Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492/659c52ff-5983-3d6f-9c69-58d48fcb3c32.roa
File:                     659c52ff-5983-3d6f-9c69-58d48fcb3c32.roa (raw, json)
Hash identifier:          Y+iPzsMrO0N3WwuHUJc02W7hRg/f2cto9YmL0h6xL/o=
Subject key identifier:   9A:26:7E:A2:71:5F:69:00:9D:73:73:07:8C:6F:A7:1A:D1:65:76:6A
Certificate issuer:       /CN=cfd19080-dcb6-4ec7-82bd-8ac83510c492
Certificate serial:       010D0C9F4328584B5F3778CDE92B2AEE9AE6C880
Authority key identifier: 81:20:02:8B:31:FF:8B:40:BF:2D:78:2D:9F:E4:29:63:8E:CC:F8:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492/659c52ff-5983-3d6f-9c69-58d48fcb3c32.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     401294
IP address blocks:        2602:f84b::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492/cfd19080-dcb6-4ec7-82bd-8ac83510c492.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492/cfd19080-dcb6-4ec7-82bd-8ac83510c492.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:78:cd:e9:2b:2a:ee:9a:e6:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfd19080-dcb6-4ec7-82bd-8ac83510c492
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=e84ee125-ebc0-48dc-8b26-41f4dee76b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:74:8d:bb:aa:2a:d9:ca:fc:f5:a6:42:e0:
                    44:05:a8:bd:53:87:8c:8d:85:08:15:f0:ba:f5:54:
                    01:4e:e9:a2:4e:1f:8a:1c:2f:fa:64:4a:46:da:2c:
                    21:c2:6a:59:82:ac:89:f0:66:1a:55:5a:47:dc:69:
                    f6:08:6e:cd:53:83:d1:ea:d4:c2:87:6b:1e:ef:d2:
                    64:28:10:fc:b5:8e:c2:11:17:08:5d:ce:33:ad:21:
                    94:d1:c2:52:b4:22:0c:42:f3:d0:9e:57:52:8c:0d:
                    8b:f6:28:34:99:b1:ee:f7:27:84:94:be:df:66:43:
                    85:47:b7:1b:31:e3:69:08:a1:51:86:63:e1:b2:92:
                    60:8a:ac:e1:d9:0d:12:32:49:35:3d:68:0b:ff:2e:
                    5c:63:73:84:80:2f:84:46:d8:5e:58:41:8b:05:ef:
                    db:0c:c4:5d:e7:66:c7:1c:b0:5e:36:e1:cf:4a:3a:
                    a9:21:2a:5d:83:fd:c2:1f:19:68:83:73:3d:19:46:
                    8c:a6:59:6d:28:b0:ca:b4:4e:b1:37:28:71:98:1b:
                    33:a6:20:8a:e4:16:7d:dc:44:31:5c:b8:18:72:9a:
                    b1:67:dc:e1:54:f1:63:82:10:1d:c6:85:6b:16:f5:
                    7c:69:c2:0c:e6:cc:62:a0:f2:52:8a:c2:9f:48:a8:
                    85:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:26:7E:A2:71:5F:69:00:9D:73:73:07:8C:6F:A7:1A:D1:65:76:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492/659c52ff-5983-3d6f-9c69-58d48fcb3c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492/cfd19080-dcb6-4ec7-82bd-8ac83510c492.crl

            X509v3 Authority Key Identifier:
                keyid:81:20:02:8B:31:FF:8B:40:BF:2D:78:2D:9F:E4:29:63:8E:CC:F8:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfd19080-dcb6-4ec7-82bd-8ac83510c492.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f84b::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:0e:0d:c1:13:29:9b:53:de:d3:92:1a:35:73:81:60:89:04:
         e1:9d:b0:a6:dc:13:60:0d:66:13:3a:d2:a3:67:11:bc:63:5a:
         b7:8f:d5:cd:cb:ee:a4:96:04:5a:a8:8a:15:97:78:63:7f:46:
         98:c7:ad:0f:45:ff:4f:9d:87:0e:bd:a3:cf:11:97:8c:ae:e2:
         cf:da:98:43:fd:26:b2:52:b0:91:1a:f8:99:2b:e6:3c:91:6f:
         a2:e2:87:82:40:1b:39:83:93:f1:24:d9:a7:95:22:e3:18:23:
         be:16:3c:13:aa:8d:e2:dc:3d:76:70:20:75:4b:0b:b0:fc:d9:
         b2:5a:a5:2a:d6:aa:0d:ba:94:25:46:2b:a2:c7:11:ed:fb:ea:
         83:70:48:90:55:a0:13:78:1d:ec:60:a3:30:cc:35:bf:21:6e:
         05:19:f0:71:0b:64:a1:dd:1a:6f:9f:f6:08:84:40:93:3e:ba:
         d6:56:38:ba:d0:fc:c9:0b:65:15:3f:13:11:39:b3:61:04:81:
         87:f4:80:59:70:46:ef:2e:a2:91:68:7a:e5:42:53:2b:41:f1:
         43:13:d8:aa:a6:e7:94:74:5a:f5:9c:58:10:dc:50:df:6a:d8:
         ad:53:9f:10:8e:09:b0:99:1f:b3:a9:d5:41:bf:54:e6:7b:e5:
         ab:b0:4a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:20 2025 by rpki-client