Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/abaecb82-3c77-3112-ae1d-040a8c948f96.roa
File:                     abaecb82-3c77-3112-ae1d-040a8c948f96.roa (raw, json)
Hash identifier:          oIpKglgLSISLs0mwra+AjbXMcZUMCsd0Q2LCUOatyzg=
Subject key identifier:   7F:E3:14:85:94:B5:08:74:B4:1B:6E:BB:FA:DD:81:85:29:79:E8:8C
Certificate issuer:       /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Certificate serial:       010D0C9F4328584B3821A472AB72A9D7B492C500
Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/abaecb82-3c77-3112-ae1d-040a8c948f96.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2602:fc88::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:a4:72:ab:72:a9:d7:b4:92:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=982d103f-9eeb-4ba5-9e90-84b5b166ef56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:29:a5:39:7a:2f:cb:ab:93:d3:bf:f6:b0:a8:
                    36:cc:94:57:5d:a9:54:e7:e9:16:fa:58:52:36:c2:
                    c3:39:73:c5:b7:cd:ba:90:7c:d6:33:1a:39:0e:4d:
                    f0:90:61:58:8d:ca:5a:c4:b0:47:d3:f7:b3:ff:cd:
                    86:50:1c:6b:6d:c8:77:de:49:fd:68:d7:96:2d:b7:
                    33:4f:aa:77:04:85:f6:03:05:2b:cf:a8:3e:b3:3d:
                    8b:65:0a:ae:43:ef:9a:5e:0d:50:ba:93:6a:d4:83:
                    96:40:31:c3:3f:f6:29:81:39:97:f9:4e:fe:f6:45:
                    ac:46:89:32:f8:2c:f5:0d:99:81:49:4f:b0:82:49:
                    39:55:fb:27:27:05:e3:88:5f:8a:9b:40:db:88:5b:
                    6b:64:24:70:bc:9b:b8:20:85:4c:25:ed:9e:38:10:
                    56:e1:2c:94:45:83:0e:41:0f:7f:fc:63:7f:7c:70:
                    07:9a:9e:49:2a:e6:d3:07:fc:d6:6d:48:d1:83:bb:
                    4d:ef:d7:fd:64:3c:91:0c:d8:44:17:83:28:48:f6:
                    dc:b0:66:dd:a5:44:01:cc:19:0f:e5:96:0c:ec:e2:
                    b0:ea:17:2c:86:76:96:04:00:f6:2f:6b:b9:e8:31:
                    a3:da:45:0a:9d:15:7f:80:62:0d:c5:da:f6:91:9d:
                    ce:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E3:14:85:94:B5:08:74:B4:1B:6E:BB:FA:DD:81:85:29:79:E8:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/abaecb82-3c77-3112-ae1d-040a8c948f96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl

            X509v3 Authority Key Identifier:
                keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc88::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:30:95:27:91:84:88:9f:ea:3d:d9:cc:c1:34:4e:af:35:da:
         b0:c0:ba:03:55:08:cc:b9:87:5e:03:b3:a2:dd:a8:1d:b4:4a:
         d4:b5:ad:65:5f:a6:99:f8:e4:81:e8:e5:df:fe:57:a0:c9:3b:
         ba:ac:04:c4:9b:24:df:76:4f:8b:ce:1b:71:65:8f:80:d1:70:
         74:1e:d3:24:22:52:b9:d4:b4:9b:22:41:f9:87:f3:48:6d:9a:
         6f:5c:d2:bb:77:3a:bf:7f:0f:63:97:d7:49:78:cd:8f:ed:3f:
         fb:c5:97:ec:ae:ec:71:66:c7:25:b7:1d:19:99:11:1d:35:60:
         7c:53:10:21:67:b2:61:6e:71:dc:ae:32:7b:24:ce:34:7f:95:
         82:bd:cd:1c:d1:b5:5a:40:5e:71:7e:d5:f8:e2:62:cf:e6:7e:
         0e:38:f9:11:72:28:71:bb:7b:fa:ff:e4:16:30:26:a3:fa:1c:
         a6:5d:34:c8:b0:d7:77:84:0f:3a:55:ce:c6:fc:99:53:36:0c:
         54:7c:bb:f8:45:84:4d:02:98:b9:94:e1:37:45:58:c1:fe:96:
         51:cd:38:b2:fa:7d:0c:82:92:b2:79:36:f1:d5:0a:d0:a4:9e:
         f5:7e:3a:46:ac:3a:f7:54:07:b4:4d:04:10:99:09:98:6f:39:
         e9:fd:72:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:30 2025 by rpki-client