Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/6e426d6e-5237-3b21-b30b-6534b5ab3fea.roa
File:                     6e426d6e-5237-3b21-b30b-6534b5ab3fea.roa (raw, json)
Hash identifier:          wKIX7sLso++btrgy7k5Q+/8JOf3SjzLI714WPr2cvPE=
Subject key identifier:   F8:54:25:6F:79:D9:5E:B0:BF:61:86:35:6E:FC:F6:42:0A:C6:98:65
Certificate issuer:       /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
Certificate serial:       010D0C9F4328584B1806D976CD475C869903B400
Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/6e426d6e-5237-3b21-b30b-6534b5ab3fea.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     14490
IP address blocks:        2602:fa70:380::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:d9:76:cd:47:5c:86:99:03:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=e749b280-8c2c-4c94-84fc-6df242462562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:82:ae:cc:d9:e8:82:3b:e0:63:5e:19:b9:9b:
                    a3:4f:f2:04:3a:00:7b:7f:73:9f:66:a7:e6:dd:67:
                    8d:f9:d1:d9:3b:c2:4b:bd:cc:4d:38:91:12:da:ee:
                    db:ba:03:55:0c:29:7e:9d:8b:fa:98:37:cd:7c:70:
                    d9:fa:c4:c8:38:bb:3a:c0:f2:5c:c1:82:fa:f7:a6:
                    75:68:6a:67:e2:6d:ea:f5:82:3b:49:03:2e:14:bc:
                    77:db:88:43:06:df:9d:f4:6c:32:68:79:fd:d7:95:
                    e6:ce:c6:f9:8c:2b:3a:3c:dc:13:12:d2:06:50:7d:
                    f0:b5:15:a8:88:9e:c7:91:77:29:5c:e4:51:6a:dd:
                    88:8a:47:3b:86:47:cb:97:d2:6f:0e:94:88:58:fe:
                    78:e2:80:fc:fd:95:25:73:74:d2:22:e6:f6:3a:77:
                    83:dc:83:19:ab:3c:56:ee:47:bc:c4:c1:7e:dd:85:
                    92:f6:2d:56:0c:e2:f5:a5:85:b3:42:91:8f:8e:61:
                    06:b8:11:09:bd:9e:13:33:71:27:9d:08:cc:f4:f6:
                    74:50:24:0d:b6:42:3d:30:79:fc:94:24:25:0d:2b:
                    f8:91:63:e8:43:85:eb:65:e7:e4:b9:48:3e:ae:7c:
                    85:11:7b:8e:3a:5d:1f:66:31:54:f7:d5:93:25:d1:
                    35:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:54:25:6F:79:D9:5E:B0:BF:61:86:35:6E:FC:F6:42:0A:C6:98:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/6e426d6e-5237-3b21-b30b-6534b5ab3fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl

            X509v3 Authority Key Identifier:
                keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa70:380::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:42:bf:7a:55:2f:9b:ec:7d:5a:d7:eb:77:14:39:43:2d:5a:
         de:2b:9e:05:7c:aa:d6:cb:b1:54:a6:7a:8a:6d:65:76:fa:00:
         f7:87:d1:3b:2d:5c:99:9d:00:fb:9c:00:22:fd:3f:7b:3c:39:
         87:68:4b:24:3e:90:ac:af:22:4c:d7:ed:b9:77:77:29:dd:93:
         ae:59:f6:7c:15:d8:93:7d:09:f0:0b:80:80:04:83:48:01:f8:
         c1:fd:05:50:7c:38:01:92:1d:6a:cc:2e:e1:07:a5:f6:e9:1e:
         a3:e5:be:fd:2e:29:7a:7c:a1:06:16:3a:04:47:d5:ed:15:ec:
         d7:fc:42:ce:61:f4:86:72:62:ca:c5:dd:97:4b:fa:d0:0b:97:
         fd:96:25:b7:33:8f:96:83:a8:51:ba:36:b3:f4:9a:55:53:06:
         13:aa:f3:4e:47:89:17:06:f6:ee:1e:9e:11:d6:32:6f:22:63:
         9c:b7:5d:53:86:fa:7f:69:7b:1e:08:1e:37:41:5a:18:43:fe:
         d2:7f:aa:5c:b1:2f:5b:59:5e:bb:8d:d8:cc:9d:02:49:29:1f:
         f7:03:8c:b0:09:8e:1e:f3:eb:cd:fb:24:22:04:f0:e7:64:27:
         d2:1d:df:2f:0d:a2:44:ab:53:4d:f4:ab:8a:84:4f:16:bf:49:
         ba:7d:e4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:39:07 2025 by rpki-client