Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/e14ddba0-1ef9-3c17-a440-bb43830ccca1.roa
File:                     e14ddba0-1ef9-3c17-a440-bb43830ccca1.roa (raw, json)
Hash identifier:          y1Gh4LsyWZlv/Sx+dWf0Tq+Rzeu5KqRmrqJPUojIIG8=
Subject key identifier:   9F:3E:28:14:3D:66:4C:AA:53:3A:4B:1A:C7:68:7D:96:D1:A1:0F:9E
Certificate issuer:       /CN=0a846bda-a477-4fe0-8f13-997253568b7e
Certificate serial:       010D0C9F4328584AFE09DAF338DB7C266D33F440
Authority key identifier: DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/e14ddba0-1ef9-3c17-a440-bb43830ccca1.roa
Signing time:             Wed 27 Aug 2025 05:35:56 +0000
ROA not before:           Wed 27 Aug 2025 05:35:56 +0000
ROA not after:            Tue 25 Nov 2025 06:35:56 +0000
asID:                     55201
IP address blocks:        2602:fb37::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:09:da:f3:38:db:7c:26:6d:33:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a846bda-a477-4fe0-8f13-997253568b7e
        Validity
            Not Before: Aug 27 05:35:56 2025 GMT
            Not After : Nov 25 06:35:56 2025 GMT
        Subject: CN=f2abcfb3-17a7-4767-b37c-d9c30bcf4feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:61:b5:8c:c5:e7:8b:4b:64:5f:26:a4:c6:c1:
                    9e:b6:cd:0e:10:46:e3:34:b4:d8:7a:b1:09:1f:17:
                    f6:ca:65:e6:04:c2:95:a1:9a:32:66:20:bb:84:17:
                    97:8d:64:c9:0a:b9:54:d4:dc:f3:9b:d4:4b:32:72:
                    fb:63:df:34:0d:aa:22:f9:23:78:58:97:a1:1d:c2:
                    e7:3d:61:fe:87:8b:f4:53:d8:38:f2:d9:4f:db:28:
                    f4:ea:d2:65:41:9e:62:41:8e:13:b1:9e:e3:da:42:
                    11:05:b6:af:d5:1f:12:8a:d3:85:d6:81:4f:79:6c:
                    44:b2:32:03:12:2e:c8:30:8e:99:5f:af:12:66:14:
                    9d:0b:8f:95:e3:62:d2:fe:81:af:36:75:91:02:74:
                    8a:95:11:71:d2:37:37:c7:4e:78:6a:08:5f:a0:16:
                    95:6a:fa:84:d2:22:63:c6:f3:44:6b:cc:8c:97:0b:
                    f8:e1:d5:3f:44:1e:8c:29:97:3b:95:32:6b:fa:2e:
                    d3:15:a8:61:3a:ff:32:a4:4a:2c:7a:6f:9e:d4:32:
                    34:1d:96:64:50:97:a9:1d:f4:1d:12:74:44:dd:bd:
                    63:e0:6e:a7:b3:13:d9:8e:bf:2f:45:64:b8:09:b8:
                    ee:d5:4b:1d:42:26:dd:98:87:65:06:80:14:57:a0:
                    d4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3E:28:14:3D:66:4C:AA:53:3A:4B:1A:C7:68:7D:96:D1:A1:0F:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/e14ddba0-1ef9-3c17-a440-bb43830ccca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb37::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:07:6c:83:01:91:e3:b5:7b:76:9e:c1:ad:91:2c:5f:d6:3a:
         62:d2:ce:65:b3:c9:75:21:6c:ca:88:60:57:41:a1:aa:39:34:
         86:ec:62:5f:13:6b:85:7d:03:0a:a5:04:31:1c:76:0e:96:8a:
         6d:96:e6:2a:9b:eb:99:cd:ed:c5:f0:9a:d6:d3:e1:3e:f1:f2:
         ec:e1:c6:07:c6:8f:fd:52:54:17:6f:85:83:72:c4:57:64:0e:
         3d:67:80:4e:74:43:02:88:2d:99:8f:fc:62:80:c0:4a:5d:98:
         61:06:e3:49:ac:0a:0a:02:16:bc:a3:83:9a:87:79:f9:fe:a3:
         54:a5:da:76:e9:a9:02:7e:6f:50:88:0a:ce:a0:e2:fe:72:64:
         55:a9:12:38:68:76:63:fb:f1:51:d1:6d:19:97:1f:e8:be:1e:
         da:9a:4a:70:d9:85:9f:05:2b:14:2b:4e:65:cc:a7:91:8a:82:
         9b:bf:1a:05:ab:5e:11:0c:9e:6b:73:6e:5b:ee:50:31:51:62:
         96:c1:c1:4f:18:45:b0:bc:7d:23:49:e8:88:96:b6:3e:4f:c7:
         49:37:32:b6:59:3c:0d:5e:f6:ae:78:f9:8a:73:2f:4a:d5:f2:
         58:f8:a5:93:9f:44:d8:df:fe:9d:99:61:00:e3:87:8f:f5:12:
         f3:a7:f6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:55:26 2025 by rpki-client