Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/59990428-91ee-3746-8405-ef5d22c38294.roa
File:                     59990428-91ee-3746-8405-ef5d22c38294.roa (raw, json)
Hash identifier:          AwimTsLWBYMGDt98BaTdVf9jaJtU0z/ivijFYxgK8YA=
Subject key identifier:   05:5B:C6:EA:DF:D1:81:95:8E:27:71:53:B8:7B:D9:81:5F:39:BA:6D
Certificate issuer:       /CN=f38c7ca4-3a41-4134-a127-81dc140bc7a9
Certificate serial:       010D0C9F4328584B2A2C4DDABA87E9209E933000
Authority key identifier: A1:C7:DC:2F:90:15:06:83:C0:3C:7C:5B:68:80:3E:8C:18:56:1C:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/59990428-91ee-3746-8405-ef5d22c38294.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     30201
IP address blocks:        2602:fcb5::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:4d:da:ba:87:e9:20:9e:93:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f38c7ca4-3a41-4134-a127-81dc140bc7a9
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=63a09c67-c30f-4a82-bc9d-521321c8b061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e7:91:f1:b6:4a:d0:a1:95:56:5f:76:53:a7:
                    f2:05:70:3e:7b:a3:5e:10:9d:cc:a6:2e:5d:36:28:
                    c1:d5:aa:cf:c7:af:54:08:c0:e6:dc:8b:04:37:d2:
                    03:89:aa:88:3f:ac:74:f1:3e:75:fb:c6:7d:ba:9b:
                    40:29:25:69:c4:d1:9b:54:7b:a4:78:b6:66:e0:68:
                    98:58:ae:81:39:1c:44:9b:e2:36:67:5c:9d:92:66:
                    56:70:2c:79:76:c3:29:4c:09:8c:7e:76:72:0b:f8:
                    cb:61:fa:78:9f:cc:ac:5e:f5:30:69:08:50:68:d8:
                    1c:91:e3:ad:f3:39:4e:be:bc:2c:eb:a3:3c:19:c9:
                    4a:dd:43:38:32:6d:e4:a2:3a:d0:8f:84:d4:84:f0:
                    72:cc:9e:55:55:87:8f:b4:86:db:71:97:66:83:e1:
                    8b:cf:09:8b:5b:9e:3f:ca:c5:ad:0a:b2:96:f5:29:
                    97:7f:58:6a:81:7b:06:68:b4:ab:1f:b1:94:22:ec:
                    30:13:0f:f6:88:cc:ea:c7:95:28:c6:56:8c:35:7f:
                    96:29:33:8f:e6:7e:92:4a:df:93:3b:9f:61:24:85:
                    97:07:66:6f:4b:e0:58:56:fe:70:f3:c3:4e:6d:dd:
                    95:cf:87:ed:fe:16:72:c8:e7:d6:b6:bf:f4:a2:f5:
                    fd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5B:C6:EA:DF:D1:81:95:8E:27:71:53:B8:7B:D9:81:5F:39:BA:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/59990428-91ee-3746-8405-ef5d22c38294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9/f38c7ca4-3a41-4134-a127-81dc140bc7a9.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C7:DC:2F:90:15:06:83:C0:3C:7C:5B:68:80:3E:8C:18:56:1C:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f38c7ca4-3a41-4134-a127-81dc140bc7a9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcb5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:79:ec:79:87:12:66:3a:eb:77:83:29:b5:6d:a8:de:ad:d1:
         e6:95:03:bc:29:8a:e2:91:be:50:1f:67:4b:92:c1:a7:ce:55:
         40:98:4f:25:41:34:11:1d:bf:47:9b:35:7e:5d:b1:55:e7:06:
         33:58:50:ef:ad:92:3c:04:70:8d:50:5f:1e:9f:73:7a:08:4b:
         b0:b2:52:30:d0:0b:be:8a:16:64:62:38:1a:36:c9:77:f0:5f:
         0b:72:ff:e7:f7:29:ec:c2:ab:f4:c6:f9:dd:0f:96:a8:ca:d7:
         a2:93:d1:08:93:53:aa:6d:7a:73:0c:ba:2c:6f:31:e2:5c:b9:
         e4:f5:0d:66:8c:ac:10:07:f4:a5:94:90:35:f4:63:32:50:b1:
         68:2c:31:3d:bb:88:b7:2f:0d:dc:9b:4f:11:d5:e6:e7:b7:5c:
         cf:5e:c4:ee:2f:2e:84:48:99:cb:49:1c:01:ac:57:79:14:50:
         79:3e:f9:8c:62:dd:46:7e:37:73:d8:04:71:ca:bf:ca:8f:93:
         ac:ef:0f:76:45:8f:72:9e:4a:6d:0f:6a:a2:c2:8b:be:f8:ab:
         fb:77:05:a6:47:cd:9b:58:62:74:11:5d:41:f1:df:0c:85:b1:
         ce:49:fb:97:b2:44:89:45:51:1c:82:06:b1:e3:8d:f7:6f:0a:
         96:38:7c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:27:27 2025 by rpki-client