Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/77b0ada8-fc34-359b-916e-e500e7f6cfbd.roa
File:                     77b0ada8-fc34-359b-916e-e500e7f6cfbd.roa (raw, json)
Hash identifier:          p+ax1/jp5Q/x7ntsj5PXUAIpDqbzJ18fT+a08TUrSkU=
Subject key identifier:   F0:69:89:8E:24:58:C3:9B:6A:3A:82:BD:8E:FF:B4:80:DA:FF:BF:6D
Certificate issuer:       /CN=d980a0a8-78bc-4289-825d-1bb9a5a192c8
Certificate serial:       010D0C9F4328584B611A27AD69BBE7CFC5634980
Authority key identifier: 4C:0A:70:59:98:14:8F:A2:FD:3C:98:4A:E1:A6:2D:88:01:5D:FB:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/77b0ada8-fc34-359b-916e-e500e7f6cfbd.roa
Signing time:             Wed 01 Oct 2025 17:13:49 +0000
ROA not before:           Wed 01 Oct 2025 17:13:49 +0000
ROA not after:            Tue 30 Dec 2025 18:13:49 +0000
asID:                     13437
IP address blocks:        2602:f8f9::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/d980a0a8-78bc-4289-825d-1bb9a5a192c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/d980a0a8-78bc-4289-825d-1bb9a5a192c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:61:1a:27:ad:69:bb:e7:cf:c5:63:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d980a0a8-78bc-4289-825d-1bb9a5a192c8
        Validity
            Not Before: Oct  1 17:13:49 2025 GMT
            Not After : Dec 30 18:13:49 2025 GMT
        Subject: CN=2424c725-aa1f-4770-8df4-a2401faa2c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:ec:1a:75:64:f7:48:5e:dc:15:50:52:67:
                    c9:5f:88:0d:5f:0a:ff:d4:72:1c:9b:53:a1:55:c0:
                    f5:b1:9c:a9:c8:e1:26:29:ea:65:6d:fb:2a:76:22:
                    a9:da:8b:0d:cf:93:c7:b4:c9:1c:87:34:94:5e:b2:
                    73:06:5d:90:96:a4:9d:57:b7:6b:83:9a:41:e6:15:
                    23:c8:b9:55:fa:a4:b1:ee:e8:f8:59:df:a5:23:48:
                    34:4b:f7:fa:02:57:05:3d:b3:fa:55:0a:6c:40:71:
                    49:68:48:5e:37:98:4c:a0:c2:55:1f:0b:e8:ef:2c:
                    5a:f4:86:82:0c:6f:06:c3:f7:a1:42:8c:0a:fc:2e:
                    4f:b9:f8:a0:32:a8:6c:0d:dc:bf:5f:ff:3a:93:b8:
                    61:54:f4:f9:41:ba:45:16:39:ac:b9:51:a8:0b:4e:
                    37:36:e9:2c:c7:5e:4c:80:2c:df:73:b9:de:69:9a:
                    23:cb:e3:3d:1a:85:da:0f:9a:ce:31:1c:f7:5c:8d:
                    69:2b:e1:1a:b9:01:7c:00:a2:59:d9:ec:10:f4:f4:
                    87:fa:c2:16:1f:af:86:ef:c8:91:21:43:75:72:b2:
                    9b:2d:7d:f6:66:7d:31:69:d9:4f:76:22:c9:01:87:
                    af:56:50:15:36:67:97:f7:31:37:47:73:89:a5:81:
                    a3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:69:89:8E:24:58:C3:9B:6A:3A:82:BD:8E:FF:B4:80:DA:FF:BF:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/77b0ada8-fc34-359b-916e-e500e7f6cfbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/d980a0a8-78bc-4289-825d-1bb9a5a192c8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:0A:70:59:98:14:8F:A2:FD:3C:98:4A:E1:A6:2D:88:01:5D:FB:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8f9::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2b:23:88:85:12:07:86:d5:4a:6d:ef:97:f9:da:d1:17:4c:
         36:50:44:f2:03:76:2f:c8:5d:2a:7e:6e:e1:a6:14:1c:92:a5:
         54:2b:71:98:c4:66:ac:a0:d8:5d:34:83:4a:ec:c0:85:1c:a3:
         36:de:e3:91:38:7b:5d:3d:42:7c:ad:20:a9:9e:0e:dd:1c:8a:
         3b:49:0a:cf:b6:86:2d:49:40:9b:cb:a6:3e:f5:90:e8:47:27:
         7c:af:24:e6:41:87:e5:dd:67:2a:f9:15:95:29:9d:8d:a4:01:
         0b:e7:72:84:ac:9e:0f:8a:e9:43:c7:1d:d7:11:cc:e0:3b:b1:
         e1:5c:e1:75:52:e0:17:33:38:98:eb:e0:98:09:85:37:2f:ab:
         c7:c9:d0:d0:73:a6:18:3f:d8:6d:8b:dd:1c:f0:0b:80:cd:ad:
         08:0b:6c:61:29:93:7d:95:ce:30:f6:23:df:79:db:07:f1:93:
         16:fc:96:58:de:0f:91:28:c8:63:aa:8d:f6:d0:dc:8e:80:a7:
         71:36:b8:38:b5:15:60:58:a2:38:e1:28:61:14:b1:0d:76:06:
         7d:e5:02:18:8b:16:a1:cd:4b:aa:40:8b:04:dd:99:0d:bf:53:
         02:bd:93:c6:e7:7e:27:d1:4f:b7:db:32:9d:d2:6a:84:6e:cd:
         53:48:a9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:08:45 2025 by rpki-client