Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/6391a8d4-56fa-3aed-a9c1-86fd5c798a06.roa
File:                     6391a8d4-56fa-3aed-a9c1-86fd5c798a06.roa (raw, json)
Hash identifier:          ymFEypvPB/SNLpXzLg8LFwVMs1eH+iy5AiLhe/+W4nk=
Subject key identifier:   08:6D:89:CB:2B:E6:D5:5B:C2:3A:77:3C:A0:B8:89:2D:81:31:03:0A
Certificate issuer:       /CN=a24d6518-0415-4e7a-a0e9-6ed875b32fdb
Certificate serial:       010D0C9F4328584B328C2F0C5F4CDB77A36D0000
Authority key identifier: C9:5C:59:92:B9:97:2E:9A:8A:C3:94:FE:50:DE:A4:02:55:49:5F:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/6391a8d4-56fa-3aed-a9c1-86fd5c798a06.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     138997
IP address blocks:        2602:f7ac::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:2f:0c:5f:4c:db:77:a3:6d:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a24d6518-0415-4e7a-a0e9-6ed875b32fdb
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=00db3f64-5537-478e-a9e0-6590c2d4dd24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:40:72:17:05:26:8a:28:33:5b:f8:8a:fb:9f:
                    86:e4:bf:ac:d3:47:00:f2:f0:0e:cf:03:1c:44:a4:
                    4b:5e:ed:d2:66:e3:76:f6:b0:d6:5a:31:7e:0d:52:
                    ae:72:2c:70:e1:f0:69:b0:3e:c5:73:e9:3d:5d:68:
                    ae:cb:d3:5e:a9:04:bf:4b:8a:7e:a6:e6:66:03:06:
                    ee:ac:c7:6d:f4:d7:42:8f:8f:ab:22:0d:8d:26:35:
                    bb:a2:23:2d:95:d2:52:ff:47:9f:09:4d:35:66:8f:
                    f9:10:39:73:ad:e4:1f:7f:65:8e:25:b1:5d:78:4b:
                    49:bb:e6:90:e2:e2:2e:99:51:b3:2c:a0:e7:d8:c2:
                    95:d0:51:05:ad:55:57:74:36:66:65:4b:52:f4:a8:
                    08:9a:dc:a3:d5:06:25:d3:5f:4c:48:c4:d9:f2:30:
                    db:fa:23:01:f3:a1:27:1e:37:bd:34:ec:6c:11:60:
                    6b:00:de:ef:18:11:45:1b:5c:dd:65:b9:3c:80:ba:
                    47:56:fc:bd:ea:a2:aa:20:f5:37:f9:bf:1d:79:e0:
                    a3:2d:53:21:95:84:b1:8b:5b:b2:9d:da:cf:2d:20:
                    95:27:3c:9d:14:35:23:eb:53:f8:fa:44:72:a3:87:
                    a6:18:6a:62:a5:a8:8e:b3:2c:e7:29:cd:41:a7:dd:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6D:89:CB:2B:E6:D5:5B:C2:3A:77:3C:A0:B8:89:2D:81:31:03:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/6391a8d4-56fa-3aed-a9c1-86fd5c798a06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.crl

            X509v3 Authority Key Identifier:
                keyid:C9:5C:59:92:B9:97:2E:9A:8A:C3:94:FE:50:DE:A4:02:55:49:5F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ac::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:0c:ce:97:fe:ce:08:01:50:fe:3f:4e:2e:55:81:56:bd:04:
         4d:11:87:28:2a:d7:88:80:ac:41:5a:b1:d0:ab:7c:33:cd:33:
         1e:6c:c4:10:7e:aa:94:2b:f1:10:98:29:4c:11:4e:40:01:8b:
         0e:4f:72:e9:19:39:d5:9a:ee:2d:0e:31:8f:09:0a:2d:55:ca:
         15:6e:88:09:33:11:bd:2f:0b:77:85:5a:99:96:dd:b2:8b:de:
         00:47:e1:ce:3c:32:a5:7d:20:b1:a0:5b:bc:d0:5b:8c:d4:8f:
         ee:20:68:1b:a5:57:08:c9:fd:fe:1b:b9:26:b6:a6:8a:90:06:
         76:84:d6:7e:7c:f5:7d:90:00:1d:05:54:27:08:53:11:42:01:
         6f:7d:de:79:9b:c5:d2:9e:a6:31:e4:2d:46:3e:b3:5e:f4:58:
         7d:fb:9c:82:a0:49:eb:74:5d:51:39:1e:43:4a:35:94:0d:57:
         6b:d2:40:ff:cc:71:f5:06:b6:aa:2b:aa:7f:fd:46:07:99:b1:
         5b:e5:ca:90:3d:66:bc:b7:16:a0:df:6c:9c:d8:de:ac:7b:1c:
         5b:83:bf:fe:70:e4:89:ed:8f:46:7b:5f:48:c1:59:9b:7e:55:
         75:c0:19:af:98:b9:a4:0f:df:f0:93:f6:3f:48:9d:70:9e:00:
         2f:70:da:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:28:48 2025 by rpki-client