Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/3e6e06b5-278b-3d7e-9909-805fb3051576.roa
File:                     3e6e06b5-278b-3d7e-9909-805fb3051576.roa (raw, json)
Hash identifier:          WOCGDpYb5RasEhHKk3T4HBu2/kSy+ecEj6Ld8Raxt4U=
Subject key identifier:   33:E9:C8:66:91:3A:E2:D5:0F:6B:5E:FF:15:18:EB:4D:87:71:29:53
Certificate issuer:       /CN=75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa
Certificate serial:       010D0C9F4328584BAF9D1228B28FF53692C86300
Authority key identifier: 84:67:81:EC:F3:16:48:2C:37:81:3C:A6:C3:10:2D:12:0B:05:00:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/3e6e06b5-278b-3d7e-9909-805fb3051576.roa
Signing time:             Wed 29 Oct 2025 20:10:38 +0000
ROA not before:           Wed 29 Oct 2025 20:10:38 +0000
ROA not after:            Tue 27 Jan 2026 21:10:38 +0000
asID:                     399970
IP address blocks:        2602:fc3b:e900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:af:9d:12:28:b2:8f:f5:36:92:c8:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa
        Validity
            Not Before: Oct 29 20:10:38 2025 GMT
            Not After : Jan 27 21:10:38 2026 GMT
        Subject: CN=0f6349d4-e1ea-44f3-9ae6-8820b5317122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:c3:05:da:6a:2e:ae:ef:f8:1e:ea:38:a4:
                    0f:32:af:08:1a:a8:38:54:90:fe:ee:62:d9:45:a1:
                    77:3e:59:a5:65:ce:6d:4c:d3:59:17:1d:37:d9:14:
                    ef:76:20:e6:95:83:80:0c:a5:ba:8e:6f:f2:59:d1:
                    1f:29:50:6e:63:38:15:83:47:28:5d:a0:00:ab:fc:
                    e5:21:ad:90:a4:ea:62:1d:14:87:03:7f:68:6a:63:
                    c0:53:01:48:3d:7d:0c:65:bb:fb:d7:7d:fb:51:56:
                    58:32:40:3c:1e:13:12:1c:ec:57:d3:1d:b2:05:9d:
                    62:cc:56:44:16:1c:86:d6:cf:dc:41:ca:3d:39:3e:
                    c5:ce:12:c0:f4:53:72:cf:33:9f:4e:fc:8b:77:88:
                    89:a6:68:de:35:22:f8:da:7c:97:42:b0:42:63:63:
                    6d:e7:59:fd:6d:4b:da:08:71:49:5e:af:2c:54:6e:
                    94:8d:ea:66:87:79:b3:5c:1b:22:48:5c:86:fe:6d:
                    e0:77:09:5b:c4:80:c7:00:06:2e:b5:c8:c6:59:66:
                    01:42:28:57:c2:36:ff:81:f6:d6:87:27:eb:61:76:
                    90:ee:89:92:7c:98:84:cb:93:be:b8:97:63:63:15:
                    ba:61:83:0c:c5:47:bc:e4:26:7d:39:a7:cc:10:6b:
                    bc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E9:C8:66:91:3A:E2:D5:0F:6B:5E:FF:15:18:EB:4D:87:71:29:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/3e6e06b5-278b-3d7e-9909-805fb3051576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.crl

            X509v3 Authority Key Identifier:
                keyid:84:67:81:EC:F3:16:48:2C:37:81:3C:A6:C3:10:2D:12:0B:05:00:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:e900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:2c:0d:16:9f:5c:76:7a:0f:1c:24:39:f8:91:21:6b:f0:8e:
         02:b3:a6:be:58:12:64:87:c4:84:4e:c5:8a:82:91:6f:14:45:
         2d:96:af:ea:24:70:d0:93:9a:86:cf:c9:fb:56:25:3f:9e:87:
         d5:00:8f:c3:61:5e:0a:a6:d7:d0:74:a7:c2:53:f3:b2:d7:3b:
         f9:bf:f7:33:96:77:c0:45:1a:7b:b1:9e:16:4a:a4:b0:42:f9:
         c2:41:de:d9:4c:96:e9:bf:13:97:e2:26:e8:a8:7c:4d:d2:63:
         84:5f:09:b8:72:86:6f:82:df:f0:ab:0a:32:c5:79:87:27:0d:
         de:4c:13:20:28:7d:64:4a:d1:73:44:ff:01:a9:8e:2e:4a:29:
         45:e7:31:79:c2:51:d4:f1:e8:b2:3f:64:a9:fd:09:52:e1:53:
         5c:fe:25:4c:ef:a7:c1:06:33:92:6a:55:42:04:80:1a:53:8c:
         6a:27:88:b4:71:30:26:fb:1d:12:a0:bd:7b:df:5b:02:34:ea:
         5f:e8:c2:cf:dc:ec:9a:42:70:b2:7f:f3:86:ec:91:38:4c:15:
         a7:ac:10:3a:dc:3a:ff:0c:32:45:53:e1:41:50:1b:dd:29:25:
         3c:bd:12:3f:77:e5:34:ec:c2:c5:89:75:a7:a5:d0:49:ad:ae:
         34:5d:43:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:01:14 2025 by rpki-client