Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/fc5b7c2b-5172-3f4d-b5d3-31f1b086c282.roa
File:                     fc5b7c2b-5172-3f4d-b5d3-31f1b086c282.roa (raw, json)
Hash identifier:          YJZfZsF1UMAxunp3gvjEpXa8RTj7ZLJcZP63yUgM6hs=
Subject key identifier:   11:12:34:A6:A2:7D:63:1E:2B:E0:3E:0E:F2:5E:2A:19:6B:C9:84:84
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F4328584B80B764BAD6E81925912F1340
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/fc5b7c2b-5172-3f4d-b5d3-31f1b086c282.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     53334
IP address blocks:        2606:3380::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:64:ba:d6:e8:19:25:91:2f:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=4ebeff54-bf08-43ef-a440-28308f69ff6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:aa:93:d0:60:54:69:bb:40:4e:5d:4a:74:83:
                    67:ae:0b:ad:7d:2c:ff:ec:53:3a:9c:47:5e:cd:6e:
                    5d:6f:ec:7b:23:2e:42:95:74:fe:03:85:b3:65:89:
                    d6:ae:f1:f8:b3:70:6c:b9:68:1c:37:dd:62:a4:62:
                    e2:b8:a0:42:b7:57:43:a2:d9:cb:cd:2c:1d:c4:e9:
                    51:96:dc:9c:76:56:9b:32:60:cd:e7:30:d5:24:77:
                    b9:92:0c:16:06:b5:de:50:63:0d:49:1e:c2:a7:40:
                    44:1f:5c:70:86:d6:fc:de:ec:8e:c2:9a:e3:d6:d2:
                    6e:9a:85:33:e6:c7:f6:ea:d0:90:ef:a0:18:d4:0f:
                    1a:55:19:3f:c8:02:71:d4:fc:7e:65:b4:1e:b4:3e:
                    46:f9:da:1a:f6:2e:78:2e:f9:83:87:41:55:03:76:
                    6d:bc:3c:8f:5c:79:73:79:e7:97:06:2e:77:f2:c7:
                    4a:56:fd:d4:58:d7:69:fb:6e:0f:1b:93:e8:28:53:
                    eb:07:bc:2a:99:98:28:be:4c:1f:28:1c:6a:bc:33:
                    e7:c4:73:d3:df:58:99:7e:e6:57:87:61:14:85:eb:
                    f2:d4:25:d9:af:63:71:46:39:9f:2e:dd:4f:4c:73:
                    07:3b:c0:2d:ec:68:2f:65:9c:f0:25:8b:05:8c:37:
                    2c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:12:34:A6:A2:7D:63:1E:2B:E0:3E:0E:F2:5E:2A:19:6B:C9:84:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/fc5b7c2b-5172-3f4d-b5d3-31f1b086c282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3380::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:1c:15:47:c0:2c:58:ca:eb:2d:ff:4c:2f:cb:24:a6:38:1f:
         bd:1f:12:4f:b0:84:5f:b2:75:dd:2e:7f:43:6d:c4:fc:6e:30:
         03:ce:9d:81:34:97:e9:ef:2d:72:0a:eb:a6:83:15:83:a7:c6:
         7d:74:bb:8f:62:f2:70:ff:33:c8:b6:2c:8b:54:35:ad:7d:c7:
         c0:fd:9e:f0:2b:a9:9c:f7:18:72:08:47:75:78:e1:74:46:4d:
         18:f4:51:98:11:2f:11:48:b0:1f:71:dc:9f:ed:44:6b:c8:5b:
         e0:21:ef:a2:11:37:9d:59:50:2d:30:4d:6c:e2:fb:96:9f:40:
         76:64:8f:50:df:b9:98:a6:29:62:98:64:71:41:fd:db:2c:87:
         87:ac:e1:09:b0:51:35:de:12:83:e8:9d:43:82:d6:9f:59:9b:
         6e:72:49:72:1f:ff:12:9c:27:a8:5a:49:13:4e:74:be:fd:a2:
         d8:bc:7f:8d:26:e2:7a:4e:68:d8:cf:aa:14:36:62:14:4c:cd:
         91:b2:55:0e:fa:4e:12:2a:16:11:d8:79:33:61:7c:e4:d5:69:
         a5:b0:87:2d:6b:2f:3e:24:de:63:41:75:0d:e8:e8:20:fd:1c:
         be:86:28:f7:d8:4e:b0:21:26:40:89:01:df:3c:a2:91:fc:d7:
         3f:f8:08:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:20:54 2025 by rpki-client