Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/c72c6088-7aa3-3f6b-a1fe-5feeb1c93c64.roa
File:                     c72c6088-7aa3-3f6b-a1fe-5feeb1c93c64.roa (raw, json)
Hash identifier:          /ja3AixKKhEFGjJA76Fthn4kxlQJ/xWpincVNwhoDqo=
Subject key identifier:   07:36:74:6B:43:36:9F:BF:A2:77:44:74:21:6A:2D:6D:FD:C5:58:77
Certificate issuer:       /CN=75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa
Certificate serial:       010D0C9F4328584BAFA011CFE45CEEEFAF165DE0
Authority key identifier: 84:67:81:EC:F3:16:48:2C:37:81:3C:A6:C3:10:2D:12:0B:05:00:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/c72c6088-7aa3-3f6b-a1fe-5feeb1c93c64.roa
Signing time:             Wed 29 Oct 2025 20:16:41 +0000
ROA not before:           Wed 29 Oct 2025 20:16:41 +0000
ROA not after:            Tue 27 Jan 2026 21:16:41 +0000
asID:                     399970
IP address blocks:        2602:fc3b:e310::/44 maxlen: 44
                          2602:fc3b:e320::/44 maxlen: 44
                          2602:fc3b:e330::/44 maxlen: 44
                          2602:fc3b:e340::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:af:a0:11:cf:e4:5c:ee:ef:af:16:5d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa
        Validity
            Not Before: Oct 29 20:16:41 2025 GMT
            Not After : Jan 27 21:16:41 2026 GMT
        Subject: CN=b2fbaafa-0f3a-45c0-bc8e-b9ec0d9b95ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b0:c6:c9:e1:60:93:30:91:04:67:17:29:50:
                    ea:a3:57:36:40:95:bc:a6:41:33:0c:f2:3f:22:0c:
                    dd:c3:a9:7d:0a:74:fe:43:a2:f0:88:36:a8:1e:7b:
                    d8:f5:f6:ff:3d:f0:41:69:06:37:fa:d1:92:25:6f:
                    d1:c1:27:66:56:ab:94:39:62:35:d7:bd:a5:7a:ed:
                    28:9c:3c:77:f9:9d:99:4b:c8:5b:b1:0b:76:f5:5c:
                    f7:cb:64:b6:62:9a:08:8f:f4:ca:2f:6c:29:74:9a:
                    c7:f5:eb:77:f7:fa:97:c9:95:e1:8c:2a:5e:41:80:
                    12:3e:36:34:e7:13:59:d1:9b:65:ce:2a:f7:77:ba:
                    bc:a7:93:37:6b:79:b0:5d:6d:22:9f:cc:fe:35:28:
                    fa:5b:0f:a0:c1:54:5d:74:ad:7f:11:fc:37:58:7a:
                    cc:61:cd:7f:1f:02:1a:5c:1c:68:48:35:33:99:b9:
                    0f:a0:4b:bd:59:3d:60:4b:bb:4b:b7:61:39:67:10:
                    66:ae:89:cc:8e:17:f0:8b:2f:10:10:05:fb:9c:5d:
                    a5:db:b7:62:d2:34:9d:e3:51:78:b2:4e:d8:5f:1a:
                    ed:a1:f6:e4:2f:98:9c:ae:15:aa:8c:e3:e4:3a:9c:
                    b4:a2:e2:48:4d:a0:04:32:b3:9f:19:67:49:ff:3c:
                    c8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:36:74:6B:43:36:9F:BF:A2:77:44:74:21:6A:2D:6D:FD:C5:58:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/c72c6088-7aa3-3f6b-a1fe-5feeb1c93c64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.crl

            X509v3 Authority Key Identifier:
                keyid:84:67:81:EC:F3:16:48:2C:37:81:3C:A6:C3:10:2D:12:0B:05:00:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/75c0fb66-d2e9-4856-a8e9-b2fb8fe9f6aa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:e310::-2602:fc3b:e34f:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:39:35:0c:73:83:81:06:11:e3:a7:a0:ea:e2:f3:43:12:e3:
         4b:e5:26:45:0d:d5:e2:51:ff:5e:36:11:18:13:71:9d:8c:31:
         c1:3b:22:78:0d:9a:bd:42:59:73:32:a4:ff:4c:8d:83:ea:4b:
         a6:c9:2c:0c:52:a3:97:5d:2c:00:01:d3:03:98:91:03:2e:62:
         87:5f:93:f4:b5:4d:07:6d:85:28:cf:b8:91:2b:67:ce:de:13:
         98:11:22:ae:84:c8:58:c4:33:5c:0b:db:f5:bb:2d:40:51:07:
         93:4c:71:00:bc:cb:63:ab:73:a0:82:55:8a:ab:e5:da:31:8e:
         d9:65:2b:4c:12:2b:1f:e2:d6:81:e1:bf:3f:aa:af:75:99:bb:
         ca:b6:c3:e4:16:f0:0f:16:a3:d5:0d:75:ec:1b:d0:30:c5:14:
         8e:74:4f:b3:b8:a6:cf:06:d2:4f:54:9b:04:a1:3c:5e:b1:50:
         7d:87:33:a8:82:cb:5e:11:2c:14:02:46:a0:dd:78:13:41:74:
         ac:b3:fc:12:43:b8:60:e7:f5:49:a7:8a:14:3e:0a:a7:8a:50:
         02:3d:79:66:09:fc:ef:d6:f4:61:d7:b5:b4:df:3f:89:84:a4:
         3b:4e:f7:f5:ec:3e:2b:5c:5a:9b:3a:cd:f9:88:54:ae:40:fc:
         8a:e1:67:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:02:16 2025 by rpki-client