Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/19820915-a68b-3249-9e57-3d122046acbb.roa
File:                     19820915-a68b-3249-9e57-3d122046acbb.roa (raw, json)
Hash identifier:          pf5chq1k1vuGAPDGIA2gdbIVGzU02kDZ/wglnBDvfWw=
Subject key identifier:   35:97:22:03:9F:B4:80:AD:ED:27:76:26:91:43:1D:C4:2F:67:57:04
Certificate issuer:       /CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
Certificate serial:       010D0C9F4328584B6D2C9745FDA27D815254F260
Authority key identifier: 2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/19820915-a68b-3249-9e57-3d122046acbb.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     401170
IP address blocks:        2602:f8bf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:97:45:fd:a2:7d:81:52:54:f2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=520f4ef3-d054-40bd-85ff-7cdcb92edbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:c4:11:6b:5a:d8:37:70:b3:e6:fa:e2:52:
                    20:61:fd:c7:b7:74:a4:96:ad:8c:dc:bb:ad:76:b7:
                    80:3b:43:f9:00:a5:91:6b:c6:63:78:f0:a1:2e:68:
                    b7:ee:fb:5d:17:74:5c:c2:2a:12:3b:2e:d9:86:90:
                    76:50:9a:23:19:6d:49:cc:58:52:8d:e0:b2:40:10:
                    97:3e:bf:c2:28:fd:4d:83:d4:53:e0:db:aa:98:46:
                    b0:79:6d:21:99:74:a7:9a:21:e8:58:95:1f:7f:91:
                    3a:bc:d3:1f:59:99:74:aa:8f:fb:05:54:c4:ca:d1:
                    69:90:8b:06:39:21:01:f4:de:5f:7c:13:19:ba:4f:
                    67:35:63:39:0b:1a:e8:39:6f:1a:04:db:a4:4d:20:
                    44:39:98:32:63:3a:42:f7:d9:16:64:1c:8e:97:ce:
                    9f:4e:84:8e:20:49:f5:2e:92:eb:e6:4c:e9:54:ee:
                    fc:24:32:ef:ff:56:3f:b4:e3:96:3d:85:52:28:e6:
                    d1:66:d4:1b:64:d4:41:9a:4a:67:32:86:fb:46:48:
                    6d:25:21:99:c1:37:82:b4:41:e2:79:e3:c5:df:c1:
                    76:ff:cf:46:ad:74:5d:48:0e:c4:16:09:eb:25:0a:
                    48:de:9a:a2:1d:11:04:c1:3c:d2:ff:93:d2:d5:b9:
                    c7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:97:22:03:9F:B4:80:AD:ED:27:76:26:91:43:1D:C4:2F:67:57:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/19820915-a68b-3249-9e57-3d122046acbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8bf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:3b:6d:30:4f:09:b7:6e:66:39:cc:25:fd:ec:15:d5:9c:05:
         33:7d:bb:a9:ff:49:31:be:e1:0d:67:d6:4e:5c:ca:3f:6d:76:
         0d:9a:60:12:8c:ad:6f:91:40:8c:bf:f0:54:c1:36:fa:45:20:
         c1:cc:e9:07:e5:62:ad:f4:da:01:91:4d:fe:2c:88:23:91:cd:
         2f:bf:1c:d4:61:43:db:85:40:16:1a:78:6b:ff:aa:ae:a6:11:
         7e:1e:cf:53:71:9a:6b:41:fd:ac:40:17:bb:2d:b9:8f:31:75:
         58:1f:cf:37:86:c0:1c:51:c1:14:04:67:28:dd:b6:4f:be:69:
         db:2f:ba:6e:ca:9b:d4:05:b8:e6:3f:9f:48:c2:28:e9:c9:69:
         f9:7c:02:99:73:93:54:20:32:30:c0:24:95:be:cc:c8:7a:b3:
         27:eb:19:01:c2:ea:b0:4f:06:2c:65:13:1f:f2:ac:18:6c:90:
         60:f8:4f:b0:8b:a3:23:b4:63:e2:06:a1:75:6c:0c:62:0e:f9:
         80:3d:dd:01:ea:5f:7a:8e:15:61:60:ee:33:b4:5b:f9:4b:23:
         d9:ae:3e:28:c6:15:47:7b:d4:2f:e2:31:66:79:79:9d:cd:2c:
         c4:36:36:d3:10:5a:4c:3f:9a:df:8e:0e:eb:2b:69:79:91:48:
         30:69:7b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:29:52 2025 by rpki-client