Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/2a2f4714-2c65-36d5-8951-275886c50180.roa
File:                     2a2f4714-2c65-36d5-8951-275886c50180.roa (raw, json)
Hash identifier:          VPXIk+8P3bZ7noyXwXXcqTzdGSo8Bjp5BuTkXmQKVao=
Subject key identifier:   0B:8E:6E:82:CD:9E:A2:1F:BA:39:E5:F3:75:48:D7:6D:E0:1C:D1:35
Certificate issuer:       /CN=61fc01db-d7e6-47d1-ad4d-7612a325805c
Certificate serial:       010D0C9F4328584B4FDC789C6AC31F243E711500
Authority key identifier: 81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/2a2f4714-2c65-36d5-8951-275886c50180.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     54981
IP address blocks:        2602:fa16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:78:9c:6a:c3:1f:24:3e:71:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61fc01db-d7e6-47d1-ad4d-7612a325805c
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=5eacf6df-0fe8-4a9b-a0fe-abcc6edc1e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:97:ec:69:23:78:85:bd:38:de:08:0d:de:
                    49:db:bb:90:ad:e2:37:ae:2b:b7:c2:f9:70:3d:00:
                    db:7f:ee:34:83:db:49:f6:a0:b4:24:4d:3b:af:6c:
                    64:b4:b6:88:05:03:f4:0a:55:b7:e5:59:d3:e0:7d:
                    22:eb:42:f7:ce:14:e6:62:74:d0:c5:8c:dc:3b:51:
                    9f:24:73:df:bd:29:09:5e:01:ef:af:19:7e:fb:a3:
                    9b:bf:94:12:80:0c:ed:22:d9:08:23:bb:1f:04:1d:
                    52:52:25:70:0c:68:6c:c2:1f:ab:38:72:21:a0:42:
                    40:23:af:f8:6b:ea:d3:83:d0:4a:10:26:e0:6c:b5:
                    93:cb:a2:fd:0e:7e:f1:a2:92:74:f4:85:61:e1:78:
                    bb:8b:e0:24:18:82:28:3e:2f:28:54:6c:7d:21:37:
                    20:ef:68:28:03:1f:3e:3d:51:f1:94:ad:88:22:a0:
                    46:fd:ec:97:99:86:5e:9e:cd:30:a6:f2:a6:1c:bc:
                    5f:22:78:5e:cd:5c:0c:23:01:fa:52:5a:d8:61:10:
                    ef:ca:00:19:75:bd:08:54:d7:a5:24:3a:02:f6:bb:
                    82:5f:77:8c:d4:6b:9e:1b:bd:66:56:c5:b1:06:dd:
                    cc:8d:25:ce:f1:4d:56:38:f6:39:c9:23:1f:bb:b6:
                    d2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8E:6E:82:CD:9E:A2:1F:BA:39:E5:F3:75:48:D7:6D:E0:1C:D1:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/2a2f4714-2c65-36d5-8951-275886c50180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.crl

            X509v3 Authority Key Identifier:
                keyid:81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa16::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a8:d0:da:d0:e5:26:ff:07:39:54:cb:a1:72:d1:06:a0:e9:
         ac:ca:a6:bd:29:e1:16:26:3c:4c:55:30:c3:bd:6f:6d:06:a4:
         5d:3a:5f:b8:04:95:d1:30:b8:1e:05:a2:93:01:a9:a1:37:16:
         54:d8:90:1f:78:49:c6:bb:ec:b4:17:30:38:1e:79:a2:c3:b2:
         47:80:2c:c1:28:65:0c:fd:50:be:75:82:59:2a:26:8c:d6:4f:
         9a:d8:78:ca:9d:dd:7c:50:c1:db:ec:6f:ed:27:b6:44:f3:b4:
         7d:68:99:37:f1:1f:2b:a4:28:71:a5:09:2e:db:fa:fb:25:b3:
         63:c8:98:8b:d6:cf:a1:69:be:d3:b7:c2:85:43:cc:44:4f:86:
         9e:7a:0e:31:03:37:59:a9:ce:64:d3:2f:3b:2c:bb:3c:e6:ef:
         df:42:d5:2d:ed:f3:79:30:a5:f0:97:01:e8:84:24:7a:bd:c2:
         d3:03:90:ee:59:c1:7c:f0:2f:0b:5a:9a:13:51:9d:9b:ed:82:
         f4:87:dd:49:2d:4e:36:05:f5:ab:1d:0e:92:33:49:81:49:6d:
         58:e4:a9:8c:28:64:af:c8:4c:20:f8:f0:29:8a:6c:46:9c:02:
         bb:5a:02:d4:ca:11:23:f0:47:b9:c5:91:ab:1a:c0:e2:da:ac:
         4d:6d:f1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:38:30 2025 by rpki-client