Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa
File:                     d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa (raw, json)
Hash identifier:          d38EaC89IoBD4Xs5Lo17/9vQoBgf84A1yZ1sOvsuisI=
Subject key identifier:   BB:FE:79:D1:11:C3:95:D8:E7:AD:DE:A4:5E:BC:DB:A9:C1:D1:C7:C4
Certificate issuer:       /CN=8f46af7b-8a51-4d0c-82e1-bf0e75108610
Certificate serial:       010D0C9F4328584B5571CD898E08F7507A1DF8E0
Authority key identifier: DE:D8:1F:3F:53:F4:CF:D5:7D:27:98:13:16:CF:00:F7:61:C9:61:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        2602:f708::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/8f46af7b-8a51-4d0c-82e1-bf0e75108610.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/8f46af7b-8a51-4d0c-82e1-bf0e75108610.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:cd:89:8e:08:f7:50:7a:1d:f8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f46af7b-8a51-4d0c-82e1-bf0e75108610
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=3ec7b219-69e3-4eb2-8040-d524cb58c047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1a:98:e0:de:e1:29:1a:1a:05:d9:a7:e0:d2:
                    5c:2a:64:27:16:1c:eb:06:24:02:86:68:d0:9f:6e:
                    b8:af:c0:5f:40:9e:5f:0b:b9:ff:17:c9:82:71:e4:
                    c1:6e:17:98:60:f7:3e:6f:d6:b1:c6:b4:22:8c:14:
                    37:42:7c:c7:ae:6b:b4:d4:7a:ba:1a:4d:2e:2a:5d:
                    c2:0e:83:f6:4b:0a:9b:4e:77:57:06:37:43:65:16:
                    50:87:57:d5:07:04:e1:6f:a7:c3:71:e6:6b:68:17:
                    ea:47:ed:b4:b7:fb:19:07:e1:9a:42:40:53:f0:d2:
                    0a:01:fb:39:83:4a:6b:ea:6d:37:67:fc:48:65:2a:
                    57:c3:9c:89:0d:ec:92:8f:1d:ad:05:95:6d:55:a5:
                    59:63:00:f1:03:20:d2:64:ae:57:66:65:ae:88:55:
                    9e:21:48:d6:17:e9:ec:d7:62:ca:ee:12:0c:b3:a5:
                    82:2c:77:73:cb:64:e0:cc:c7:28:7f:82:4f:1d:7d:
                    c5:ef:be:23:b0:4c:77:e3:e3:63:40:da:83:7b:7e:
                    6a:eb:21:ed:0a:aa:40:3f:a4:db:c6:93:60:d5:1a:
                    35:82:82:67:d5:32:6d:16:c1:15:14:43:68:d8:3e:
                    49:dd:dc:ec:db:8b:da:ce:6a:83:bb:12:85:2d:eb:
                    46:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FE:79:D1:11:C3:95:D8:E7:AD:DE:A4:5E:BC:DB:A9:C1:D1:C7:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/d4fe6d6f-8fd3-3081-89e4-74e396fcbc10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610/8f46af7b-8a51-4d0c-82e1-bf0e75108610.crl

            X509v3 Authority Key Identifier:
                keyid:DE:D8:1F:3F:53:F4:CF:D5:7D:27:98:13:16:CF:00:F7:61:C9:61:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f46af7b-8a51-4d0c-82e1-bf0e75108610.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f708::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:51:b3:36:18:9b:69:a4:e2:11:a2:12:18:e1:f8:45:4f:6d:
         55:23:84:df:a5:4c:36:2a:39:58:86:a2:f3:78:42:14:54:5b:
         5c:ec:a9:40:73:3d:c5:d1:d2:76:3f:d2:5a:f9:5a:7f:a0:32:
         9a:83:52:c3:c2:56:57:66:e1:5e:5f:cf:39:6e:4b:58:98:9f:
         8d:ad:c0:d8:31:96:59:36:db:7d:a0:05:07:36:6b:4d:81:e8:
         ad:1d:ef:31:77:d1:ee:31:00:f2:6e:ec:8d:68:7f:46:18:69:
         56:6d:eb:91:1f:74:36:6e:e6:35:30:95:5e:85:96:c5:55:8c:
         4a:e8:bb:fc:4d:45:7a:c8:d0:c4:ff:11:cf:ba:64:6e:9b:86:
         a5:48:c3:ab:33:bb:fc:d6:a5:b6:bb:46:5e:7c:f3:61:96:3d:
         99:51:fb:03:69:82:b0:44:6f:85:62:40:07:50:60:c8:20:a0:
         c6:d5:7c:d0:3e:b9:55:06:e8:4f:8b:8d:e3:f9:02:8f:cc:00:
         a8:e3:c9:96:5d:73:ab:c2:4a:6b:3e:ee:ca:13:fb:6a:c2:94:
         b3:38:5b:be:97:d5:7d:9d:c0:ee:a3:38:44:6a:91:aa:0d:ae:
         94:8d:cf:a9:57:f2:fb:d3:a2:99:a7:a8:38:de:1e:9b:63:4e:
         64:7e:51:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:33:28 2025 by rpki-client