Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/206a6c78-95a4-3e58-8974-0fb73c0c5bf1.roa
File:                     206a6c78-95a4-3e58-8974-0fb73c0c5bf1.roa (raw, json)
Hash identifier:          53RSpG16XH2r8dWR8zA0qo5tiSD2qJaRyHbcdY0WPdA=
Subject key identifier:   83:68:50:CD:CE:71:84:4F:81:8D:FA:EF:F9:93:19:E5:E9:4C:7A:62
Certificate issuer:       /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
Certificate serial:       010D0C9F4328584B047BF922BB2D76EEAE00E840
Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/206a6c78-95a4-3e58-8974-0fb73c0c5bf1.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     19281
IP address blocks:        2602:807:e000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7b:f9:22:bb:2d:76:ee:ae:00:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=497965b3-a46a-47ba-b7f7-3068cd102c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:38:0d:5f:16:f4:62:6f:00:24:4a:af:40:2f:
                    73:91:a6:52:0e:00:52:92:e5:cf:64:df:85:42:86:
                    7a:8f:7e:de:65:b5:ad:b3:ad:a0:1f:05:5a:b4:6b:
                    ee:c2:10:3f:2b:b3:b9:33:e2:ef:bd:96:6d:43:eb:
                    b5:a1:5d:2b:f1:0e:36:ed:8f:68:3d:32:71:e5:98:
                    4f:a1:32:0a:9f:55:31:ee:e4:94:ad:c3:32:bf:9e:
                    fe:02:7b:c7:ab:77:98:42:b9:18:72:77:fe:61:6d:
                    0e:41:88:de:8f:6f:a4:5c:09:9f:1c:fb:36:73:6d:
                    95:f6:d9:bd:b5:f4:4a:99:8e:d9:31:82:fa:03:2b:
                    43:07:85:a7:d2:d2:8f:85:71:79:95:fd:fe:f3:a1:
                    67:28:66:ea:df:19:3e:00:c3:8e:75:18:70:a3:62:
                    37:3a:3b:2f:fc:f6:98:d1:e5:64:ca:fe:9e:22:ae:
                    b9:1a:fa:26:d2:1b:35:06:75:1d:6b:69:ff:16:38:
                    d2:72:5f:eb:e9:69:6f:12:f2:0d:5c:1a:b6:1b:f8:
                    58:98:c0:89:7d:eb:ad:e1:78:95:0b:40:6b:a4:06:
                    a8:fb:43:9b:40:e0:65:f6:6d:31:57:6f:c0:c9:96:
                    02:48:12:c5:ef:13:83:8b:f0:71:a0:ea:91:0e:ca:
                    62:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:68:50:CD:CE:71:84:4F:81:8D:FA:EF:F9:93:19:E5:E9:4C:7A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/206a6c78-95a4-3e58-8974-0fb73c0c5bf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl

            X509v3 Authority Key Identifier:
                keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:807:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0b:a2:7e:bb:d6:51:f4:95:03:58:28:fa:56:18:59:41:a6:
         06:34:17:87:75:1a:57:9e:e1:0e:f1:05:eb:21:95:8c:e9:ca:
         bf:28:05:f7:3f:51:5c:cf:0b:22:c4:48:a1:01:71:b4:6e:c1:
         be:eb:64:92:2f:56:d8:e3:2c:80:36:0c:73:76:05:2e:f6:f7:
         c3:90:49:97:dd:ba:24:44:43:65:4d:e5:38:4e:98:4e:fa:ca:
         8f:11:b4:2e:48:a9:e4:21:e8:ab:69:36:84:55:42:f8:10:d4:
         4c:11:72:c9:53:05:80:2e:27:6c:c1:e1:ce:bd:16:e3:f2:87:
         43:89:04:a6:e4:d7:fe:6d:1a:c6:72:34:c6:e8:bb:16:37:0f:
         4f:90:f0:81:d6:f6:ff:0f:2c:61:6c:af:a8:0b:7d:f3:0a:44:
         ce:b1:0a:ea:a7:c8:4a:7d:14:d6:c2:db:27:67:95:28:91:0d:
         fb:4c:e6:1c:a1:8c:b4:e0:67:92:f0:d8:43:5d:00:9a:55:15:
         cf:f4:97:ae:df:3c:2a:3c:cd:ac:14:78:7a:e2:43:1c:89:8f:
         8b:6c:cb:12:d9:a8:5b:13:09:78:df:a8:2f:3f:19:83:5f:9a:
         e0:9d:b9:3b:e2:01:f1:fc:fe:9c:b8:79:b0:bf:7f:82:04:01:
         4b:a1:c0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:46 2025 by rpki-client