C6:03:4A:14:79:14:C6:6D:AA:43:6C:D9:03:06:FE:22:DF:08:43:03
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584AF5212D6B07D8A4FB347CB100
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/fe5229f3-b61d-3484-9dde-6dc0e05b2028.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     198949
IP address blocks:        2607:9a80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:2d:6b:07:d8:a4:fb:34:7c:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=9c2b3bf4-596f-445c-860c-14a87e3a656b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:26:dd:2e:ef:90:fa:7a:3c:66:cb:9d:3a:55:
                    4f:71:a1:ac:cc:78:1e:23:94:1b:a9:19:03:cc:f3:
                    51:ec:13:0a:77:5f:2d:1a:c7:79:37:2c:38:ef:41:
                    06:17:ac:34:c3:53:b1:6f:c3:a2:31:0c:b3:05:8b:
                    be:94:d4:78:db:20:b3:58:60:60:d7:f3:6d:30:52:
                    7b:1f:b6:72:bd:e3:73:44:4c:6c:d2:f0:b3:69:52:
                    ca:2c:01:91:7c:18:a8:06:a8:28:11:16:46:18:0f:
                    68:b5:12:32:4f:4b:47:99:b1:1f:c5:02:6f:d0:19:
                    a6:b7:5e:4c:ba:91:c5:11:75:01:ee:36:83:81:31:
                    d2:f6:54:65:0a:41:a3:2b:53:51:51:21:4b:18:16:
                    d4:e2:7a:c0:cd:d2:50:3e:93:34:e7:65:91:de:60:
                    72:29:fe:4b:ff:e1:e3:97:de:61:c3:cb:29:83:32:
                    03:c2:e5:7d:06:63:fb:0a:62:e5:9d:ca:cf:3c:81:
                    77:a2:0a:42:f6:08:eb:1f:64:31:74:81:0d:c8:a9:
                    4b:b4:a3:ec:bc:a8:22:68:29:2e:ff:2b:9f:f2:47:
                    60:e8:7f:43:2f:36:57:a5:0b:c4:b8:dd:3e:1e:68:
                    3c:c7:60:36:f8:b3:1d:81:37:ef:c1:e0:77:78:d5:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:03:4A:14:79:14:C6:6D:AA:43:6C:D9:03:06:FE:22:DF:08:43:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/fe5229f3-b61d-3484-9dde-6dc0e05b2028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:9a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:cf:5d:43:f6:78:e2:a2:7a:6b:85:1f:fd:5b:83:5d:20:20:
         09:9b:bb:19:ae:a7:fc:d3:66:fe:3f:4c:bd:22:5b:74:d2:e9:
         c0:47:77:b5:ff:e0:8d:68:f3:f7:ed:4f:fb:bb:1e:d1:9a:f1:
         13:b8:bc:3f:5b:64:9f:c0:85:78:de:bc:6f:81:e3:2c:15:5f:
         f2:c7:32:24:f5:40:5d:a5:a5:43:fb:48:54:31:79:32:99:96:
         a9:21:76:26:12:2f:50:ec:f9:62:f3:4a:35:e8:79:19:85:81:
         e2:60:05:73:12:d0:1f:8d:cc:bb:9b:66:8d:54:9c:86:da:14:
         23:d2:97:f6:a1:28:39:89:ba:dc:a9:2f:6c:a0:de:07:67:2d:
         ef:18:ab:53:d4:29:30:e9:67:bc:cc:20:16:62:d8:26:d4:24:
         12:6c:af:51:4e:45:df:84:a4:0b:b0:ea:8c:9a:46:20:98:c8:
         8e:82:bc:e0:0c:4b:ea:f2:70:17:5d:0e:03:6b:49:3c:67:48:
         e0:bd:24:8f:da:93:4b:13:cf:ef:c7:e0:2a:0a:73:ff:61:7a:
         47:2e:8e:fa:cd:cd:d9:5e:57:f3:4c:d5:56:90:3f:bc:72:17:
         9b:16:bb:4b:e3:46:6b:e0:2a:a5:ea:d3:7f:71:64:e2:10:b5:
         69:0c:f1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:08:05 2025 by rpki-client