Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/7e70d36b-93cf-36da-82d1-3621d63312aa.roa
File:                     7e70d36b-93cf-36da-82d1-3621d63312aa.roa (raw, json)
Hash identifier:          wi59kDNcB+/TNa4DGL0xEMEsjmgocWoVye4f3oKtRd0=
Subject key identifier:   F5:19:D4:4B:88:73:3D:B8:BE:A8:A6:6A:FB:25:2F:12:B3:50:50:AC
Certificate issuer:       /CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
Certificate serial:       010D0C9F4328584B5DD1E2D74052277C734AF1C0
Authority key identifier: 26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/7e70d36b-93cf-36da-82d1-3621d63312aa.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        2602:fcd8:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:e2:d7:40:52:27:7c:73:4a:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8ed950-4488-49b1-8d39-bb8c71a767d2
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=f413cd01-f057-4bd6-9f2f-428f8618c94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d9:bf:4d:7a:5d:7b:25:aa:13:67:4e:1f:03:
                    86:81:b1:89:f1:76:40:91:a6:0f:9c:22:fa:12:ea:
                    41:ab:4e:87:ae:f5:f5:af:f3:76:ff:28:49:2e:1e:
                    df:97:63:39:db:81:69:8b:27:c8:b6:95:00:9e:23:
                    06:a1:cf:34:57:00:e0:85:8f:ec:cc:c4:36:66:8d:
                    4a:f4:55:ad:04:ec:2a:6c:a8:e9:3b:6f:2a:a5:21:
                    38:11:57:7f:47:da:b2:49:ea:6d:f6:13:69:ed:b5:
                    45:03:80:6b:3b:b8:c2:44:7d:48:a3:00:df:df:d9:
                    80:34:f1:cb:bf:da:59:65:a5:67:45:a8:60:ec:26:
                    db:eb:66:af:44:af:91:f2:42:8a:90:e1:51:ee:05:
                    f6:89:44:88:62:d5:cb:4e:2e:3a:2f:7a:46:7e:8b:
                    af:94:86:55:d1:3e:07:3c:3a:66:d3:3b:89:9c:27:
                    6a:45:d4:c7:5c:2e:0e:43:a0:d0:62:99:c5:fa:56:
                    95:e6:43:ac:50:e5:cb:83:8c:9d:21:a4:d9:15:9f:
                    78:53:1b:62:c1:5a:a5:37:c2:b6:81:c3:e0:47:c4:
                    c7:dc:92:5e:6d:3e:aa:f3:ff:a7:34:80:24:e7:0c:
                    65:a6:0d:e8:92:9c:5f:4b:d5:45:a3:f0:94:20:02:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:19:D4:4B:88:73:3D:B8:BE:A8:A6:6A:FB:25:2F:12:B3:50:50:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/7e70d36b-93cf-36da-82d1-3621d63312aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2/9e8ed950-4488-49b1-8d39-bb8c71a767d2.crl

            X509v3 Authority Key Identifier:
                keyid:26:16:DB:85:90:7D:14:0F:A6:08:91:5A:F3:8C:48:B7:DC:F3:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9e8ed950-4488-49b1-8d39-bb8c71a767d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd8:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:94:53:7a:8d:7e:6b:31:73:60:eb:1a:b1:8b:3a:6c:3a:2a:
         fe:56:b4:e8:97:bf:75:b7:b8:02:d1:f1:e0:c3:70:34:b7:ba:
         be:76:dc:be:f3:59:bb:fa:49:55:e6:bb:53:46:fc:78:8e:7e:
         3e:35:58:1b:22:dd:9f:eb:3b:f1:52:da:d2:a6:a6:89:52:02:
         73:b1:49:1b:dd:47:dd:61:5d:b0:18:bc:6b:ac:eb:db:bc:05:
         b2:b6:13:e1:6f:a4:15:a3:0c:cc:9c:8b:82:a6:e4:4f:82:ff:
         fa:07:02:af:55:47:0b:71:9b:a7:12:8e:84:ae:08:fa:99:95:
         0c:73:7c:ff:a4:a1:e4:47:85:6b:12:af:98:13:6f:ac:dc:ec:
         43:46:68:74:76:fc:d1:94:1c:57:77:2a:93:3c:d7:6b:ee:f5:
         3a:d1:25:c7:c0:d8:95:ad:df:28:38:04:b8:50:4e:4a:98:7f:
         fd:b1:ab:af:62:80:0d:4b:ff:06:f1:37:1e:47:45:f1:6f:81:
         fa:5c:c8:a0:92:55:27:d8:28:ea:92:06:1b:1f:ab:cd:43:55:
         7d:63:4f:90:91:7e:88:d5:98:b6:89:ea:1f:56:16:51:5c:d4:
         fe:41:4f:83:4a:22:0e:8e:da:6e:bf:ca:3d:b7:fa:d4:17:68:
         6f:fe:fd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:36:52 2025 by rpki-client