Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa
File:                     7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa (raw, json)
Hash identifier:          2zHOEzIx3g3wLrachvzhLA7yimFCkK0M0foac770Wh8=
Subject key identifier:   23:7B:32:C6:46:09:64:99:BF:31:B8:60:6C:BC:67:55:84:43:46:BC
Certificate issuer:       /CN=1e6442ce-ff1f-4b6b-94e3-36479d01ca52
Certificate serial:       010D0C9F4328584B68FC98B7A1D08E495BD775C0
Authority key identifier: 0F:AF:2B:40:4F:E9:6D:EC:01:0D:03:8E:62:19:6C:36:84:75:98:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa
Signing time:             Sat 04 Oct 2025 13:00:40 +0000
ROA not before:           Sat 04 Oct 2025 13:00:40 +0000
ROA not after:            Fri 02 Jan 2026 14:00:40 +0000
asID:                     14217
IP address blocks:        2602:f96f::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:68:fc:98:b7:a1:d0:8e:49:5b:d7:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e6442ce-ff1f-4b6b-94e3-36479d01ca52
        Validity
            Not Before: Oct  4 13:00:40 2025 GMT
            Not After : Jan  2 14:00:40 2026 GMT
        Subject: CN=701d8e8d-52f7-4b90-91e2-07f211f76208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:54:11:05:e4:90:c1:84:53:45:23:1e:09:30:
                    e8:a6:47:31:a7:7e:b7:0d:2f:05:d5:80:1d:b6:34:
                    14:0c:a4:8c:c9:a1:27:80:b9:ab:50:ae:ff:e8:77:
                    f9:9c:6b:98:67:b6:21:be:6e:f5:2b:e0:af:9d:fb:
                    57:2a:b2:e1:c9:1a:77:63:c7:f9:c5:1d:ec:ba:73:
                    7b:f3:1d:4c:1c:35:15:d9:4e:a3:d9:7a:4a:7e:21:
                    ef:36:c5:2e:52:f2:04:13:90:42:9d:3f:a7:de:13:
                    48:a8:a2:bf:52:7c:ce:ef:dd:7e:8b:ff:4a:2b:23:
                    77:f7:03:67:45:1d:2c:d6:ca:d7:04:e2:0e:51:d0:
                    b4:4f:bf:9e:85:80:50:fc:fb:a8:dd:5c:22:9b:7d:
                    59:7e:e8:60:5a:02:4c:11:65:b3:ba:06:59:0a:0d:
                    e5:07:12:2d:d8:0e:03:58:1f:93:93:28:b6:75:2b:
                    b4:76:67:15:0e:55:b8:8f:b8:b3:ed:9e:89:f9:ea:
                    bc:c8:94:27:b7:d5:07:95:3b:75:f9:f6:c6:c4:f7:
                    6e:b6:e1:6a:6c:00:a4:e3:7e:eb:d2:a3:cd:ee:81:
                    fe:3f:5c:54:10:c1:7f:62:11:21:c0:57:d2:23:4f:
                    53:3d:3c:e2:4f:7d:d3:7a:af:6c:71:f0:76:13:2c:
                    79:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7B:32:C6:46:09:64:99:BF:31:B8:60:6C:BC:67:55:84:43:46:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AF:2B:40:4F:E9:6D:EC:01:0D:03:8E:62:19:6C:36:84:75:98:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:9a:c3:8a:95:ea:8e:b3:ff:ff:5b:b3:43:cf:4e:ae:7e:9f:
         dc:0a:2a:3c:89:f0:47:3f:38:d0:68:ac:60:9b:ca:f3:f1:8c:
         07:7f:62:df:3a:3e:dc:a2:e2:71:a2:e9:3c:b5:64:50:90:8e:
         e3:8d:46:1d:50:00:83:67:b0:81:6e:67:8d:f6:d0:23:68:3c:
         ad:75:09:2d:a2:f9:fc:cc:bd:a9:1d:60:4a:72:29:94:3e:08:
         6e:5a:8e:08:3d:59:b5:1b:9a:9d:f8:b9:9f:7d:25:0d:ee:a2:
         3c:2c:da:6f:1e:70:39:51:6b:3a:e7:53:16:06:d4:49:a6:62:
         18:df:7b:2e:a2:8e:3a:be:62:f4:0c:22:00:7f:58:3b:0c:5a:
         c8:75:29:27:22:a1:33:d2:45:e8:30:3a:25:ef:b7:ab:df:d8:
         3a:f2:d3:0b:a0:7c:5e:ea:e6:6a:32:dc:74:c8:72:8b:9a:7f:
         75:d3:ae:b4:db:f3:ec:2c:2a:d5:5e:7b:47:d0:e5:27:fd:77:
         3f:ad:93:2c:e0:40:5f:08:82:2a:e3:c0:1a:15:77:36:58:aa:
         c0:76:ac:62:9a:1b:11:80:25:50:69:f9:39:bc:f0:de:44:58:
         94:bb:44:c3:9a:2d:fc:4b:ca:c9:4c:95:ea:ea:d5:77:c9:a8:
         9f:b9:50:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:56:36 2025 by rpki-client