Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233/eea2a2a3-3118-31d4-8662-c52d1d5e520e.roa
File:                     eea2a2a3-3118-31d4-8662-c52d1d5e520e.roa (raw, json)
Hash identifier:          r1BmLBup3RpZ6jsFlnEnnkCfYCOiK+3BJK5b88UXdag=
Subject key identifier:   DE:8F:AD:FD:05:87:C4:9B:A2:6E:1E:79:31:9B:01:5E:BA:24:E1:73
Certificate issuer:       /CN=6e06ea72-258e-41f1-b216-af309f471233
Certificate serial:       010D0C9F4328584B87B63CD7AB6E70788B698B80
Authority key identifier: B8:55:DA:F1:60:3E:8F:4D:17:5A:B2:71:D0:18:D6:F7:3A:DD:63:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233/eea2a2a3-3118-31d4-8662-c52d1d5e520e.roa
Signing time:             Wed 15 Oct 2025 13:09:01 +0000
ROA not before:           Wed 15 Oct 2025 13:09:01 +0000
ROA not after:            Tue 13 Jan 2026 14:09:01 +0000
asID:                     1405
IP address blocks:        2602:f594::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233/6e06ea72-258e-41f1-b216-af309f471233.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233/6e06ea72-258e-41f1-b216-af309f471233.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b6:3c:d7:ab:6e:70:78:8b:69:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e06ea72-258e-41f1-b216-af309f471233
        Validity
            Not Before: Oct 15 13:09:01 2025 GMT
            Not After : Jan 13 14:09:01 2026 GMT
        Subject: CN=59bf5240-47d1-4a56-af74-d704a9dc40f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:08:e9:ca:b2:16:12:45:f8:1e:a1:23:29:
                    75:fb:55:e4:ea:39:93:95:c4:90:9a:2c:87:44:a9:
                    93:78:05:f9:98:60:86:e2:a7:0c:4f:a4:dc:7c:7d:
                    f8:eb:17:ae:f9:0b:0d:e8:a6:2f:24:d8:f0:e3:5e:
                    03:55:9d:fa:7e:7b:26:8e:cf:f7:bd:6f:f4:84:48:
                    89:fb:93:8f:a2:1b:0b:e4:95:ba:a5:a8:55:50:e5:
                    a9:14:68:53:f9:a4:ec:81:24:39:4b:91:be:fc:41:
                    f9:c4:53:d9:63:a7:1c:f4:98:2f:5a:df:cc:34:7a:
                    74:a8:56:b4:cf:6e:81:99:25:29:d4:c7:2f:0c:2e:
                    df:9b:07:c5:05:de:4b:69:57:4f:bf:65:11:db:be:
                    4e:3b:25:56:13:24:89:30:f5:04:f1:ac:31:51:31:
                    6a:e3:25:cc:eb:58:f9:7b:0c:59:ad:61:98:3d:4a:
                    57:4e:96:18:bc:6e:db:08:9d:fa:41:94:76:8b:fb:
                    d2:ea:36:3e:ce:36:6c:4c:d0:6c:2b:1b:64:a1:a6:
                    13:de:e5:27:c4:e1:e6:63:48:7a:cf:07:96:90:a5:
                    9a:9f:6d:e5:50:f5:fe:01:a5:8d:b0:2c:97:f5:78:
                    e0:4f:c8:49:20:46:b5:41:0e:ad:5b:3a:91:7d:3c:
                    75:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8F:AD:FD:05:87:C4:9B:A2:6E:1E:79:31:9B:01:5E:BA:24:E1:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233/eea2a2a3-3118-31d4-8662-c52d1d5e520e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233/6e06ea72-258e-41f1-b216-af309f471233.crl

            X509v3 Authority Key Identifier:
                keyid:B8:55:DA:F1:60:3E:8F:4D:17:5A:B2:71:D0:18:D6:F7:3A:DD:63:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6e06ea72-258e-41f1-b216-af309f471233.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f594::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:77:20:38:34:00:b3:92:6e:e3:42:46:f6:2f:4b:95:bb:76:
         5a:1a:a5:5f:c7:91:88:74:f7:be:b1:8b:79:4e:3c:f6:96:1a:
         97:05:6c:d9:c2:f7:03:64:c6:56:47:7a:fb:ce:fa:1d:cb:5c:
         a3:72:de:0e:61:e5:86:ec:70:5f:94:65:e7:01:f6:13:d2:0b:
         69:41:23:d9:e7:cb:43:16:82:4a:58:e5:a5:25:3c:53:19:94:
         67:f8:f0:e4:d7:be:42:50:47:cf:65:2a:15:0e:29:49:fa:0e:
         42:a6:f4:16:9b:20:7e:10:87:e3:3c:94:b2:c5:b8:6c:61:66:
         8d:bf:65:07:aa:c6:4d:ca:f3:aa:9f:84:3b:58:b1:29:78:3e:
         72:98:d2:50:cf:69:eb:dd:1f:9a:07:e9:3a:e8:79:de:49:5d:
         96:10:3c:a0:5c:99:ec:ad:07:47:e4:83:f6:5d:a5:ea:5a:db:
         53:84:d3:c7:2c:67:b4:1d:14:6b:9a:fb:b2:a8:a3:c5:8e:11:
         24:ea:87:fc:27:31:1f:73:29:7b:97:0b:5e:e8:90:05:dc:6f:
         c3:ba:23:fc:24:19:c1:11:16:78:70:fa:42:f0:8d:ad:3b:82:
         44:91:e0:64:d6:18:df:d5:a0:1c:fa:a6:e7:e6:d5:33:b7:02:
         01:4b:e8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:07:57 2025 by rpki-client