Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/5387381b-ecda-3c66-b507-6cc44cac79fa.roa
File:                     5387381b-ecda-3c66-b507-6cc44cac79fa.roa (raw, json)
Hash identifier:          YVpzmixWZi2mOD2TR++ohfx0XKn7SGApBg6KrjtDK1E=
Subject key identifier:   6D:E3:19:C5:EE:65:77:E8:8C:0E:08:40:56:41:7B:C8:B3:B3:79:32
Certificate issuer:       /CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
Certificate serial:       010D0C9F4328584B2B919575777BB79E4CF21180
Authority key identifier: D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/5387381b-ecda-3c66-b507-6cc44cac79fa.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        2602:f99c:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:95:75:77:7b:b7:9e:4c:f2:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=562bbd70-e739-46ae-8930-13241bb31869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b6:25:da:24:0f:37:01:c9:d9:32:25:68:7a:
                    51:3c:06:b2:1f:10:f3:38:06:e8:e8:a8:10:d3:e9:
                    74:79:a4:2b:4f:dd:50:a7:40:1e:a2:db:c5:5c:bf:
                    a3:9a:33:c6:62:57:c7:ee:86:9f:c4:19:7c:9d:bf:
                    28:8d:c1:5f:0b:c7:cc:41:c4:97:96:fb:d6:65:2f:
                    db:1d:3e:06:73:73:74:7a:ad:db:3a:37:4a:2d:4e:
                    03:eb:b5:0d:e0:aa:72:4a:0d:58:81:79:01:1e:6d:
                    fe:f2:f6:b1:8c:a6:fb:64:67:20:d1:35:d3:33:96:
                    60:de:fc:18:17:3d:1a:3b:dd:ca:9a:3d:b0:46:f1:
                    ad:c0:29:65:fa:98:0b:e6:bf:7e:2a:77:9c:73:2c:
                    c0:84:fa:0f:87:fe:c7:c9:ec:b2:63:6b:bf:08:64:
                    ea:ab:02:48:00:c5:95:52:bc:56:db:53:73:32:14:
                    c8:9e:31:3d:28:7a:cb:98:16:eb:b6:44:f4:45:26:
                    19:d9:1c:53:0b:61:2d:72:29:6c:dc:fa:34:b3:4c:
                    3b:ec:59:1b:95:74:b5:56:78:e3:b5:e5:f3:8c:79:
                    70:2c:66:c9:52:7c:7b:fa:2c:b9:6f:ba:31:39:d1:
                    95:99:26:27:2f:bf:f5:f9:1b:45:c1:de:12:9e:86:
                    4f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E3:19:C5:EE:65:77:E8:8C:0E:08:40:56:41:7B:C8:B3:B3:79:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/5387381b-ecda-3c66-b507-6cc44cac79fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.crl

            X509v3 Authority Key Identifier:
                keyid:D6:50:41:77:70:B6:91:D2:6F:48:C0:44:1E:81:9A:0C:B4:79:69:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d3d4409e-5c25-468b-a1e6-6ca0f2a8ca8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f99c:200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:cc:61:c8:fb:ff:41:30:5e:64:cb:94:14:07:c6:22:aa:a7:
         16:04:5c:bf:90:24:93:60:f1:ee:2c:10:6b:19:d8:c8:5b:5d:
         04:ef:20:c2:d4:5d:fb:83:d0:f5:6a:99:a2:13:20:c4:a3:f3:
         7b:d3:a5:55:29:c4:50:0a:11:1c:61:16:09:c0:fe:b1:6b:7d:
         7b:ac:c5:d1:24:1f:cd:c1:3a:b4:bf:30:c2:ee:a3:e2:b2:65:
         45:a3:87:4e:69:6e:0c:b0:49:3f:ed:72:75:e8:b2:67:db:7a:
         93:33:fa:3b:84:b4:85:44:99:fd:cb:6f:de:8c:f9:34:51:78:
         c8:59:25:64:77:2c:fd:c6:ac:c9:ea:af:2c:67:2c:a8:93:2c:
         50:4e:ff:47:d7:2b:d5:96:3f:f2:01:2d:94:d8:1d:13:3f:c8:
         91:ab:7f:20:b4:ab:04:fa:01:8e:3a:9d:86:c5:db:93:f7:db:
         0b:e3:3f:33:b5:44:85:21:68:7b:01:c6:18:fd:a8:d7:63:b9:
         27:96:ed:0a:24:6e:30:15:b6:ed:82:ad:bb:8d:be:04:b1:5e:
         be:ad:d2:4e:07:c2:92:52:db:b3:91:b1:8f:21:9e:d8:d7:59:
         68:e4:84:89:91:67:22:e6:a9:bf:34:fa:cb:ef:f8:06:51:e6:
         0e:c1:51:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:27:55 2025 by rpki-client