Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/9cb9f335-9867-34b0-a224-fe9aeeb44ef3.roa
File:                     9cb9f335-9867-34b0-a224-fe9aeeb44ef3.roa (raw, json)
Hash identifier:          nhBMqQNoF1dryMG8s+xh9uSI75VcvwpbJiRWgwMY0m4=
Subject key identifier:   00:7E:7C:E3:47:A2:C9:14:1C:02:4F:71:1D:74:C7:62:8F:95:74:98
Certificate issuer:       /CN=75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa
Certificate serial:       010D0C9F4328584BAFAA47FC082714C145A3BF00
Authority key identifier: 84:67:81:EC:F3:16:48:2C:37:81:3C:A6:C3:10:2D:12:0B:05:00:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/9cb9f335-9867-34b0-a224-fe9aeeb44ef3.roa
Signing time:             Wed 29 Oct 2025 20:16:44 +0000
ROA not before:           Wed 29 Oct 2025 20:16:44 +0000
ROA not after:            Tue 27 Jan 2026 21:16:44 +0000
asID:                     399970
IP address blocks:        2602:fc3b:e910::/44 maxlen: 44
                          2602:fc3b:e920::/44 maxlen: 44
                          2602:fc3b:e940::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:af:aa:47:fc:08:27:14:c1:45:a3:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa
        Validity
            Not Before: Oct 29 20:16:44 2025 GMT
            Not After : Jan 27 21:16:44 2026 GMT
        Subject: CN=9223e9a4-cc2d-4201-b377-99ee4ca597d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:13:f4:a0:98:1c:16:c3:50:84:4a:6d:19:f1:
                    d9:82:ca:0b:ce:b7:58:48:c6:f3:98:df:16:50:7e:
                    16:10:37:6c:35:f5:db:49:c5:57:8c:05:a3:ea:3c:
                    49:d9:33:d7:b1:88:f1:c5:46:53:3e:1b:51:8e:4c:
                    d7:a5:68:21:f7:1a:65:de:13:10:7e:79:47:e7:d5:
                    a5:94:2b:eb:68:81:78:98:cb:ce:cd:15:91:97:9d:
                    b0:01:d0:c2:29:df:ff:b2:05:14:a0:e9:28:d8:11:
                    b7:2e:76:aa:86:9e:46:04:69:e2:4a:ff:06:e4:f6:
                    43:1e:b4:c5:fd:c3:89:90:62:71:8d:09:4a:03:24:
                    63:34:59:b6:37:c2:c5:5d:2a:d6:cc:eb:ea:08:aa:
                    30:79:ad:1c:74:83:20:e3:42:69:33:e6:85:1d:f0:
                    6e:d0:34:2d:bf:48:40:93:44:2b:53:9d:a1:56:31:
                    0b:a0:c3:85:b1:0f:46:a2:94:2b:a5:f3:95:02:d3:
                    dd:2d:cd:c8:ec:b3:4b:80:7a:68:0d:b4:af:4e:36:
                    7d:96:73:4d:36:6c:59:18:96:5b:35:a1:65:0d:46:
                    9e:cd:76:10:86:1c:3d:e0:d2:60:d1:51:ab:04:8d:
                    c3:ac:cf:0e:5f:c1:5e:01:80:41:39:fd:06:72:59:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7E:7C:E3:47:A2:C9:14:1C:02:4F:71:1D:74:C7:62:8F:95:74:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/9cb9f335-9867-34b0-a224-fe9aeeb44ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.crl

            X509v3 Authority Key Identifier:
                keyid:84:67:81:EC:F3:16:48:2C:37:81:3C:A6:C3:10:2D:12:0B:05:00:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:e910::-2602:fc3b:e92f:ffff:ffff:ffff:ffff:ffff
                  2602:fc3b:e940::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:90:6b:7a:50:79:bb:04:66:5e:2b:d9:0d:14:3c:df:fd:78:
         bc:4e:ed:a4:ae:11:3f:af:71:df:87:a9:b8:6f:2e:12:71:0c:
         c0:9b:67:36:28:31:43:47:5c:52:b9:75:12:8c:9e:80:8a:be:
         e9:aa:7b:f9:7b:f5:23:f1:ba:e9:4c:41:4e:19:a5:5f:05:b2:
         3a:8d:cc:94:12:fd:7c:f1:b6:17:d6:c4:41:e8:99:0a:66:ad:
         5d:34:ca:ce:19:11:2b:8b:f2:9a:42:72:4b:33:e2:e3:36:52:
         19:06:0b:10:8b:fc:47:20:e1:6f:a0:45:c4:92:ba:83:12:de:
         4b:28:28:9a:aa:22:9a:18:2c:e8:c4:b3:6f:f5:4c:ab:ef:4a:
         aa:ff:b3:5f:65:46:e0:6d:8b:a2:e3:7d:99:30:8f:4f:87:e9:
         30:44:a4:ba:53:81:78:0b:b9:b7:e7:ae:b3:0e:4a:f8:c0:5f:
         85:20:85:76:3e:04:14:3a:76:97:65:b3:31:21:6d:70:42:70:
         b4:b5:52:eb:e6:26:0e:11:25:9b:2c:89:17:f0:73:bd:6e:07:
         ce:9d:c0:a3:69:75:8f:06:15:38:e9:62:d4:84:78:79:59:6c:
         1d:0d:04:22:ca:f6:ba:2f:fc:01:02:94:fb:d5:0d:c8:72:6d:
         be:d2:16:90
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:01:14 2025 by rpki-client