Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa
File:                     b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa (raw, json)
Hash identifier:          otIlePV8mbqT3TIAYdpzjNpDcl5URyoMpTFdzmtKvUo=
Subject key identifier:   49:10:79:00:85:17:22:78:10:CA:16:A1:1E:FF:98:39:35:97:6A:6A
Certificate issuer:       /CN=e97da778-a1f6-4dad-9d0a-d3a070010373
Certificate serial:       010D0C9F4328584B64CC9FBDBA39100043F6E680
Authority key identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     21538
IP address blocks:        2602:fc30:a4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:9f:bd:ba:39:10:00:43:f6:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97da778-a1f6-4dad-9d0a-d3a070010373
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=9ebb415a-056e-449a-a35f-ad4dcac36080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:44:cd:fd:f7:62:95:7e:f5:d9:e2:0d:ba:62:
                    86:bd:e8:b3:4e:82:15:da:0e:54:1f:18:eb:c9:a5:
                    17:63:52:f0:42:71:85:ed:5d:39:60:ed:67:e7:bc:
                    7b:77:ed:3e:6e:b7:45:67:8f:45:ee:0f:06:7d:72:
                    e6:d0:ed:f4:e2:23:fc:b0:82:19:a3:36:e9:4b:31:
                    e5:5e:43:15:c4:d2:e4:07:51:f7:2a:74:2b:f2:23:
                    db:8a:f9:10:af:dc:09:a7:c5:9e:40:53:30:1c:5e:
                    1e:42:61:b4:8b:fa:eb:32:e3:2b:c2:3d:5d:e7:fa:
                    da:39:77:4e:33:b1:f8:07:65:90:f7:c8:4f:30:a2:
                    15:86:44:86:7f:35:e1:4a:e5:5c:a8:8d:ff:a4:79:
                    c5:fc:3f:3b:51:06:42:70:16:b0:03:54:52:35:cc:
                    9e:5f:09:64:0b:37:42:b8:b9:d9:61:3e:5e:af:e2:
                    47:73:c6:7d:c8:bd:eb:87:bf:bb:e7:29:ea:90:fc:
                    5e:0d:93:34:41:1d:b6:a6:f8:e4:48:5d:e2:30:68:
                    e1:46:9c:c0:84:95:c8:de:f8:7e:3a:0d:54:48:e5:
                    c3:65:df:d4:86:46:f0:c6:2e:f5:46:7f:87:04:4e:
                    86:8e:9a:f5:87:44:a4:6e:91:2f:18:9c:e2:a3:03:
                    e1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:10:79:00:85:17:22:78:10:CA:16:A1:1E:FF:98:39:35:97:6A:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl

            X509v3 Authority Key Identifier:
                keyid:32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc30:a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:6b:91:20:e2:67:b0:2e:52:84:d8:84:20:4d:2d:9e:c7:1e:
         75:f7:fd:dc:de:97:47:98:fd:08:e4:5d:38:d4:65:50:c9:0a:
         df:a3:05:07:fc:23:d6:54:ed:3f:90:a4:b2:ef:fb:cf:e5:26:
         a9:4b:18:53:77:70:7f:ab:56:81:6e:3d:a1:ae:b0:e4:18:83:
         5a:e8:01:a4:78:e1:cf:38:c2:da:8c:9e:cd:9f:7c:10:8b:f0:
         0e:a8:78:f0:17:77:7b:e8:32:3c:9d:38:36:e0:fd:78:6f:ab:
         a3:32:4a:a3:0d:10:50:07:81:42:db:df:47:00:1f:3d:76:9a:
         1a:ab:3e:3a:5e:16:8b:a7:f7:a1:6f:11:57:b1:38:df:61:06:
         fb:a3:71:ee:82:e3:ec:4a:10:3c:8c:c0:5d:33:a4:84:11:c3:
         e7:07:c3:b1:1f:25:30:22:ec:70:c6:44:75:29:f4:06:90:73:
         18:66:06:52:a2:76:23:cb:ed:91:7b:8c:5b:e3:64:c4:e3:7d:
         a2:77:fd:dd:29:77:77:e7:9d:80:7d:bd:ec:9c:51:97:bc:11:
         7c:21:7f:f0:34:11:5b:96:e0:dd:89:01:8d:74:c4:a7:74:a1:
         25:bd:83:03:b0:a2:a1:13:52:7c:65:ab:2d:9c:a4:eb:dc:9e:
         e1:81:68:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:23:25 2025 by rpki-client