Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117/2be21bfd-2e80-3175-83f3-b5a0029c1f98.roa
File:                     2be21bfd-2e80-3175-83f3-b5a0029c1f98.roa (raw, json)
Hash identifier:          4nsm6VammvwQnTiZtEf2Q/JTXW55Gyd2tDmtJQ9/HZY=
Subject key identifier:   47:21:BA:F0:C9:CC:64:8A:BA:2A:C6:B2:51:1E:92:FD:EF:E0:D0:48
Certificate issuer:       /CN=ac1e47a1-31bf-43f6-a3f2-1fc978c92117
Certificate serial:       010D0C9F4328584B98723FEE86E66B4269AEB980
Authority key identifier: E6:01:DF:84:CC:05:6F:05:9E:EB:C8:AC:2B:04:A4:9A:87:5A:FA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117/2be21bfd-2e80-3175-83f3-b5a0029c1f98.roa
Signing time:             Tue 21 Oct 2025 13:00:39 +0000
ROA not before:           Tue 21 Oct 2025 13:00:39 +0000
ROA not after:            Mon 19 Jan 2026 14:00:39 +0000
asID:                     63437
IP address blocks:        2602:f94a::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117/ac1e47a1-31bf-43f6-a3f2-1fc978c92117.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117/ac1e47a1-31bf-43f6-a3f2-1fc978c92117.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:72:3f:ee:86:e6:6b:42:69:ae:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1e47a1-31bf-43f6-a3f2-1fc978c92117
        Validity
            Not Before: Oct 21 13:00:39 2025 GMT
            Not After : Jan 19 14:00:39 2026 GMT
        Subject: CN=a32193ee-75df-4fa2-95dc-718e742a9095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:0d:ff:22:1b:bf:f0:7d:42:ee:ee:fa:04:
                    e0:cd:c4:df:d2:b7:e1:11:43:df:67:26:b5:95:ef:
                    53:02:59:a2:6f:b1:48:63:f9:a5:89:4d:7b:1d:5d:
                    a0:a0:fc:c7:8d:0a:0d:f6:24:34:0f:c8:07:d2:84:
                    ea:31:92:8a:63:c4:95:4d:bb:4e:37:b0:1f:54:a3:
                    b0:8f:37:b4:0c:f7:11:d4:9f:bf:c2:39:cc:6a:ad:
                    0d:03:ad:a5:40:e7:5e:7a:45:f7:a8:32:6d:26:41:
                    40:39:8e:b3:50:0c:a3:d0:fc:5d:74:5c:4f:80:32:
                    1c:89:95:d6:cf:9c:b4:b3:99:41:b7:b7:14:c3:f6:
                    79:6e:13:a2:de:8b:9b:a3:2a:af:b5:10:aa:98:72:
                    f1:bf:b0:cb:8d:07:5f:ae:9a:06:aa:7e:b8:6c:2e:
                    0a:39:c7:f1:0c:9e:80:7e:52:a2:c5:e5:4b:1a:b3:
                    63:18:e8:2a:87:74:39:a2:a2:ab:01:23:5b:11:16:
                    54:56:fd:38:41:49:73:b9:7b:0f:d8:56:d2:77:a2:
                    31:1b:7b:07:6a:58:20:33:ea:5e:28:2c:31:4a:cf:
                    a7:ae:16:31:54:1c:e3:69:35:68:1d:27:fe:96:5f:
                    76:b1:d7:74:58:9e:b2:d5:da:db:57:ac:d6:7b:83:
                    34:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:21:BA:F0:C9:CC:64:8A:BA:2A:C6:B2:51:1E:92:FD:EF:E0:D0:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117/2be21bfd-2e80-3175-83f3-b5a0029c1f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117/ac1e47a1-31bf-43f6-a3f2-1fc978c92117.crl

            X509v3 Authority Key Identifier:
                keyid:E6:01:DF:84:CC:05:6F:05:9E:EB:C8:AC:2B:04:A4:9A:87:5A:FA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ac1e47a1-31bf-43f6-a3f2-1fc978c92117.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f94a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:fc:66:40:f3:ef:36:4b:94:f0:dd:40:59:1b:a8:3a:cd:2c:
         39:d1:cb:5b:21:94:4a:26:a9:2c:70:02:e5:2c:b9:c8:60:4f:
         60:47:22:ce:c7:d2:f1:1f:47:97:69:a7:44:a0:50:d4:f1:5e:
         63:1f:fd:13:3e:13:05:8a:f5:83:73:00:77:f5:4c:16:eb:0e:
         8d:8d:c1:4d:d4:91:8b:4d:c1:8e:20:7f:0c:70:43:5d:c3:99:
         44:da:33:d6:29:c3:1e:0d:a4:14:77:c2:65:4c:89:e2:2c:c9:
         35:57:72:e3:0c:f4:93:24:c6:58:d1:68:05:65:67:19:84:f4:
         f7:f1:97:a2:9a:9a:2c:c4:d1:cf:d4:26:d2:4c:a1:5a:19:ab:
         fe:1f:50:5f:0e:fd:1d:91:59:cf:69:a7:8d:f3:eb:c6:c3:7c:
         df:d1:96:79:df:ca:dc:be:77:73:50:58:31:1f:1f:07:89:ca:
         50:22:be:b0:40:ea:bd:62:3c:65:f7:25:13:9d:87:07:c0:4e:
         74:ad:b0:5f:40:e3:00:0d:66:fe:19:21:d0:41:3a:79:e4:0f:
         ac:a9:92:c4:d9:c1:f8:6d:cd:e7:14:79:0f:0a:2a:31:0b:76:
         bf:ce:f7:60:9d:31:03:89:a5:d6:5a:c1:5f:68:8b:8c:7c:30:
         c1:de:1a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:51:38 2025 by rpki-client