Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/79ab3f69-c62e-379a-8fe7-27de1b927dd8.roa
File:                     79ab3f69-c62e-379a-8fe7-27de1b927dd8.roa (raw, json)
Hash identifier:          ojDaCnob62twxvPvlCONLpgxtHjWv+8dldvEek2sfwk=
Subject key identifier:   00:2E:8D:18:C8:19:F8:49:99:1E:67:97:B1:86:12:26:0D:0F:45:F2
Certificate issuer:       /CN=02e3db6d-40b5-4639-a499-a02b80a4befe
Certificate serial:       010D0C9F4328584B6797439341B01124C128C100
Authority key identifier: CC:62:08:D3:2D:E8:6B:71:2B:A1:F2:C0:86:A8:B6:62:99:81:EF:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/79ab3f69-c62e-379a-8fe7-27de1b927dd8.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     62488
IP address blocks:        2604:cc80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:43:93:41:b0:11:24:c1:28:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e3db6d-40b5-4639-a499-a02b80a4befe
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=91ac78d7-471f-45fe-bd1a-3a0908f7be25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:f0:0a:5f:e3:8b:a5:b8:8e:d6:79:8c:e3:
                    61:83:ba:28:11:d7:e3:7b:e1:80:5d:cf:67:69:8d:
                    77:89:b2:a5:09:6d:bd:07:89:6e:c0:67:8d:c6:93:
                    3b:97:2d:5c:59:2f:b8:1b:95:36:c7:f9:5c:ca:6e:
                    65:a9:5c:ee:b5:f9:a4:64:50:f0:c1:40:b5:6d:c7:
                    de:f2:2a:a2:97:61:73:02:ee:91:b3:74:d1:be:3e:
                    b9:70:f7:db:5f:3a:a3:46:65:fc:27:48:72:5a:17:
                    3e:aa:e5:e6:3c:1c:d9:e7:ac:ac:b5:49:4f:ae:4a:
                    91:52:a5:c5:7a:93:71:1a:14:62:a3:4f:a6:b5:ce:
                    b3:b9:05:0b:0b:2c:14:17:ed:09:55:60:42:45:ba:
                    48:69:45:1e:ca:c4:6d:6e:b6:29:ff:21:f0:af:48:
                    5d:50:c2:31:d3:5c:7e:f6:65:f4:c4:b8:9d:08:d8:
                    3c:1d:1c:76:57:cd:21:cf:07:b8:4b:e9:61:33:0f:
                    f1:a4:d7:d3:55:4e:07:c8:ee:dd:3f:8d:82:1f:f7:
                    ca:e5:90:65:6f:4e:50:01:50:b3:58:fa:6a:b6:d9:
                    bc:0f:3f:82:ea:eb:6b:30:51:be:c9:b6:9d:cb:df:
                    20:26:07:43:8a:9c:d7:b2:09:a8:b9:04:75:bc:fd:
                    0b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2E:8D:18:C8:19:F8:49:99:1E:67:97:B1:86:12:26:0D:0F:45:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/79ab3f69-c62e-379a-8fe7-27de1b927dd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe/02e3db6d-40b5-4639-a499-a02b80a4befe.crl

            X509v3 Authority Key Identifier:
                keyid:CC:62:08:D3:2D:E8:6B:71:2B:A1:F2:C0:86:A8:B6:62:99:81:EF:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02e3db6d-40b5-4639-a499-a02b80a4befe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cc80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:1f:16:da:88:2b:b9:d0:0d:75:04:5a:9d:5e:66:ea:fa:e8:
         10:89:ab:69:37:02:05:79:aa:d8:14:d8:47:b5:3f:0b:a9:2c:
         9d:32:ca:ea:0b:6e:87:e6:a4:c1:87:ae:47:25:eb:ac:50:d2:
         6e:38:36:8f:57:7e:69:b4:b8:73:bb:32:d2:d1:c0:d4:16:9d:
         b3:b1:76:6a:08:43:ac:ed:50:32:e2:52:b6:b2:07:91:75:69:
         d0:0f:cc:5d:81:9a:4a:75:61:cf:c7:a4:c6:61:25:ab:0c:cc:
         6e:f2:91:e5:b7:61:94:94:34:f1:d6:07:4e:72:78:bc:a9:e4:
         19:ee:ba:74:f0:d7:72:8b:1d:d2:d5:81:d3:30:0a:1f:d3:75:
         43:b8:cc:38:c8:28:69:87:e7:e0:2e:33:aa:4a:6e:92:d2:c3:
         ce:1b:ef:0a:77:ee:e4:35:94:d0:19:08:a8:0d:57:cd:f5:6c:
         30:b3:31:b0:ca:a0:3a:93:1a:1a:85:7d:0c:22:b2:b2:8d:57:
         e3:a9:87:ff:14:e5:89:ce:5c:03:d8:25:de:bf:50:31:2b:f9:
         8a:a7:a2:a6:8f:16:96:84:5b:a3:ee:a0:d9:9d:25:3e:ca:73:
         49:56:8d:15:04:46:b8:42:69:8c:b1:86:52:00:49:29:b7:7a:
         2e:ab:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 20:41:50 2025 by rpki-client