Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/a29c28fc-fb21-391a-b82f-5b79a7d67677.roa
File:                     a29c28fc-fb21-391a-b82f-5b79a7d67677.roa (raw, json)
Hash identifier:          objOnDKOyvplyOTM8rQceye3NQdZ7lBdZFJNfv49Dbg=
Subject key identifier:   F2:AA:25:6C:BE:5D:03:3A:07:E9:A8:B2:63:E3:3F:E4:5A:9F:17:79
Certificate issuer:       /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
Certificate serial:       010D0C9F4328584B2496D89D109DC6A82384BAC0
Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/a29c28fc-fb21-391a-b82f-5b79a7d67677.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     32595
IP address blocks:        2602:f96c::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:d8:9d:10:9d:c6:a8:23:84:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=4746a41f-b466-4341-bb11-344732d2f7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:2c:de:d4:3d:b4:2d:7a:39:98:c3:d2:11:
                    9c:ec:d4:aa:f5:06:1d:91:46:49:67:00:64:2b:f7:
                    16:71:b7:a0:6b:11:02:9b:c6:d6:c4:ca:70:ec:86:
                    8c:29:02:a2:29:94:81:17:f7:e0:3f:ea:59:05:b2:
                    7e:31:14:5f:d1:3f:63:be:91:67:47:7b:a3:ed:60:
                    2c:30:e9:28:9c:b3:fa:1a:ec:57:2e:07:6f:b9:0b:
                    6e:7d:d4:f8:9d:3b:71:db:f7:f2:7c:f8:78:0e:b6:
                    0d:f2:8f:0c:3a:4c:4f:e4:20:ff:27:15:c3:c2:14:
                    76:b8:96:26:02:2a:53:30:b6:61:f3:29:03:32:a2:
                    7b:e6:ec:43:44:15:4a:8e:ce:7b:6e:b9:d2:eb:f0:
                    49:1f:ea:43:aa:fb:b4:b7:19:06:55:30:bb:b6:a3:
                    2a:1d:62:86:cd:e3:7c:3b:20:58:62:c6:b9:23:40:
                    aa:06:36:9a:7c:14:f9:f1:cb:7c:ef:13:5b:55:33:
                    55:3e:f8:52:1a:45:57:47:91:04:5a:75:12:5b:b8:
                    33:71:79:47:b3:97:15:fd:c8:b6:d9:27:0b:7e:37:
                    73:ff:e4:36:3f:06:67:e5:e5:ff:9a:4b:0d:98:71:
                    b4:ab:11:ab:28:e3:17:f5:df:ca:b0:d4:e2:ff:d9:
                    61:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AA:25:6C:BE:5D:03:3A:07:E9:A8:B2:63:E3:3F:E4:5A:9F:17:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/a29c28fc-fb21-391a-b82f-5b79a7d67677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl

            X509v3 Authority Key Identifier:
                keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:06:32:38:88:d8:ba:c5:1c:ac:fa:16:ce:6d:75:30:fe:21:
         25:33:66:38:54:ba:75:ca:0e:8a:bf:60:17:f3:2a:68:af:a4:
         37:9c:ff:a5:7a:29:0e:36:dd:24:62:9c:a4:bd:08:bf:62:8d:
         4f:1a:a9:88:3d:07:7c:70:29:4e:9d:2d:bf:a8:98:ad:e4:f2:
         e1:a7:8a:5d:ac:d5:bb:e2:14:60:5a:ca:e1:cb:4c:82:a9:25:
         47:b7:a1:6c:4b:ba:29:73:b5:b4:03:ae:05:27:da:74:63:ee:
         78:99:9e:52:51:02:5f:f7:09:a9:37:ec:8c:0b:21:50:cf:60:
         1f:e8:42:9c:de:75:6e:ac:d3:32:73:15:5b:bf:46:e6:65:6d:
         e0:24:1b:20:91:45:0d:3a:d5:42:3e:b5:83:83:2f:0e:7e:81:
         f9:f9:ab:c2:58:ac:2b:ec:91:d1:df:0c:33:7f:19:6d:3b:78:
         de:66:77:7a:11:19:f0:f6:9e:8c:c1:6c:e4:3a:6f:ad:44:bd:
         2b:98:8a:67:d9:6f:92:df:64:f2:c9:6c:2a:b0:58:74:34:07:
         24:c2:73:f0:af:85:48:88:98:cc:e7:fe:39:01:b1:91:9e:cb:
         0c:22:bc:2f:a7:dc:fb:9b:04:8f:54:6a:b1:49:e2:a2:37:b7:
         86:6f:5c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:40:56 2025 by rpki-client