Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/8e96e4fc-29f7-35fe-b51d-2eaefc3405d0.roa
File:                     8e96e4fc-29f7-35fe-b51d-2eaefc3405d0.roa (raw, json)
Hash identifier:          zw6ZrHka5+tregmnOgrXWdw2UmoeaLwc0d+T4VaAkkI=
Subject key identifier:   40:AA:E9:F2:9A:80:E9:80:07:BC:F9:BE:A5:01:3C:2C:45:1E:98:D1
Certificate issuer:       /CN=75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa
Certificate serial:       010D0C9F4328584BAF9E1260C0CEC9B2F173FC00
Authority key identifier: 84:67:81:EC:F3:16:48:2C:37:81:3C:A6:C3:10:2D:12:0B:05:00:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/8e96e4fc-29f7-35fe-b51d-2eaefc3405d0.roa
Signing time:             Wed 29 Oct 2025 20:12:39 +0000
ROA not before:           Wed 29 Oct 2025 20:12:39 +0000
ROA not after:            Tue 27 Jan 2026 21:12:39 +0000
asID:                     399970
IP address blocks:        2602:fc3b:e400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:af:9e:12:60:c0:ce:c9:b2:f1:73:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa
        Validity
            Not Before: Oct 29 20:12:39 2025 GMT
            Not After : Jan 27 21:12:39 2026 GMT
        Subject: CN=3abea480-4b06-46c6-b313-cd684567c4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:31:a4:6a:d1:cd:2b:03:fb:88:e4:73:9e:81:
                    29:de:ed:4e:d9:da:d4:71:0f:60:28:bc:cb:ba:fa:
                    17:48:e3:68:e4:d7:40:f3:fd:9a:2f:e6:6a:1f:02:
                    19:80:ec:f1:cc:bc:e1:7a:c9:ae:91:8d:eb:ee:01:
                    be:71:57:d4:de:16:2b:9d:b0:27:a9:56:13:24:0c:
                    c7:68:79:21:9a:9d:80:ac:18:48:4d:eb:22:ef:8e:
                    b4:ce:8c:e6:1a:db:e2:63:6b:e1:01:f8:96:ba:cb:
                    3c:60:2a:85:87:78:d3:0d:63:56:ce:c6:53:21:25:
                    19:75:8c:56:39:f8:83:db:9b:ae:f0:d8:69:48:65:
                    74:a9:79:4c:b8:4d:47:33:4e:52:ae:fe:c6:f0:50:
                    cf:22:c3:8f:0a:a8:a7:a0:c1:5e:e1:4e:a9:3d:bf:
                    7c:4b:4d:4f:e5:01:85:d6:ca:9a:7a:26:40:55:8b:
                    47:4d:63:2e:be:69:12:6a:b9:ed:27:b3:13:2b:b1:
                    d4:52:4e:a1:02:d8:93:9d:81:7c:ed:6e:35:59:bb:
                    59:d5:e2:6e:0e:91:b9:3f:bb:a5:c5:fa:d3:e5:65:
                    e3:b4:ad:03:34:04:2b:75:d5:d1:b8:e9:59:ea:84:
                    a7:24:e1:3a:11:89:01:a5:e5:33:28:bb:a0:6b:7f:
                    58:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AA:E9:F2:9A:80:E9:80:07:BC:F9:BE:A5:01:3C:2C:45:1E:98:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/8e96e4fc-29f7-35fe-b51d-2eaefc3405d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.crl

            X509v3 Authority Key Identifier:
                keyid:84:67:81:EC:F3:16:48:2C:37:81:3C:A6:C3:10:2D:12:0B:05:00:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:e400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:27:db:4d:4d:ea:ba:bd:50:f8:70:90:68:07:9c:ac:53:cc:
         34:34:24:8b:e4:cc:8d:f0:70:0f:6f:18:52:e0:e9:a7:4d:31:
         e9:a1:77:e6:f8:6d:72:28:0e:26:fe:3e:7b:9c:91:ba:cc:18:
         dd:db:a5:86:d9:13:b8:6b:f8:c1:fc:f6:16:43:60:23:8d:a4:
         11:f6:64:83:bd:ac:db:0c:62:01:22:88:a1:0a:16:e7:91:45:
         b6:25:06:7b:b2:31:7d:9c:dc:31:f7:c7:2b:e4:99:60:3c:7b:
         fb:ee:cd:1d:08:64:0a:bc:48:57:7d:9c:fe:b5:1a:bb:73:ad:
         57:52:06:b7:89:8f:78:3f:bc:d9:22:fb:08:3b:ce:04:e9:88:
         49:7e:4b:d7:f5:78:79:cc:9e:92:c4:81:7e:cb:9a:fa:a6:26:
         b3:0b:c3:46:ca:6c:13:41:29:2b:bc:fb:f2:77:bc:60:fa:59:
         54:3c:54:08:e0:21:3e:cd:de:31:ce:e6:a5:e1:ce:89:6c:31:
         00:ce:b5:21:89:3d:bc:a2:55:73:81:6f:a1:5f:9b:3a:ae:49:
         51:b1:0d:ac:9a:9d:2e:83:37:74:0f:29:65:16:49:7d:43:29:
         8f:c3:5e:0c:27:06:ad:e0:da:45:26:be:33:55:f5:07:8d:37:
         c7:a7:85:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:17:23 2025 by rpki-client