Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/f242bc03-c5ce-3675-803f-379b8d6db409.roa
File:                     f242bc03-c5ce-3675-803f-379b8d6db409.roa (raw, json)
Hash identifier:          N4dNiNWZwGTl0GfeMa1zAzKStD+BghkRHb91p1P3bMs=
Subject key identifier:   50:6B:5D:59:2A:2C:75:71:7C:1E:39:69:DE:52:E8:FD:93:04:CE:5C
Certificate issuer:       /CN=12139121-8c82-4685-a6f3-76023bbcab6d
Certificate serial:       010D0C9F4328584B6109D83FE62C41F6DCE3E620
Authority key identifier: B4:10:4B:21:6F:C5:D1:99:DB:83:24:BD:79:A3:90:B8:67:C8:60:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/f242bc03-c5ce-3675-803f-379b8d6db409.roa
Signing time:             Wed 01 Oct 2025 16:40:57 +0000
ROA not before:           Wed 01 Oct 2025 16:40:57 +0000
ROA not after:            Tue 30 Dec 2025 17:40:57 +0000
asID:                     27520
IP address blocks:        2602:f8de::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/12139121-8c82-4685-a6f3-76023bbcab6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/12139121-8c82-4685-a6f3-76023bbcab6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:61:09:d8:3f:e6:2c:41:f6:dc:e3:e6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12139121-8c82-4685-a6f3-76023bbcab6d
        Validity
            Not Before: Oct  1 16:40:57 2025 GMT
            Not After : Dec 30 17:40:57 2025 GMT
        Subject: CN=1edcf839-2528-4f2d-9746-34795404ad10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f4:78:93:8e:a7:cb:31:7a:b8:78:d4:a5:c4:
                    b3:7e:7d:45:91:98:7a:93:b4:ab:6b:63:9a:83:03:
                    09:de:81:d6:3f:a8:11:0f:ca:12:3c:34:04:86:24:
                    1f:7c:b1:a5:79:38:08:cf:11:ef:78:cd:bb:b7:86:
                    7c:69:78:36:cc:d9:f8:3d:27:d9:34:ac:6c:78:1a:
                    e9:6d:62:e9:6e:39:7c:39:2a:e0:6e:c9:4a:91:b5:
                    49:79:02:30:5b:32:46:ac:e0:34:37:27:e8:2e:ab:
                    9e:8e:91:f1:0c:b4:b5:2c:46:3c:80:a6:c3:79:24:
                    fb:14:11:97:de:88:10:35:b8:5c:a9:3d:e1:11:3e:
                    80:81:59:0a:b2:d9:1f:f0:9a:fe:4d:5d:46:c7:c2:
                    f5:e5:6a:a5:c6:02:c7:38:28:76:d9:17:c6:b6:c0:
                    54:aa:69:da:fa:49:bc:fe:39:3d:79:85:cd:6f:1d:
                    64:db:07:ea:f5:dc:84:88:1e:66:ce:e6:77:f9:8f:
                    81:a1:0e:2b:e4:bf:e2:90:57:08:51:23:db:14:c2:
                    88:07:59:99:ab:9e:ff:67:16:16:3b:64:00:d8:a5:
                    b6:ed:07:03:b1:9a:21:1a:ff:1b:90:be:1b:02:14:
                    61:ce:de:d8:4a:7b:ec:c9:08:76:26:b8:ed:9c:02:
                    e7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6B:5D:59:2A:2C:75:71:7C:1E:39:69:DE:52:E8:FD:93:04:CE:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/f242bc03-c5ce-3675-803f-379b8d6db409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d/12139121-8c82-4685-a6f3-76023bbcab6d.crl

            X509v3 Authority Key Identifier:
                keyid:B4:10:4B:21:6F:C5:D1:99:DB:83:24:BD:79:A3:90:B8:67:C8:60:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12139121-8c82-4685-a6f3-76023bbcab6d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8de::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:97:23:79:87:8e:6a:bb:ec:d1:ae:f2:08:de:66:d9:8b:94:
         38:92:40:73:fb:fa:a9:39:0e:01:65:6c:c0:1b:ad:71:f6:79:
         d3:e7:94:d3:e9:67:76:69:04:37:50:18:8c:44:22:1e:34:e9:
         e6:84:ab:ca:40:6c:e8:ea:c2:d6:a6:85:79:1f:7e:73:b9:11:
         3d:5f:68:73:74:34:88:86:cb:a2:a1:24:52:63:d9:e8:f6:fc:
         0a:c3:19:75:39:7d:1b:65:88:e4:e6:8b:8f:47:94:b4:1c:c4:
         c4:81:71:51:55:01:73:f7:2a:de:68:43:3b:18:2d:66:ea:e7:
         e6:c5:79:21:bb:cb:9c:67:14:53:bf:11:e1:8e:99:b5:3f:3a:
         c0:41:b7:b4:73:88:e5:48:75:ae:f6:8b:08:cb:8e:ba:14:8b:
         64:b4:89:e9:65:dc:3a:8d:6f:cd:7f:2c:1f:52:92:05:db:69:
         83:fa:d6:c5:6e:66:7c:28:49:17:fb:ae:7c:5a:1b:18:b8:68:
         b7:af:bd:b6:0f:07:2e:34:e8:9d:06:79:73:7f:52:e6:75:aa:
         a8:c4:12:d6:4f:d3:e1:9f:49:f3:0c:f3:30:b2:5d:bc:f2:62:
         c8:62:fa:34:54:f9:b2:b3:2e:d2:3a:ed:7e:7d:76:97:9e:a1:
         89:28:e1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:24:11 2025 by rpki-client