Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/82d516a2-f48c-3a90-90f1-f4d5b914f9a3.roa
File:                     82d516a2-f48c-3a90-90f1-f4d5b914f9a3.roa (raw, json)
Hash identifier:          RbIEfg58/El8Sqig6uB9qkvutnr08AL6bCSBu6kiUXE=
Subject key identifier:   F6:11:CB:24:B5:0D:ED:F9:4A:16:2C:6F:29:B0:79:EC:EC:9D:4C:52
Certificate issuer:       /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e
Certificate serial:       010D0C9F4328584B821CBA4154685DF741359940
Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/82d516a2-f48c-3a90-90f1-f4d5b914f9a3.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     400446
IP address blocks:        2602:fbbb::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:ba:41:54:68:5d:f7:41:35:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=2973014e-6f8e-4860-9b93-b7ddc9062df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:08:a0:2b:c8:47:d9:7d:58:15:f0:dc:94:fa:
                    31:df:a7:82:ec:d3:22:df:c4:4f:13:63:6e:69:5b:
                    21:7d:c6:19:fa:25:77:c9:36:a4:9a:5d:12:11:ee:
                    c7:f1:93:0e:53:d0:25:16:42:d0:5d:5e:78:a1:24:
                    91:5e:9c:0c:dd:b6:f6:56:dd:5c:7e:59:7d:c6:6d:
                    ad:07:9d:7b:6b:b8:ae:27:f6:29:33:df:24:ba:f7:
                    47:6d:40:ff:f8:6c:a2:7a:65:93:bf:8d:9c:eb:a8:
                    c4:98:6b:ea:a6:1b:90:01:da:7a:e8:10:24:b0:09:
                    93:1a:17:5b:41:f5:b8:58:4b:b1:a8:82:ef:f2:73:
                    ae:63:fe:3c:37:db:16:2f:3f:c7:a4:39:0c:8a:94:
                    66:30:e0:68:cf:6b:24:22:99:68:de:a8:9f:73:c9:
                    3c:ad:86:26:e1:9d:90:20:1e:9c:50:de:73:e5:d9:
                    e9:d2:cd:61:e7:de:74:0d:f6:bb:45:0b:69:07:e3:
                    36:b2:a5:60:d9:90:33:38:fc:0e:7a:cd:f5:4d:36:
                    23:a5:ef:37:28:48:d1:56:71:75:40:09:e8:bd:24:
                    3f:09:2d:df:66:10:25:ca:84:af:ef:8e:e9:6e:60:
                    19:68:65:6b:ba:a5:44:6a:a1:68:8b:75:01:2b:df:
                    7c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:11:CB:24:B5:0D:ED:F9:4A:16:2C:6F:29:B0:79:EC:EC:9D:4C:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/82d516a2-f48c-3a90-90f1-f4d5b914f9a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbbb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:b7:72:67:35:61:c6:17:f2:03:a1:43:f4:ab:08:5f:2f:3b:
         48:51:57:e3:a4:00:34:c5:ad:f9:df:bc:0a:d1:f1:3b:0a:10:
         27:ac:48:c6:54:a9:68:10:76:c6:74:e5:26:e8:48:2e:5d:b9:
         22:a9:2f:5d:3e:27:b0:cb:41:15:90:21:a6:8d:64:c1:ca:67:
         ea:fb:bb:70:0a:22:8e:f0:9c:4f:f5:d0:36:0a:d8:bd:d8:ad:
         a1:57:6a:c7:24:c1:12:79:96:f1:c0:00:75:eb:a9:6f:20:b5:
         9c:65:65:de:4e:33:f2:26:ed:22:bf:cb:35:fc:21:21:11:13:
         b7:29:58:fe:fc:3c:74:e9:dc:9f:4a:87:29:b1:44:4f:ba:dd:
         18:c0:1e:fb:51:c0:10:97:f7:1a:94:89:6c:f1:4d:34:f8:f6:
         7f:cf:73:0b:33:57:30:03:5e:09:89:3b:10:81:23:c6:e6:80:
         69:df:e4:b1:13:c4:c5:03:9d:c0:9c:63:e9:43:88:da:6b:58:
         5c:bd:2a:17:d9:e0:b6:66:c4:af:79:43:25:38:24:88:27:13:
         32:1c:7d:ac:43:57:46:8f:ee:2c:ae:77:8f:ce:01:3c:8c:37:
         e2:31:3c:b5:c8:90:a6:b2:9a:83:fe:c6:7c:15:8f:df:53:38:
         71:aa:2b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:51 2025 by rpki-client