Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/651d2b54-918a-399f-9d4d-c66a10805267.roa
File:                     651d2b54-918a-399f-9d4d-c66a10805267.roa (raw, json)
Hash identifier:          NLW5ndkFZird+SIJ/7C5L1wBVTQnLDRUsUny9cIdkjo=
Subject key identifier:   7E:59:A1:C6:11:FF:6B:73:74:E4:46:D5:53:43:99:9B:31:B0:E1:98
Certificate issuer:       /CN=e39e30b0-0750-4b85-a454-b97ac36b3e14
Certificate serial:       010D0C9F4328584B3821A25FF03F36CB8C31DA80
Authority key identifier: 31:5C:74:54:FD:BC:2B:B4:93:F9:4D:0E:FE:C8:B0:5E:F6:62:51:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/651d2b54-918a-399f-9d4d-c66a10805267.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     401443
IP address blocks:        2602:f7c1::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:a2:5f:f0:3f:36:cb:8c:31:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39e30b0-0750-4b85-a454-b97ac36b3e14
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=be83da5e-2c5c-4f8d-8354-28447f9f5d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a2:a3:9b:78:6d:ca:b1:44:a9:d2:67:d1:ec:
                    7c:f9:07:80:ab:16:68:92:62:bd:d5:a7:22:2e:f5:
                    70:2c:8e:5f:ea:7b:25:90:a7:5c:82:0b:a0:f9:63:
                    77:2c:9b:1d:56:ca:61:9a:ae:2f:a8:b3:c4:dd:a8:
                    f4:c5:af:4f:0c:46:ec:57:8f:ff:f4:a4:e2:5f:f1:
                    07:12:28:fc:6a:80:aa:29:26:ed:51:e9:0d:b3:e8:
                    6c:1b:cb:1d:30:84:12:e7:27:e0:9a:98:46:d9:1e:
                    87:39:69:19:29:fb:d6:bb:8c:08:54:d9:02:10:6c:
                    76:9b:83:34:a9:77:5c:e0:ee:ed:e8:e3:6f:ad:74:
                    bc:68:ea:f7:51:21:ac:1c:4e:70:67:b2:dc:c5:0f:
                    42:bc:d5:c1:69:75:d8:8d:e8:3a:04:19:d0:4a:2f:
                    c3:9b:cf:41:c1:ad:d1:0e:44:16:0b:0d:81:12:67:
                    cb:98:f9:6d:c2:eb:ad:ac:ce:29:66:3f:e9:88:cc:
                    7e:14:a1:e3:ee:49:d6:85:70:66:58:92:be:10:4c:
                    b6:7f:0c:0e:bc:f5:ca:ac:ad:a2:4f:f5:90:13:b1:
                    71:b6:f9:0e:dc:41:32:36:20:7d:0f:ca:a9:49:29:
                    a1:06:1c:d2:bb:fd:af:67:63:1b:75:61:04:19:26:
                    d4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:59:A1:C6:11:FF:6B:73:74:E4:46:D5:53:43:99:9B:31:B0:E1:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/651d2b54-918a-399f-9d4d-c66a10805267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14/e39e30b0-0750-4b85-a454-b97ac36b3e14.crl

            X509v3 Authority Key Identifier:
                keyid:31:5C:74:54:FD:BC:2B:B4:93:F9:4D:0E:FE:C8:B0:5E:F6:62:51:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e39e30b0-0750-4b85-a454-b97ac36b3e14.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7c1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:5f:1a:b7:3f:c8:ec:3a:d4:cb:40:c7:71:5a:f0:49:05:eb:
         5e:3e:ab:25:4b:45:a6:40:07:cb:4a:04:58:4a:b8:a7:48:fe:
         76:3a:43:d5:6e:0d:47:3f:2d:a0:dc:84:81:67:e1:7d:08:b2:
         eb:50:68:3d:c2:94:7c:34:18:bb:90:2d:4b:79:5c:cc:8e:59:
         c7:a3:4f:20:ba:ac:30:ce:2b:90:05:ac:4b:2c:03:3c:5c:d8:
         de:84:a6:8d:aa:33:86:5b:9d:52:70:45:0c:ac:01:28:c4:a5:
         1a:0d:8e:d6:99:be:99:5f:f2:3e:e0:d9:16:a2:94:b0:3c:e2:
         76:ca:ca:f6:22:94:10:dc:02:ef:63:f0:bc:25:ad:08:6c:b6:
         70:ad:4d:e0:f0:d1:64:bd:ae:18:99:df:98:33:84:ea:02:3c:
         a0:9f:bb:6c:70:84:eb:3a:45:39:bb:6e:fa:a7:fe:81:06:e1:
         2c:0a:4d:db:54:ba:4c:22:1c:cb:fe:66:f0:40:ea:b8:4e:83:
         ad:a5:a5:fd:32:d7:45:19:4a:2d:42:ed:ef:0e:55:06:f7:1e:
         32:05:90:e7:39:47:f7:86:92:f3:83:c6:24:aa:90:e0:c8:02:
         1e:f0:a4:34:e0:dc:c6:05:0d:cd:bc:12:e5:17:2e:1f:17:04:
         52:b9:27:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 20:43:04 2025 by rpki-client