Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/1255431b-ba35-3116-8414-34269d9fe49d.roa
File:                     1255431b-ba35-3116-8414-34269d9fe49d.roa (raw, json)
Hash identifier:          rQHFUmQSKHW4mTPtvoy5mDmx1jpeyjEJCdJLI/BfC88=
Subject key identifier:   59:1C:A5:CB:1E:77:C5:6F:4D:06:E4:A2:8B:24:E0:EC:F6:54:E0:32
Certificate issuer:       /CN=fef37d9e-4f0a-417c-bb8d-a033e1b72e07
Certificate serial:       010D0C9F4328584B13D6C7CC84F85110722E8A80
Authority key identifier: E7:D8:F7:D6:BC:73:AB:B6:67:97:4D:9E:64:A3:42:D3:00:5B:15:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/1255431b-ba35-3116-8414-34269d9fe49d.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        2602:819:f000::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:c7:cc:84:f8:51:10:72:2e:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef37d9e-4f0a-417c-bb8d-a033e1b72e07
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=a6e8d74a-8508-4102-a546-759ada69909b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0f:47:23:7f:33:e7:5d:d6:b5:00:13:2f:8b:
                    77:62:31:5e:a6:5f:00:83:38:24:a2:07:03:cc:f3:
                    d2:74:58:1d:f2:8a:f8:6d:2e:24:b6:b7:4c:c8:79:
                    87:5e:79:f5:91:f4:42:4a:0e:e7:a1:43:85:40:7e:
                    12:f0:b5:d8:12:54:8c:41:b1:d2:38:a6:c7:5f:e7:
                    78:df:a0:94:40:ba:5b:66:f0:90:6f:00:81:fb:27:
                    0c:44:6c:bd:a7:41:98:81:a8:a2:ca:ff:00:7f:09:
                    82:a2:42:86:09:12:ba:3f:53:47:07:52:8f:3d:01:
                    23:be:93:68:7c:a5:97:34:73:66:0e:24:3f:e4:2c:
                    5c:62:c8:88:d0:d9:b8:a8:81:8f:a0:13:25:07:60:
                    32:ba:51:a5:8c:cf:49:4e:3a:4e:60:d6:58:9f:b8:
                    2a:3e:70:69:50:49:0c:de:cc:f9:9c:c2:dc:b9:c0:
                    b3:45:44:c8:b8:37:53:cb:20:a0:10:8f:aa:10:9d:
                    2b:b8:48:0f:a6:12:08:60:38:97:87:fd:2d:d0:0b:
                    10:b0:54:15:8e:d1:d0:a7:93:87:34:1f:2a:4d:85:
                    13:b6:80:60:e8:ff:53:66:77:02:e0:e6:ea:c4:86:
                    dd:a6:7f:a1:b0:ae:79:4c:69:a4:8e:fd:15:e7:89:
                    eb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1C:A5:CB:1E:77:C5:6F:4D:06:E4:A2:8B:24:E0:EC:F6:54:E0:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/1255431b-ba35-3116-8414-34269d9fe49d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.crl

            X509v3 Authority Key Identifier:
                keyid:E7:D8:F7:D6:BC:73:AB:B6:67:97:4D:9E:64:A3:42:D3:00:5B:15:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fef37d9e-4f0a-417c-bb8d-a033e1b72e07.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819:f000::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c4:97:1e:6c:a2:22:08:3a:cb:40:23:a5:ba:a2:c7:b7:42:
         2a:74:51:d4:94:0a:c9:d7:66:65:f0:55:24:42:4b:39:c1:12:
         9b:b2:e1:a4:40:6b:4a:f0:a9:a5:c4:d2:d2:9d:60:44:6c:7c:
         46:d8:e6:e3:9e:7f:d7:68:35:b6:75:f7:bd:11:ef:41:ec:52:
         12:43:dc:5e:d7:b5:bd:df:06:17:57:5e:e7:6a:9b:25:df:e1:
         79:3c:cc:93:82:f4:80:14:51:c9:1b:24:63:21:19:f4:35:68:
         7d:a2:3a:23:7d:71:56:ab:24:46:e2:b0:a6:79:4e:b9:3c:94:
         6b:e4:cd:0f:d9:54:11:27:0c:1d:be:e7:64:35:99:21:0b:a8:
         13:5a:40:00:45:82:76:c1:e9:85:d2:e8:ce:cd:8c:2d:fb:ab:
         c1:e9:b9:93:33:73:b0:a8:90:b8:8c:66:1f:1c:e7:16:c5:2e:
         39:df:83:9c:33:aa:20:f5:48:55:d5:44:ee:7e:b1:fd:6b:51:
         8f:74:a5:75:00:7f:c6:10:83:df:4e:e4:82:2d:98:4f:7d:5e:
         8e:57:e9:41:0c:97:e3:53:2c:28:33:c2:96:64:ab:06:55:dc:
         c5:ab:ea:56:4d:ae:35:95:57:0e:30:4d:f1:74:b0:4d:51:ea:
         dc:8d:eb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:27:56 2025 by rpki-client