Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/dfadf87e-0496-385c-917c-9e5b4e76da6d.roa
File:                     dfadf87e-0496-385c-917c-9e5b4e76da6d.roa (raw, json)
Hash identifier:          Rmo+DN+ATkgJm0Ct127Ul9wuZzXIhc9i4/yMYQ9oL1s=
Subject key identifier:   F5:CA:47:FF:8D:78:6F:0B:98:83:CF:4E:AD:1C:B4:F8:BA:C4:B9:7C
Certificate issuer:       /CN=8637a780-1944-4d75-b623-0c10c96f56eb
Certificate serial:       010D0C9F4328584B715CB42F696792F096682500
Authority key identifier: 97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/dfadf87e-0496-385c-917c-9e5b4e76da6d.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     401133
IP address blocks:        2602:f8a3:40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:b4:2f:69:67:92:f0:96:68:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8637a780-1944-4d75-b623-0c10c96f56eb
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=8741a21a-e0f7-4b1e-ad98-a1a655db9289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:29:ec:06:80:21:4c:a5:67:3b:35:7e:86:70:
                    53:b0:e5:70:67:c4:e2:6a:e2:83:73:d4:2b:f0:be:
                    45:97:67:63:ad:f6:d7:0b:12:0f:f7:cb:b6:5c:8f:
                    ec:2c:a7:c5:ce:b8:3c:c3:1d:98:15:2c:4c:6f:fb:
                    f0:29:ad:5a:5b:8f:fa:df:a9:da:dd:10:d6:b3:c7:
                    e4:9c:4b:85:17:a5:e8:df:d7:6a:f4:2c:20:b5:4a:
                    ab:6f:44:d0:93:2b:4c:a8:fa:5c:09:e3:d1:88:43:
                    f0:f2:ac:bf:ea:71:96:77:f7:00:d7:9e:0c:84:9b:
                    c3:30:b1:32:b8:35:28:d1:95:ec:25:17:13:17:d1:
                    84:d3:75:5b:07:b3:70:26:cf:ba:e9:4a:c1:74:73:
                    70:f3:d2:0c:db:4d:d6:5e:3b:b1:51:8a:70:52:53:
                    1a:12:33:ab:d7:e7:b8:2d:0e:0d:4e:90:a6:1e:1d:
                    f2:f9:87:d2:05:a0:ae:49:c8:a5:5c:af:93:c9:a9:
                    a5:57:13:f8:15:f5:43:28:1c:6a:dd:78:1d:7c:89:
                    24:ac:68:3d:42:1e:7d:7b:41:fc:97:80:64:49:31:
                    03:3c:49:34:be:c4:90:34:8f:5f:f8:5c:c3:ac:58:
                    e6:be:40:a2:87:8b:25:ce:50:6d:88:14:7b:b0:a8:
                    ae:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CA:47:FF:8D:78:6F:0B:98:83:CF:4E:AD:1C:B4:F8:BA:C4:B9:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/dfadf87e-0496-385c-917c-9e5b4e76da6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.crl

            X509v3 Authority Key Identifier:
                keyid:97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8a3:40::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:35:03:0a:01:40:16:5c:ce:fc:f7:72:77:1d:6d:64:9c:59:
         48:d7:61:a0:d8:01:40:f0:5e:9f:6e:9f:c3:65:3c:00:95:e9:
         0f:7b:8d:de:95:8f:ec:e9:df:8e:88:d0:67:5d:dd:9c:71:b5:
         7d:27:12:b0:6a:fa:f8:34:4e:98:2f:90:6d:37:d5:9a:46:58:
         e9:71:95:8c:37:24:02:95:2a:7f:e0:f1:03:f7:bb:cf:67:8c:
         39:2f:95:e0:6d:c1:c1:9c:e0:a9:1d:8d:80:12:b1:fd:4b:9b:
         49:18:46:06:15:8c:4c:16:c9:7f:f1:a2:90:40:ba:fc:74:9f:
         7c:73:f0:a2:62:dc:61:c5:cf:8e:f4:81:1d:c3:6f:5c:46:9f:
         c9:91:e1:d4:8c:69:3d:de:2d:06:7a:18:4e:97:6e:81:e2:d0:
         e0:f9:45:ea:1d:f1:9a:7a:66:d1:a0:b6:fe:08:6b:9f:b8:47:
         e5:b4:23:fa:85:68:7e:88:7a:f8:6a:3f:50:11:41:13:c9:85:
         1d:32:7e:53:86:9b:03:8b:e4:87:f6:74:98:e1:9f:e7:38:6e:
         45:83:f0:ec:57:ee:88:10:7a:89:0d:8d:b4:fb:15:8e:75:b7:
         3a:9a:f3:21:c1:e5:07:6d:71:bd:35:27:8d:3e:17:18:5b:87:
         4b:cc:6c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:56:06 2025 by rpki-client