Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/5b7d3556-28e1-360c-9a9e-a01bb7111857.roa
File:                     5b7d3556-28e1-360c-9a9e-a01bb7111857.roa (raw, json)
Hash identifier:          l9zgOQYvzOXPp7xU4fZrMt/aiV4Q65n1ZQpznKYoWOg=
Subject key identifier:   7B:8B:31:7A:69:9F:3F:44:FB:71:52:2D:00:75:5F:83:71:14:C1:72
Certificate issuer:       /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial:       010D0C9F4328584B540C67CB1FAC4DE1777B2280
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/5b7d3556-28e1-360c-9a9e-a01bb7111857.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     23347
IP address blocks:        2602:f921::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:67:cb:1f:ac:4d:e1:77:7b:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=6686beb1-5018-49b7-9d26-07bf21185491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:72:4c:6a:14:d7:e8:78:94:61:af:cc:78:91:
                    bc:62:07:3d:cf:b8:b0:bb:18:a1:c3:8a:00:ee:64:
                    63:ff:24:f1:7e:b3:37:31:21:b0:bb:28:76:ab:e2:
                    c8:42:30:a9:65:3c:c6:04:71:a9:53:e5:d3:3b:79:
                    84:a5:e4:87:c3:65:07:d9:f6:db:a5:4f:fc:6b:3b:
                    4b:b9:80:34:18:a1:b1:21:ef:45:69:9c:fb:d7:10:
                    78:6c:78:81:b8:ec:c0:9f:31:2a:a0:50:b4:a1:f1:
                    40:be:18:5b:e3:d0:6f:37:d2:57:84:31:9c:32:00:
                    a8:2d:06:bc:df:ca:ec:4c:73:df:8b:06:fd:d3:78:
                    98:f4:4c:d8:ae:96:02:23:e4:53:68:e3:d8:32:ed:
                    0b:6b:81:ad:74:31:78:54:3e:8b:57:f3:b6:57:92:
                    bc:9c:75:02:35:b5:a6:f0:0e:e7:42:d2:da:53:4f:
                    72:4b:7c:ef:27:4d:14:52:11:33:99:97:35:73:62:
                    6c:22:55:3a:b0:d5:b7:16:2b:2d:8d:10:84:60:a3:
                    b7:6c:32:ec:f1:9c:f0:24:69:43:a4:75:31:69:7f:
                    0d:23:f2:3a:3e:e9:91:94:88:c4:5f:f7:2a:f1:82:
                    98:5d:42:9a:35:1a:1b:0c:b3:27:94:50:1e:98:86:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8B:31:7A:69:9F:3F:44:FB:71:52:2D:00:75:5F:83:71:14:C1:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/5b7d3556-28e1-360c-9a9e-a01bb7111857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f921::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:4c:ff:47:76:c7:08:1e:e5:d7:9b:fd:ee:67:2a:d3:15:19:
         aa:70:d5:d9:47:04:62:75:42:db:c4:62:22:64:e8:e9:a2:18:
         e1:d8:b9:28:14:41:32:2e:ae:58:73:a3:b4:d4:23:54:60:73:
         d6:25:c9:d2:8e:a4:bb:52:0b:15:a5:13:8c:a7:a0:1d:f7:26:
         db:ad:d2:cf:97:26:8f:6d:8c:e2:23:85:94:67:ae:03:59:cf:
         58:0f:47:b5:81:a6:b6:1e:66:dd:82:5c:de:e2:3a:62:74:f2:
         02:6f:88:d2:fb:44:43:7f:65:ef:01:e8:12:a8:84:15:91:b0:
         92:cd:26:5b:d6:cd:96:bd:e4:e8:f3:20:a2:96:28:6e:92:cd:
         11:3e:88:9b:34:e3:7b:53:91:6d:54:c9:80:12:9f:52:22:64:
         32:e3:93:92:f3:ae:3c:c6:55:4a:14:76:c7:e5:ef:f9:18:a0:
         57:2c:36:a5:0d:1a:96:a9:06:6b:b9:27:ed:70:49:90:95:34:
         7b:d1:e5:29:4a:1b:bc:ff:b8:1f:8c:ad:f7:0a:a4:42:e9:06:
         df:82:d3:47:1b:a9:b6:ae:f1:ae:f1:5a:f3:e9:37:ce:6b:90:
         21:d6:bf:47:10:e4:bf:2b:51:3c:41:79:af:bd:9e:b2:d9:ab:
         74:5d:95:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:10:56 2025 by rpki-client