Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa
File:                     2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa (raw, json)
Hash identifier:          dakZCFdQUC0sd1adfDUm/A/LjvQkmfCUgjQgPcnEbNU=
Subject key identifier:   59:21:B7:29:A7:76:8B:77:A2:47:D2:D5:10:D6:F2:9B:99:57:0C:90
Certificate issuer:       /CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
Certificate serial:       010D0C9F4328584B0B76D5D115C25B9A37EBED80
Authority key identifier: 78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     11832
IP address blocks:        2602:f6b1:1::/48 maxlen: 48
                          2602:f6b1:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:d5:d1:15:c2:5b:9a:37:eb:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=b9ede9d2-8845-4b54-b104-2ff1fe97071c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:5d:dd:d8:9e:26:04:f7:c6:9b:f4:b9:ac:
                    d2:6d:de:fe:9a:cf:84:c6:bb:de:c1:dd:3d:9e:0a:
                    94:cb:de:ca:b6:0d:f9:27:7b:4d:e3:31:b7:58:6f:
                    79:c1:30:0a:91:07:b1:24:2f:4e:3f:ba:72:cd:af:
                    46:88:61:f1:a2:4f:7d:90:34:e9:f3:94:b6:08:a2:
                    5a:a3:af:7c:79:c5:80:c2:9c:17:71:18:66:cb:ac:
                    2a:1c:81:7d:c0:58:fb:a9:7d:44:d6:50:4f:ec:86:
                    e8:3d:3f:07:e5:17:8d:ab:ee:32:f2:81:7e:87:f1:
                    56:56:dd:0a:06:3e:3f:c9:3c:f6:bc:9b:2f:8e:ef:
                    99:2c:34:f0:40:76:18:80:0e:e4:52:2d:d9:bf:51:
                    27:fd:ab:d0:42:fb:2b:31:42:81:32:13:b8:25:45:
                    0c:5c:b1:57:2b:c4:6f:d0:89:e9:3b:aa:0f:f0:e6:
                    fb:00:f0:76:fb:74:dc:3c:36:1d:58:91:b0:9b:1d:
                    da:c6:b6:39:af:22:64:0b:01:82:68:5c:cb:5d:33:
                    9d:03:85:9e:1f:f4:0a:a8:01:22:e3:e5:44:e3:ab:
                    1a:d2:fc:3c:ba:f3:56:16:eb:5d:d1:02:24:d4:f4:
                    8d:9d:6e:49:ec:75:6e:b2:86:41:76:08:65:0f:6a:
                    8a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:21:B7:29:A7:76:8B:77:A2:47:D2:D5:10:D6:F2:9B:99:57:0C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl

            X509v3 Authority Key Identifier:
                keyid:78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6b1:1::-2602:f6b1:2:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:56:0f:89:e6:02:6b:89:b1:df:fc:fe:04:d4:f5:ce:2c:43:
         29:23:48:f4:9f:39:cd:9e:ad:48:2e:31:54:a5:45:43:43:ea:
         5e:c4:32:03:6b:04:58:a6:9d:eb:f3:ba:91:b9:6c:93:88:70:
         79:c9:bc:f6:56:19:b1:36:f8:7e:65:ed:92:5a:7e:99:8f:98:
         31:f2:f3:21:c8:79:b6:52:97:50:18:c8:8b:e9:c5:0e:95:dd:
         ff:ad:b7:40:8d:99:eb:37:fb:0c:06:19:90:dd:b2:42:46:3e:
         7c:fa:2d:01:cc:96:8f:f7:11:bb:74:55:c1:ae:00:24:93:b3:
         98:20:fc:38:86:2b:b9:fb:f3:03:59:2e:e4:43:9f:7d:23:e6:
         95:3e:3f:14:c1:81:cb:ca:2e:ef:19:ed:e9:fe:25:ae:05:ea:
         b8:70:73:60:73:a9:07:9c:e3:3a:95:1a:b3:e9:ef:43:79:d3:
         06:b7:55:0f:28:9f:36:e8:48:11:11:83:ec:f0:9d:bc:07:8d:
         9f:38:99:d4:97:35:94:8f:95:18:b8:db:a1:09:34:82:84:ea:
         ca:dc:f0:c8:bb:fa:a5:42:a2:0f:cb:9e:1f:27:7b:72:2b:d0:
         04:c5:93:72:2b:bf:4e:ac:a9:c7:db:42:02:34:1d:de:18:e7:
         99:ea:01:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:33:20 2025 by rpki-client