Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/1ae935f0-d18c-3e5e-899a-d267ba9075d4.roa
File:                     1ae935f0-d18c-3e5e-899a-d267ba9075d4.roa (raw, json)
Hash identifier:          j0SxCl1ysJBBi64Acxq41zot5DK1021go7KTpae6sH8=
Subject key identifier:   81:19:75:95:9A:D8:60:9C:B5:2B:A8:E7:3B:5D:33:CF:26:89:BC:26
Certificate issuer:       /CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6
Certificate serial:       010D0C9F4328584B1C36CB0876A4A8D24FB44E80
Authority key identifier: 26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/1ae935f0-d18c-3e5e-899a-d267ba9075d4.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2602:fa6b::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:cb:08:76:a4:a8:d2:4f:b4:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=9ba89cb9-a237-4923-8b7f-682bda0e87c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d3:d1:62:e7:8a:2d:3a:a4:df:95:5a:d0:79:
                    81:a7:b1:86:54:43:dc:1f:01:d5:83:de:88:0a:c7:
                    d6:cf:15:be:37:36:e7:7b:3e:27:3a:b7:0f:be:2f:
                    ca:5b:5c:3b:39:a8:44:b6:4e:c9:a9:2e:57:1e:00:
                    03:1c:88:c7:3e:1a:c0:ae:51:db:7e:4a:3f:01:d5:
                    25:ba:76:47:ac:99:51:30:ad:3d:8b:14:13:d1:b8:
                    c2:3b:6a:cc:04:de:f2:c0:f7:a9:1d:88:85:66:bc:
                    5f:99:eb:c5:cd:bc:5b:a7:8f:bc:ef:9d:62:56:bf:
                    e9:d2:46:e1:a6:49:09:df:3c:b8:09:67:47:90:96:
                    4b:59:ed:ec:45:10:4a:f7:14:f8:b8:87:46:c1:01:
                    0c:20:72:51:bf:e8:6f:0b:ba:ab:2c:ef:85:d2:0b:
                    46:44:8d:1d:3e:cd:1d:26:e1:a0:ee:1d:33:d7:24:
                    bf:de:9a:13:e6:93:de:21:d5:80:59:62:68:83:8f:
                    df:26:e3:e9:17:27:02:94:6f:15:15:1a:3f:16:de:
                    ed:be:a8:b4:fc:2c:dc:c8:52:a5:22:3c:c8:99:97:
                    17:94:35:d1:60:0c:82:7f:de:c8:1b:f0:d9:7d:98:
                    08:e3:a0:d6:86:48:2c:ab:44:55:03:1b:c7:9f:f2:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:19:75:95:9A:D8:60:9C:B5:2B:A8:E7:3B:5D:33:CF:26:89:BC:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/1ae935f0-d18c-3e5e-899a-d267ba9075d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.crl

            X509v3 Authority Key Identifier:
                keyid:26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:cc:85:f3:07:90:9e:f1:f8:04:50:d1:5c:10:3f:fb:7b:53:
         92:ef:d4:71:d8:b4:8a:7d:39:db:d7:17:05:48:1d:4c:bd:22:
         65:de:d3:17:bb:0d:76:a9:d7:bb:68:af:65:5e:19:5e:87:09:
         96:27:d7:b0:f7:2e:5d:6e:94:0f:a4:0e:b8:68:7b:5b:a3:1c:
         1e:f8:53:ac:ca:38:78:b7:04:aa:e0:94:80:01:d7:0f:b6:a5:
         0f:7a:42:0a:e3:8b:f1:74:09:50:2a:5c:23:79:8f:62:59:fa:
         97:36:af:e2:a9:ee:e5:94:66:39:b2:d0:d8:0e:20:da:d3:e6:
         96:d6:88:74:c0:ec:d6:b7:4a:97:d2:f0:ab:7d:4c:d0:10:08:
         78:3a:23:6d:cc:bf:23:de:fb:cd:56:0c:3a:ae:4c:5a:0b:44:
         16:6f:10:e2:ad:05:07:d1:4f:c6:87:95:70:a6:2e:ef:bd:90:
         2a:3c:e3:37:b1:3e:9e:53:eb:0d:56:69:ab:37:80:23:c9:1d:
         1f:60:e9:23:1b:cb:03:1b:a4:f4:85:aa:35:81:f1:a6:b8:1c:
         03:1f:26:af:3f:55:28:a3:bf:a0:d2:73:65:35:de:84:7e:47:
         e5:bc:13:32:0f:07:3d:9d:c6:2f:63:a2:c6:7e:e2:c9:dd:58:
         fe:9c:13:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:30:01 2025 by rpki-client