Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/c511cc38-e009-33dd-b0cd-b8ae05afb9f5.roa
File:                     c511cc38-e009-33dd-b0cd-b8ae05afb9f5.roa (raw, json)
Hash identifier:          gB74rcr2kVEJOP5G1nw9cD+F4RyMttbvVBaoxiNLDOQ=
Subject key identifier:   7C:87:27:C3:59:A7:77:3B:59:48:06:E0:BE:AF:00:CE:7F:4A:E8:50
Certificate issuer:       /CN=22030947-2334-4dfa-a1e3-0e4e83260593
Certificate serial:       010D0C9F4328584B0746A579ECEF4B405601E880
Authority key identifier: 90:22:75:60:7B:52:B2:69:4E:6A:1A:3C:9D:6E:09:CF:58:C5:9B:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/c511cc38-e009-33dd-b0cd-b8ae05afb9f5.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     19285
IP address blocks:        2602:f6b2::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/22030947-2334-4dfa-a1e3-0e4e83260593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/22030947-2334-4dfa-a1e3-0e4e83260593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:a5:79:ec:ef:4b:40:56:01:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22030947-2334-4dfa-a1e3-0e4e83260593
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=ff0d00b6-962b-4bc6-90b2-2fedcc40e99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:42:06:3f:28:7e:99:67:fb:68:68:e4:33:
                    ba:a3:34:ac:e3:23:19:74:2e:75:36:ff:ba:30:9e:
                    b9:7a:fe:0b:7f:e8:81:4c:9d:50:4e:0d:7f:8f:51:
                    bb:aa:ee:14:e4:91:07:da:91:8e:a2:eb:0f:84:f5:
                    a8:50:9e:bb:99:f9:c5:92:6c:02:53:08:6c:e5:e1:
                    61:af:62:dd:da:2a:b7:91:cc:20:47:6b:71:03:0b:
                    69:07:e5:9d:7d:3b:2a:c5:48:67:10:3c:fe:5f:c0:
                    f9:be:59:7d:93:48:15:45:11:29:39:6e:5b:25:75:
                    e8:ce:e0:d3:08:52:df:bc:4b:e4:8b:63:55:e4:7f:
                    fb:b6:2d:12:ab:ff:f0:42:65:07:92:72:50:51:1b:
                    9a:71:61:43:02:bc:15:c5:b7:1f:c2:aa:9a:de:67:
                    bd:0b:53:37:fb:37:e1:02:8d:ff:9b:2f:85:da:de:
                    aa:72:02:5c:57:3f:34:3a:f2:9f:de:6d:57:c3:6e:
                    43:be:bf:30:a4:53:4e:a6:c0:0b:cb:50:f2:cc:4d:
                    63:f7:6d:6e:39:1b:9b:23:80:b6:16:e7:51:f1:5a:
                    d5:1c:b3:f2:b4:42:4d:1e:cb:f5:31:76:e3:66:23:
                    46:11:f6:9e:f0:de:ea:cd:bc:7d:94:d0:55:88:ba:
                    1e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:87:27:C3:59:A7:77:3B:59:48:06:E0:BE:AF:00:CE:7F:4A:E8:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/c511cc38-e009-33dd-b0cd-b8ae05afb9f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/22030947-2334-4dfa-a1e3-0e4e83260593.crl

            X509v3 Authority Key Identifier:
                keyid:90:22:75:60:7B:52:B2:69:4E:6A:1A:3C:9D:6E:09:CF:58:C5:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6b2::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:3d:27:41:fe:5a:88:e7:98:07:d1:86:88:3c:9d:af:82:bb:
         22:c4:63:51:3a:f1:38:93:ee:ae:7d:94:42:cd:2b:02:4e:16:
         76:ac:d8:00:19:89:94:07:e3:a9:cb:2e:94:d4:a7:53:a2:82:
         27:9c:9f:28:e8:66:f8:d2:87:5d:02:1a:46:af:95:5d:2d:30:
         f6:c1:39:4f:bf:57:95:64:05:d0:b1:3f:e7:f8:53:01:6a:b4:
         54:5d:52:15:e1:be:26:a1:cb:35:47:eb:7d:b3:c6:24:a4:3d:
         2a:fa:32:cd:2e:5c:76:38:62:78:60:af:55:63:c7:57:d8:f0:
         17:32:86:a0:fb:bd:40:9d:e7:49:08:89:c6:9c:76:09:42:e7:
         cc:da:c9:35:b8:0b:20:d6:ea:70:67:d5:10:4c:98:91:3c:45:
         99:df:71:7c:48:20:53:db:74:f1:3c:41:5c:d2:7e:9d:7a:a1:
         2e:eb:09:c4:3e:d8:4b:38:80:23:4b:7f:c4:6b:b0:0c:5f:59:
         d3:09:14:6f:8f:aa:c3:2e:0b:85:a8:03:e0:ca:c7:41:de:98:
         48:76:73:2b:90:05:78:50:24:28:22:e6:d2:2c:41:d9:dc:bd:
         c9:f3:3b:87:33:33:78:0a:f4:da:63:e3:12:68:f6:3d:39:04:
         c0:37:93:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:39 2025 by rpki-client