Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747/46f608d4-ca1e-348c-9552-a542b4b87a76.roa
File:                     46f608d4-ca1e-348c-9552-a542b4b87a76.roa (raw, json)
Hash identifier:          OmCmVV8hyU5CIub0PN13BXoWRgDxMYm7V3joEDhz7DQ=
Subject key identifier:   94:05:63:09:18:EF:F8:30:95:E1:EB:56:19:91:87:58:25:B4:8C:DB
Certificate issuer:       /CN=18b69f1d-e346-4275-b5e5-d496c35fa747
Certificate serial:       010D0C9F4328584BAF9E2D5EE8A742AD5EE6B900
Authority key identifier: 47:96:86:96:07:48:4F:E8:AF:A3:75:75:6A:DD:55:EA:AB:56:CF:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747/46f608d4-ca1e-348c-9552-a542b4b87a76.roa
Signing time:             Wed 29 Oct 2025 20:12:52 +0000
ROA not before:           Wed 29 Oct 2025 20:12:52 +0000
ROA not after:            Tue 27 Jan 2026 21:12:52 +0000
asID:                     399970
IP address blocks:        2602:fc3b:f300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747/18b69f1d-e346-4275-b5e5-d496c35fa747.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747/18b69f1d-e346-4275-b5e5-d496c35fa747.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:af:9e:2d:5e:e8:a7:42:ad:5e:e6:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18b69f1d-e346-4275-b5e5-d496c35fa747
        Validity
            Not Before: Oct 29 20:12:52 2025 GMT
            Not After : Jan 27 21:12:52 2026 GMT
        Subject: CN=41675664-62ea-49e0-8e5b-178b33f43d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5f:95:9a:aa:3d:d4:39:cf:a9:fc:90:9b:4e:
                    08:26:78:b6:aa:65:e2:c9:74:a1:ba:8c:a3:27:c6:
                    b4:bd:f9:fe:3c:5b:fd:cf:c4:f7:dd:ca:2c:92:25:
                    01:38:95:b4:63:80:80:8a:f9:0c:cb:3a:51:27:47:
                    cd:1e:09:a2:88:7a:e1:8c:6b:03:23:a8:55:43:7d:
                    f6:da:37:4e:e4:7c:74:c5:1c:44:dc:b9:a6:5c:69:
                    c2:6e:a4:f5:ed:00:fc:8b:25:6f:06:b4:77:80:4f:
                    a6:38:b8:22:8d:ed:3b:cd:30:e4:fd:bf:94:49:a8:
                    a4:57:cf:1c:81:4c:43:dd:3e:87:87:09:98:b2:00:
                    34:76:b3:da:43:8b:02:b8:f4:fe:b8:6a:13:6a:7e:
                    67:76:70:db:76:03:f8:90:e4:be:19:62:58:0b:a0:
                    63:5d:9d:53:09:6b:aa:5c:d4:aa:c8:77:64:53:82:
                    e6:d5:0f:b3:8d:6b:cd:10:a1:8a:53:b0:49:2e:5a:
                    28:c3:67:b0:ba:43:13:0f:1f:36:13:88:08:15:dc:
                    bb:8e:e0:79:92:81:90:19:b0:a8:ab:d6:59:a0:3f:
                    cc:ec:5e:a6:45:3b:48:98:a0:e2:45:68:91:f5:f1:
                    ea:02:e9:ca:da:16:94:e4:97:cc:24:35:cb:be:72:
                    49:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:05:63:09:18:EF:F8:30:95:E1:EB:56:19:91:87:58:25:B4:8C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747/46f608d4-ca1e-348c-9552-a542b4b87a76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747/18b69f1d-e346-4275-b5e5-d496c35fa747.crl

            X509v3 Authority Key Identifier:
                keyid:47:96:86:96:07:48:4F:E8:AF:A3:75:75:6A:DD:55:EA:AB:56:CF:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18b69f1d-e346-4275-b5e5-d496c35fa747.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:f300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:fe:e8:87:c3:00:1c:34:cb:21:b9:69:4c:f4:86:b2:8a:fd:
         a3:d6:3c:a6:e6:55:56:32:87:f1:88:9b:27:af:ff:f5:13:e6:
         44:9b:27:52:6b:1f:92:2c:e5:a9:be:53:ef:3c:0b:b7:94:66:
         7a:21:88:86:7f:cf:24:5e:b7:5e:c6:1c:fd:13:cb:97:40:01:
         32:4c:2b:ab:eb:c4:4c:c5:f1:68:5b:fd:28:d1:39:f3:33:3e:
         2f:cb:38:bb:8e:96:ce:4c:6f:4f:23:d8:98:d9:ab:6f:f7:55:
         80:a7:dd:f5:aa:60:1f:88:25:65:5f:84:56:99:9c:61:bc:34:
         fe:7b:67:f9:1b:84:46:f8:7c:0e:ae:7e:07:b0:9a:ee:83:cf:
         fa:05:34:62:e9:93:60:82:ee:e9:bc:73:d2:a5:3b:c2:6f:7c:
         14:ea:94:c3:03:d4:50:d9:1b:38:a1:b7:aa:56:b5:8b:16:21:
         d0:cb:48:87:c8:48:dc:9d:bc:c3:f4:8f:db:e2:40:28:45:bd:
         5a:6b:19:a4:f6:12:ae:13:45:ad:3d:75:d6:e3:02:86:7f:56:
         87:05:86:51:e9:aa:6b:cd:55:18:c4:d4:4d:63:36:68:20:b5:
         8d:d3:66:ca:42:03:37:d5:bb:94:fb:b4:de:c5:67:8e:32:e4:
         ae:b4:2b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:01:13 2025 by rpki-client