Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/70b6730c-69d0-35eb-99be-fa3ad66cfc11.roa
File:                     70b6730c-69d0-35eb-99be-fa3ad66cfc11.roa (raw, json)
Hash identifier:          IQ75/vAGAzsodYupQLo/ymK4UbGrdYV87oE8BBzvj9w=
Subject key identifier:   82:78:2B:82:17:3A:66:2B:30:FB:51:C1:34:66:A7:D4:C3:EA:F9:7A
Certificate issuer:       /CN=761d4038-2e12-4354-ba44-f50a79f7d209
Certificate serial:       010D0C9F4328584B611F0A5EC83F2CD574362740
Authority key identifier: 42:D5:52:37:D1:E1:55:24:91:88:61:70:62:AB:06:B5:00:42:83:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/70b6730c-69d0-35eb-99be-fa3ad66cfc11.roa
Signing time:             Wed 01 Oct 2025 17:23:39 +0000
ROA not before:           Wed 01 Oct 2025 17:23:39 +0000
ROA not after:            Tue 30 Dec 2025 18:23:39 +0000
asID:                     21807
IP address blocks:        2602:f5a5::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/761d4038-2e12-4354-ba44-f50a79f7d209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/761d4038-2e12-4354-ba44-f50a79f7d209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:61:1f:0a:5e:c8:3f:2c:d5:74:36:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761d4038-2e12-4354-ba44-f50a79f7d209
        Validity
            Not Before: Oct  1 17:23:39 2025 GMT
            Not After : Dec 30 18:23:39 2025 GMT
        Subject: CN=e1ce6b64-978e-4a01-a3ed-6cc6dedb0069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:87:59:13:c9:6c:8c:8a:b9:b6:d5:41:49:8e:
                    5f:a8:b4:3f:df:0b:2d:0b:a3:e7:b8:ca:49:64:0b:
                    7e:23:bd:3c:d6:d6:bd:84:2a:5a:50:80:5a:4e:e8:
                    36:74:bc:da:8b:46:f7:23:62:f1:a3:65:a7:78:ef:
                    af:ed:a4:4c:12:af:24:67:48:78:6d:8b:8b:10:09:
                    ae:b1:9f:c7:49:00:51:89:4a:0b:71:60:f5:e8:7b:
                    4a:f5:07:14:41:6c:c6:ca:c3:b9:30:39:0c:e1:22:
                    d5:72:68:37:44:69:b6:71:e9:d2:75:73:ff:56:e0:
                    20:f9:48:d2:1c:77:39:b3:14:12:01:ca:9b:b1:10:
                    d7:dd:7d:60:86:54:d3:2f:8d:25:65:0e:34:db:2a:
                    af:9f:de:96:00:4b:a5:d5:89:17:97:04:96:6b:df:
                    73:2b:ae:14:40:09:53:fa:e5:be:22:d1:a0:a7:b1:
                    d2:8c:a1:2e:ed:df:a1:4c:52:43:6a:92:7f:1b:08:
                    bf:b1:ad:43:38:c3:5d:20:62:82:4c:c3:6d:a3:b6:
                    d4:50:f0:2d:a1:3e:56:00:1d:08:e1:94:3e:e9:f9:
                    7b:cd:cb:95:95:00:ae:0f:92:f0:74:f3:b6:1c:a4:
                    a7:c5:63:12:b0:40:82:1d:2c:72:66:cf:3f:b3:4a:
                    57:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:78:2B:82:17:3A:66:2B:30:FB:51:C1:34:66:A7:D4:C3:EA:F9:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/70b6730c-69d0-35eb-99be-fa3ad66cfc11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/761d4038-2e12-4354-ba44-f50a79f7d209.crl

            X509v3 Authority Key Identifier:
                keyid:42:D5:52:37:D1:E1:55:24:91:88:61:70:62:AB:06:B5:00:42:83:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5a5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:eb:13:58:b3:1f:38:28:64:2b:06:fc:24:c8:63:3d:da:6e:
         bb:4d:a0:69:3d:60:bc:0d:d7:94:7c:a9:35:5e:27:4c:ce:d3:
         10:02:3d:51:5b:21:70:3e:7e:59:82:bf:ff:f7:bd:d0:87:8d:
         ed:17:d5:85:47:d9:a5:28:54:2f:98:a4:ad:5c:9a:2d:a8:54:
         1d:6e:2a:66:b9:18:78:3f:51:63:a7:09:44:d0:d2:e1:e0:78:
         06:d6:93:6c:05:62:09:07:48:f9:a4:09:c5:7e:e3:58:12:78:
         06:72:69:cc:93:a7:5d:e3:e4:88:5c:97:c1:95:3c:fc:6f:5a:
         15:95:57:15:08:fb:58:fa:8a:ad:4c:4b:22:40:bd:96:34:ae:
         a7:dd:9f:33:10:d8:13:b3:5e:ab:9d:e5:26:24:e7:72:4b:25:
         7f:33:dc:0f:81:bf:56:be:cc:33:f1:6a:cd:83:b6:65:30:e8:
         49:2c:df:f5:04:6a:30:f6:4a:b0:de:22:e2:fe:ca:ef:71:12:
         be:38:0f:ed:a9:ed:55:b5:31:a5:34:70:20:ba:bb:7b:81:27:
         a8:da:84:68:a8:00:44:c9:71:4b:6c:ef:25:f2:e4:3f:82:09:
         c5:16:b3:eb:8a:05:7e:45:49:df:18:fe:11:04:1b:3d:85:cd:
         30:56:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:39:52 2025 by rpki-client