Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/efc45425-68fa-378b-b4e7-4275d8111bce.roa
File:                     efc45425-68fa-378b-b4e7-4275d8111bce.roa (raw, json)
Hash identifier:          kCc3olh2cdqKa5apvAeEiPAdr4HgNRwtW6YBQL9a0Ug=
Subject key identifier:   23:E8:2B:E4:8C:59:89:09:30:B5:0C:EC:A0:E4:54:4E:72:F6:C2:BC
Certificate issuer:       /CN=7e90c2d3-d2e4-443e-b44e-d530fc7f3315
Certificate serial:       010D0C9F4328584B6E9201B1732D4171A1CF0F80
Authority key identifier: 4B:45:01:89:08:C1:8E:27:8C:3D:C9:E1:68:0F:80:AB:F0:E4:6B:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/efc45425-68fa-378b-b4e7-4275d8111bce.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     27284
IP address blocks:        2602:f6f6::/48 maxlen: 48
                          2602:f6f6:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:92:01:b1:73:2d:41:71:a1:cf:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e90c2d3-d2e4-443e-b44e-d530fc7f3315
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=2d4ba036-494f-4dcd-9689-9d1cda43daae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f3:ac:0c:6c:e5:16:58:ef:0b:13:ee:93:90:
                    ab:48:1a:7e:5b:a3:1d:73:57:fe:74:03:d3:62:1f:
                    fe:77:8a:49:62:7b:bb:44:fe:38:d9:d5:cd:7d:af:
                    b8:20:92:95:46:9b:f1:e9:09:39:f9:4f:80:28:24:
                    8a:a9:4c:20:16:36:db:7a:50:5c:0f:9b:a2:22:4c:
                    b9:98:bb:4f:fa:9e:72:18:4c:01:3b:73:44:c1:8e:
                    8f:f7:07:23:aa:58:fb:11:5c:80:6f:68:86:cf:0f:
                    e0:90:a4:b0:37:d3:ab:16:1c:c1:f3:ed:b8:6c:2b:
                    dd:c8:20:00:4c:be:8c:4f:00:ca:a4:d7:c0:cc:03:
                    8f:15:4f:f1:74:f3:d7:a4:4c:e9:55:ba:4b:d7:fd:
                    cc:ab:a7:5d:67:da:97:1b:31:ea:be:60:03:da:3b:
                    c3:78:d9:f1:18:ad:0f:b6:83:4a:95:ef:6c:77:6c:
                    3e:5b:f7:46:91:d9:ab:57:5f:4c:b7:a5:3c:ea:36:
                    b0:c2:53:f4:31:9b:cb:e6:7d:82:d9:ff:ff:a7:19:
                    1f:68:1b:91:80:fc:b6:2a:25:d3:79:d3:4f:51:9b:
                    d7:f7:c2:a0:28:4c:0a:e0:45:4e:88:56:46:6e:7f:
                    be:8d:f5:9e:55:2b:64:f9:26:36:eb:38:f3:40:1e:
                    52:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E8:2B:E4:8C:59:89:09:30:B5:0C:EC:A0:E4:54:4E:72:F6:C2:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/efc45425-68fa-378b-b4e7-4275d8111bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.crl

            X509v3 Authority Key Identifier:
                keyid:4B:45:01:89:08:C1:8E:27:8C:3D:C9:E1:68:0F:80:AB:F0:E4:6B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6f6::/48
                  2602:f6f6:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ba:eb:60:55:49:5b:dd:97:ab:6a:34:f1:48:77:41:c7:ad:
         8c:56:60:b6:f7:bc:92:04:ff:e2:ee:b3:e0:93:6e:ea:ea:c5:
         61:2e:ec:10:b2:7f:fb:bf:6b:e3:b2:4d:d5:9f:01:24:a0:0b:
         22:17:c3:6d:09:6a:6c:f8:bd:32:eb:98:c7:35:96:ab:14:94:
         9f:b7:e5:ff:e9:79:d7:c9:61:12:1a:f9:ac:67:1e:48:0c:d7:
         40:8a:e8:ea:70:6b:49:2e:3d:18:a4:1e:54:d8:69:26:b3:9d:
         3e:74:06:48:45:c4:45:05:a9:ac:58:9d:5f:fb:9f:82:b9:25:
         24:20:c1:28:2a:84:de:23:f8:46:4b:2a:3c:d1:eb:c9:c7:83:
         d0:c0:16:22:d7:35:de:88:36:5a:5f:0a:dc:de:44:56:b0:2c:
         6a:19:a8:ba:3f:ef:8a:82:18:e4:b6:0d:38:00:61:6a:c9:ce:
         cd:55:6f:ee:49:94:b1:a7:ec:da:98:4a:15:41:05:84:65:7c:
         03:11:49:19:14:2c:96:1a:f5:7f:ba:f1:31:7f:6b:b2:43:95:
         7c:60:0f:92:49:22:9c:06:6a:20:1f:d6:f4:81:f7:de:3a:41:
         e2:bd:1c:00:5f:7c:9f:64:1a:53:39:f3:1d:c4:e3:d4:95:a8:
         e9:97:71:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:28:56 2025 by rpki-client