Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f26d42ef-e88a-3b64-abd3-b0dbdd7971ce.roa
File:                     f26d42ef-e88a-3b64-abd3-b0dbdd7971ce.roa (raw, json)
Hash identifier:          rlSN6mrscO2y1YILk9j/OZu4YgxE8ZSEgt9V4f37zWI=
Subject key identifier:   EA:9D:2A:CA:1E:62:D3:1E:DF:E9:4A:D7:F1:E5:4D:C7:13:2F:97:44
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584B62020F8DCE7D46E7F614C400
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f26d42ef-e88a-3b64-abd3-b0dbdd7971ce.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     8070
IP address blocks:        2603:1063:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:0f:8d:ce:7d:46:e7:f6:14:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=9f4e3b73-51f0-4ac5-82e7-c7b23b861ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8b:c1:f6:8d:5d:1b:a3:18:fb:62:98:2a:99:
                    0d:46:f3:f2:4b:c7:55:db:60:30:3c:2a:00:1f:55:
                    33:ea:91:38:30:5c:7d:fe:c6:e7:e0:61:00:2d:3f:
                    05:a7:d3:b8:c8:ef:b6:fe:d5:a6:2a:1f:69:02:c5:
                    42:76:cd:97:ce:70:5e:d6:e6:ea:18:fd:a6:07:bd:
                    d4:3a:3f:dc:e9:b5:da:4f:5c:17:17:41:da:3b:3b:
                    38:a1:79:50:4f:91:11:c9:0d:c3:d5:40:da:60:37:
                    96:36:c6:6a:af:82:55:a6:cd:46:1e:d1:30:54:65:
                    2e:be:cc:56:2c:b7:ab:1c:6c:94:70:45:58:40:2b:
                    b8:9c:91:15:f5:d3:a1:08:b5:c9:d6:90:33:70:13:
                    3b:77:47:a9:70:09:27:ac:84:c3:17:17:22:04:98:
                    ac:a5:4b:36:41:4b:e4:66:86:6a:47:22:92:70:c3:
                    82:66:12:a3:26:bf:47:90:d8:79:2c:2b:f4:97:75:
                    4f:61:a8:25:f7:66:df:76:a6:46:c7:11:75:5f:84:
                    f2:82:1a:c6:77:e3:8f:3d:5c:da:9b:68:81:b8:b3:
                    2f:c8:4e:5e:a3:f3:d0:57:83:06:95:f2:06:48:4f:
                    96:61:1c:c5:e3:60:b5:24:3f:fd:d1:1c:08:5f:5b:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9D:2A:CA:1E:62:D3:1E:DF:E9:4A:D7:F1:E5:4D:C7:13:2F:97:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f26d42ef-e88a-3b64-abd3-b0dbdd7971ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:1063:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:3f:5f:ef:d2:b2:bd:cf:4e:d7:99:01:9f:99:83:80:07:b6:
         bf:09:76:80:80:a4:05:99:ba:2e:a1:db:0d:06:aa:44:56:b4:
         b1:ce:e8:26:71:63:12:3c:04:cb:e1:45:7c:4b:f3:e2:a9:4f:
         78:10:c2:94:10:cf:bf:57:0a:a1:f3:9f:39:df:59:e0:1d:be:
         d2:0d:ba:ab:ed:a7:34:22:9c:7b:f4:4f:13:bb:c9:70:14:0c:
         a8:a6:5f:91:46:b3:e3:a7:f0:9e:e2:58:6f:32:7e:ab:12:56:
         c4:de:f3:22:de:65:d3:c4:41:3f:ce:7a:9e:df:45:0b:20:de:
         d1:ab:7e:e2:c9:e7:37:db:c1:70:fe:34:26:ae:5f:a3:ed:39:
         3e:c8:fc:22:a9:4d:4d:34:83:12:f7:d0:3e:e0:14:bc:44:0b:
         23:a9:23:43:bc:0f:84:b1:c0:9e:33:a7:d9:16:c8:82:7e:54:
         0e:03:d9:2e:68:b4:fc:29:4b:63:02:97:04:c8:cd:ae:d7:d6:
         7b:9a:f7:30:17:c1:4a:32:df:d8:1c:57:25:4c:d2:15:66:b3:
         c4:23:73:52:cf:42:38:bc:f3:b4:9b:a0:63:23:ef:63:4d:c5:
         25:5e:8d:9d:f7:b0:1a:48:7d:33:20:38:d5:f9:4b:1b:61:61:
         59:61:8b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:53:25 2025 by rpki-client