Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/3bcfb33e-cbd6-3e45-954d-61ac30126a69.roa
File:                     3bcfb33e-cbd6-3e45-954d-61ac30126a69.roa (raw, json)
Hash identifier:          tfPEAZc/oz4Zh+9ejXpoSZ7WuEiOTnMQkg0zZjq4ixU=
Subject key identifier:   3E:7B:5A:AB:29:8D:9B:78:EF:C7:CB:5A:CE:EE:F3:2F:2F:1F:FF:FC
Certificate issuer:       /CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8
Certificate serial:       010D0C9F4328584B5141BE7EF9FDB9D1696C5A80
Authority key identifier: 27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/3bcfb33e-cbd6-3e45-954d-61ac30126a69.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     32002
IP address blocks:        2602:f964:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:be:7e:f9:fd:b9:d1:69:6c:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=dceebdd7-f05f-4f6d-b816-6e9c8a4a7618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:4b:96:bd:0e:1b:36:f1:bf:52:fd:c6:80:
                    3a:05:39:87:13:d5:dd:61:cf:be:fd:5f:4d:5b:f3:
                    cc:22:e4:c0:c8:09:19:d9:c2:58:ab:5a:71:68:a6:
                    73:fc:5d:ee:6e:19:ab:82:b8:1f:4a:59:e4:28:8e:
                    46:ab:38:2a:31:16:75:39:22:ba:ab:66:4f:e2:f9:
                    33:6a:89:16:a1:53:2d:19:fe:a1:65:37:c8:89:27:
                    59:c0:7e:57:80:0a:fa:99:24:eb:a0:34:d9:ea:3c:
                    27:e2:e7:f9:93:c6:49:fe:4c:dd:a7:d5:38:65:2a:
                    50:47:6d:27:c8:c2:a0:e5:45:3f:df:b5:b3:80:53:
                    c1:0b:18:7e:cc:e3:47:9f:91:2e:69:8d:cf:07:79:
                    a1:0d:38:81:ae:5e:97:33:08:58:25:3a:7c:c5:3d:
                    32:5b:3e:9f:bf:42:c2:12:27:b4:3a:68:c0:78:db:
                    eb:f0:87:bb:5e:42:1a:49:fc:5b:21:a2:a2:8f:98:
                    22:74:73:50:cd:b0:de:0c:5b:e1:17:bd:b1:ef:9c:
                    34:d4:87:72:da:45:03:f6:c6:de:a0:60:42:ee:67:
                    c8:61:32:0b:32:c5:7c:84:89:d6:d8:8c:d8:ab:17:
                    1c:a7:f4:0a:f4:78:05:5d:ec:91:40:2f:b0:f6:26:
                    05:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7B:5A:AB:29:8D:9B:78:EF:C7:CB:5A:CE:EE:F3:2F:2F:1F:FF:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/3bcfb33e-cbd6-3e45-954d-61ac30126a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl

            X509v3 Authority Key Identifier:
                keyid:27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f964:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:92:cb:04:0e:8f:03:5c:b4:51:cf:ba:67:c0:6b:40:b3:88:
         36:08:4d:04:7f:33:bc:12:f5:af:49:9e:41:e2:7e:4a:f3:37:
         e7:c9:33:57:81:36:bb:42:5a:22:76:4a:6c:da:88:6b:fc:8a:
         9e:f5:01:f7:4e:21:35:a3:27:6e:42:07:cb:27:f0:24:ad:14:
         91:51:b0:1d:c4:81:94:74:08:83:5b:c1:a5:9f:bb:5f:3b:90:
         2c:22:a0:66:ef:d6:bc:53:0f:16:e8:79:97:35:ff:35:a9:58:
         fd:c9:d1:8b:17:47:76:44:fa:59:45:da:72:a5:45:8f:e4:41:
         0a:a1:56:f6:6f:e9:a3:64:51:ed:ce:d8:96:8f:e1:42:74:15:
         1f:1d:f6:7b:af:48:bf:e6:e4:71:c4:89:d3:ca:1e:d0:16:67:
         99:6a:54:f7:89:10:b8:c9:07:b5:03:1e:98:7e:4e:95:4f:9e:
         ab:b9:8b:f7:09:c2:de:25:94:e0:52:e8:81:52:67:78:de:99:
         63:0b:3f:96:c0:12:05:09:6f:6e:1b:a5:8f:31:b1:b8:41:1d:
         24:ff:00:2d:c7:bc:ea:e8:9b:60:65:ee:b4:0b:ba:71:8c:8d:
         47:f0:bb:e5:39:7d:ea:20:80:79:15:a6:c8:f5:8a:a7:51:46:
         27:7b:ec:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:59:14 2025 by rpki-client