Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3e178bb-51b0-4deb-a471-908735d448be/9a6f09d9-aad3-3011-b496-da60a0922a0d.roa
File:                     9a6f09d9-aad3-3011-b496-da60a0922a0d.roa (raw, json)
Hash identifier:          697y6ajZJvzhxIZrNRQYf7jYotSVjp9J+kLmXqee/gA=
Subject key identifier:   5D:A9:23:65:BF:AA:59:29:EC:26:E6:78:81:F9:62:E2:52:1E:39:10
Certificate issuer:       /CN=b3e178bb-51b0-4deb-a471-908735d448be
Certificate serial:       010D0C9F4328584B76F22BD9BB0495D00D65BF00
Authority key identifier: 27:4C:CE:82:B6:C5:0C:A7:C0:6B:E4:24:75:1E:22:7F:C2:38:8B:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3e178bb-51b0-4deb-a471-908735d448be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3e178bb-51b0-4deb-a471-908735d448be/9a6f09d9-aad3-3011-b496-da60a0922a0d.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     16622
IP address blocks:        2602:fd54::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3e178bb-51b0-4deb-a471-908735d448be/b3e178bb-51b0-4deb-a471-908735d448be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3e178bb-51b0-4deb-a471-908735d448be/b3e178bb-51b0-4deb-a471-908735d448be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3e178bb-51b0-4deb-a471-908735d448be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:2b:d9:bb:04:95:d0:0d:65:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3e178bb-51b0-4deb-a471-908735d448be
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=33d840c2-3d94-450a-88d0-92d25de79eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:0c:0c:16:9e:dd:fb:92:0f:07:aa:a2:eb:
                    a2:d1:80:a6:79:13:f1:06:c1:ea:cf:50:69:e8:fb:
                    ee:ca:d8:26:de:c5:d7:8b:17:17:99:98:74:ec:90:
                    d5:cc:6f:df:40:44:ab:e3:33:a7:cc:b3:33:5c:5d:
                    fa:40:48:d8:a3:aa:48:84:88:24:a8:a3:e3:c8:03:
                    32:19:e0:43:c8:0b:bf:d0:95:c2:bf:41:28:00:e9:
                    b9:a8:ee:d2:5e:b9:7c:a1:36:59:6d:5d:63:5f:37:
                    8f:d9:4d:22:4c:b5:b1:12:39:81:78:c0:a7:a8:29:
                    5a:0f:ff:b8:c6:df:37:40:72:5f:8c:e6:4c:ac:f4:
                    54:06:74:34:2d:9f:c4:d4:4b:c0:94:47:39:32:c4:
                    83:4d:3f:61:93:b3:c0:1d:df:a9:b6:72:01:10:24:
                    5c:91:24:12:55:47:31:5d:87:32:0c:69:e8:31:28:
                    a6:88:eb:b0:b4:af:22:2a:9e:4c:05:fd:53:83:7b:
                    1d:0e:c1:df:9b:9f:b4:df:ea:5e:62:2e:9b:c2:5d:
                    02:30:90:1c:2b:4a:e4:c3:ba:74:c4:e6:6b:98:d0:
                    c4:54:48:1c:9b:4c:65:4a:5a:39:fb:4d:5d:02:dd:
                    0e:82:78:06:01:82:ed:d0:db:19:fa:f5:7e:0d:90:
                    e5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A9:23:65:BF:AA:59:29:EC:26:E6:78:81:F9:62:E2:52:1E:39:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3e178bb-51b0-4deb-a471-908735d448be/9a6f09d9-aad3-3011-b496-da60a0922a0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3e178bb-51b0-4deb-a471-908735d448be/b3e178bb-51b0-4deb-a471-908735d448be.crl

            X509v3 Authority Key Identifier:
                keyid:27:4C:CE:82:B6:C5:0C:A7:C0:6B:E4:24:75:1E:22:7F:C2:38:8B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b3e178bb-51b0-4deb-a471-908735d448be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ff:4d:32:d6:8e:b2:b3:39:5c:ec:01:8a:82:03:b8:f6:53:
         4b:2f:7a:b5:8f:ec:a8:52:fd:06:5a:2e:b8:ea:bf:31:98:b2:
         25:95:79:15:33:51:92:2a:48:7c:cc:cf:87:6b:8c:ba:cc:f0:
         c1:c4:3f:96:c1:70:6b:a2:ef:c1:4a:e9:f8:98:dc:e5:4b:6c:
         ec:ad:8c:6e:bc:03:66:6e:f3:5e:07:f4:83:15:89:9f:41:dc:
         f7:0a:79:4e:5f:0a:10:2c:80:6f:12:4b:c3:a5:b1:63:4b:28:
         a7:ac:75:4e:0a:b2:35:b3:17:3b:f0:75:59:cc:6d:b7:9d:26:
         4d:1b:f2:ca:47:e4:f2:6b:d7:83:2b:ef:c5:ba:3d:81:e9:c5:
         7a:78:e2:45:45:96:ec:7e:85:c6:21:2b:e5:d1:3b:45:54:0e:
         6d:c2:d7:ba:03:4c:b7:01:f9:db:a2:ca:89:8d:c0:22:52:89:
         0c:c8:5d:08:80:c6:71:ef:f8:ad:92:d1:d1:4e:55:c8:e5:36:
         b7:2e:45:a0:94:90:17:86:50:e6:e1:61:eb:6d:92:40:eb:28:
         7d:61:e5:f3:fd:73:3d:02:69:83:ed:f0:62:82:99:ec:66:43:
         f6:42:b9:d5:b7:e2:dc:34:50:08:f9:10:6b:14:bb:ed:50:fe:
         ab:2c:4c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:03:47 2025 by rpki-client