Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/7f630d2e-d912-3912-9d2f-8f747a67a6c4.roa
File:                     7f630d2e-d912-3912-9d2f-8f747a67a6c4.roa (raw, json)
Hash identifier:          6Rki0wbrJLKSGa+Rx8L+Buohjjf8KR/Wal3AFLVGPBE=
Subject key identifier:   33:E4:F2:74:3D:F5:BA:71:42:91:E6:F6:1B:13:90:E2:27:AB:AF:84
Certificate issuer:       /CN=3f8a97fa-fb6e-46d4-9e8e-efdd4358a740
Certificate serial:       010D0C9F4328584B6A62034BB7FA0878F8E93B00
Authority key identifier: 61:16:93:5F:0E:1E:26:10:92:FB:12:B4:54:95:80:91:16:F4:B0:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/7f630d2e-d912-3912-9d2f-8f747a67a6c4.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     13356
IP address blocks:        2604:5ec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:62:03:4b:b7:fa:08:78:f8:e9:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8a97fa-fb6e-46d4-9e8e-efdd4358a740
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=1e24ccf5-f267-4bf1-a04a-65e97650b112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:84:00:c6:11:87:62:3a:d4:f9:e0:b7:e1:34:
                    d8:b3:a6:47:e2:5d:f3:0a:a9:f4:40:58:41:6b:2d:
                    d6:37:e1:ce:07:8b:12:9b:8d:c2:47:c0:76:8f:c9:
                    c6:d8:44:25:19:d7:e1:d8:c3:5f:76:a5:35:f7:3b:
                    8e:b5:13:cc:11:57:ea:ea:dd:33:af:0d:8f:40:3d:
                    e2:3b:fb:84:b9:10:9a:db:4e:15:71:c3:6b:2b:b0:
                    d4:df:7e:1a:f7:36:4d:7d:a5:fb:18:e9:0d:3e:77:
                    a6:f8:52:87:64:15:8d:d2:fa:04:36:1a:4b:33:cd:
                    e6:0a:5c:45:91:59:fc:4f:76:ee:f9:00:ea:06:15:
                    53:30:1f:f0:11:b3:89:49:70:7d:8f:ec:af:fa:d1:
                    82:e5:e5:ff:f1:0b:e9:3d:91:b1:ef:a9:b4:58:1d:
                    5a:f8:8f:b9:43:b8:a5:83:6f:30:a3:8d:f0:e3:3a:
                    d6:8b:28:28:97:a4:85:22:c8:78:51:2a:4b:83:9b:
                    c1:a9:f6:eb:d0:60:a0:c0:8a:54:a3:e2:be:21:c5:
                    2e:3c:b6:7e:a3:df:29:1d:ee:3f:1f:45:76:42:76:
                    ed:30:48:c8:cd:db:89:13:e0:ad:e6:fd:60:4e:e9:
                    89:31:b0:ab:18:25:08:93:7c:0f:2e:2b:49:01:59:
                    ab:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E4:F2:74:3D:F5:BA:71:42:91:E6:F6:1B:13:90:E2:27:AB:AF:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/7f630d2e-d912-3912-9d2f-8f747a67a6c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.crl

            X509v3 Authority Key Identifier:
                keyid:61:16:93:5F:0E:1E:26:10:92:FB:12:B4:54:95:80:91:16:F4:B0:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5ec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:42:99:d3:2c:42:c3:6b:13:8d:cd:4b:58:80:d0:ab:e2:fe:
         95:f7:66:e6:51:70:eb:61:75:5d:cc:12:15:04:33:d2:0c:6c:
         6e:2b:83:e3:48:bb:f5:49:e3:17:a0:1c:34:bc:e5:03:dd:3b:
         d1:00:d2:09:f7:2e:d9:88:5b:3a:e2:a3:59:4f:0d:be:78:49:
         72:b3:55:ad:6b:0c:fd:e0:40:ec:5b:89:d0:b0:29:db:59:26:
         03:57:38:89:01:bc:db:ba:4a:d8:93:c5:8a:a4:37:13:4f:e1:
         f7:d3:94:58:c8:12:79:d2:71:ae:55:94:97:c2:db:b9:e4:f8:
         95:f1:3a:e9:8f:a1:c4:1c:f9:ab:a8:03:25:4e:3d:48:c9:08:
         a3:73:23:e6:b4:37:06:b6:5c:bb:27:ea:bf:d0:6e:64:dc:7f:
         36:fe:7c:d7:aa:61:e3:9c:b4:19:fa:e8:94:68:34:6f:e2:57:
         c6:b8:d6:b1:dd:19:e8:44:5f:d7:77:04:ba:fa:f3:ba:ca:67:
         dc:a1:8d:cb:d0:80:f3:bd:6f:be:98:38:87:1b:c2:15:4b:85:
         dc:d3:a8:7e:08:58:f3:9b:cb:db:89:4d:42:f0:90:65:d1:a7:
         91:38:7d:8b:67:b9:ff:32:65:16:ee:d9:1c:91:6f:7d:7c:f9:
         d5:9e:fe:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:39 2025 by rpki-client