Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/91a1f677-3c17-320d-920c-7a6755bcf4dd.roa
File:                     91a1f677-3c17-320d-920c-7a6755bcf4dd.roa (raw, json)
Hash identifier:          ZmqLobfRslCo3NszYE2cbJ9ZbbDyG8Dv3vB/TL/hVtE=
Subject key identifier:   2B:AA:F7:5B:C1:62:0D:94:21:5C:50:9B:50:3D:BE:81:40:A8:80:0B
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F4328584B89175FBB1AEA5ED0917FCA00
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/91a1f677-3c17-320d-920c-7a6755bcf4dd.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     62707
IP address blocks:        2602:fe12::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:5f:bb:1a:ea:5e:d0:91:7f:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=a1183068-b0f5-4fae-af5f-c1bb72f0e9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7c:55:1a:7f:22:c2:a2:ba:9b:ec:25:d0:eb:
                    0b:d8:06:fe:4c:3f:7f:bc:dc:5e:c8:47:2a:08:f9:
                    ab:17:87:9e:28:d8:e2:7f:76:b5:5e:0c:42:85:de:
                    12:2a:49:90:ef:28:27:10:8f:c4:ce:e7:88:cd:37:
                    27:58:cf:35:03:b8:bc:26:30:93:80:fe:7f:71:c7:
                    a0:7f:d0:de:25:84:0e:10:8a:fd:6c:98:6b:be:4e:
                    75:9a:bc:11:38:e6:71:ac:cd:fc:cd:3c:a0:82:1c:
                    56:7f:80:b2:b4:a2:b7:73:53:fc:f1:5f:e2:97:ac:
                    4f:39:8a:d0:ca:4c:77:2d:9f:93:0e:0a:9e:ff:a2:
                    b3:de:2c:d4:2e:4e:24:a5:f7:ab:32:fe:2f:4d:11:
                    80:48:4e:a2:d3:6e:d6:16:b6:39:7b:42:ff:fc:99:
                    25:6d:01:1b:d2:b7:8c:0a:2d:dc:7d:91:22:d1:6e:
                    d1:0f:18:e8:1f:97:31:cd:86:30:5f:e9:a2:4e:93:
                    f2:27:69:a2:11:c3:a1:6b:83:da:d9:63:25:fb:f2:
                    b9:9c:b3:19:d2:33:39:aa:43:83:82:70:5f:1a:bd:
                    00:da:22:82:3d:2a:3d:56:7b:d3:9d:02:66:6d:ae:
                    c8:e9:9e:92:7b:c5:62:7c:4e:c9:40:96:7a:78:77:
                    5b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AA:F7:5B:C1:62:0D:94:21:5C:50:9B:50:3D:BE:81:40:A8:80:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/91a1f677-3c17-320d-920c-7a6755bcf4dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe12::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:9b:cd:88:52:18:a1:6f:60:22:4c:6f:53:a1:6e:d7:53:e0:
         bb:05:30:b1:e9:8f:ad:70:5c:97:98:66:6a:f1:81:63:4a:d0:
         1a:95:33:09:b3:e6:2f:d6:59:94:b0:ea:c5:1b:bd:dc:66:0f:
         cf:ee:d3:ad:c9:90:ca:c3:a3:9b:eb:4d:80:01:50:8d:4d:e8:
         35:d2:03:87:2f:d5:d1:98:85:9e:13:5f:8f:de:e3:83:0b:66:
         78:e5:86:e6:f1:65:72:f2:d2:82:bf:fd:90:4e:94:a2:a4:49:
         71:59:2c:85:a6:c9:b6:9d:03:c4:c3:c7:6c:79:6d:86:85:1e:
         79:b1:c1:92:c8:54:c2:10:42:2f:27:59:dd:53:c9:ef:30:41:
         60:4e:04:ea:eb:d2:48:2d:31:59:a7:5d:56:c9:de:22:68:3d:
         37:7b:3e:19:62:bb:3a:2c:a0:ca:da:43:6f:25:39:28:8e:a3:
         a7:d2:d6:48:3d:a5:f2:d6:f2:45:37:77:10:13:ac:44:17:1b:
         a3:03:05:6e:2e:db:69:05:0d:57:7e:4d:61:ba:20:6a:12:30:
         72:0c:e4:9b:2f:66:eb:c5:c1:aa:85:ac:fa:3e:e8:bb:7d:27:
         57:c0:37:18:c8:13:21:6d:a9:ba:25:99:4c:f1:31:4f:aa:9f:
         e1:a3:04:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:23:34 2025 by rpki-client