Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0e6f6261-8230-4ca9-ac15-54bf8c7152c0/c5f62988-1a7c-39fb-8c88-0d1fcdf84ee2.roa
File:                     c5f62988-1a7c-39fb-8c88-0d1fcdf84ee2.roa (raw, json)
Hash identifier:          ctXtPpK4iCXaqis67L/SNYTcafheushEsXJkVau8ktA=
Subject key identifier:   FF:9A:B3:0F:01:27:5A:F4:5F:4D:59:AF:1F:13:2C:D4:20:F6:26:10
Certificate issuer:       /CN=0e6f6261-8230-4ca9-ac15-54bf8c7152c0
Certificate serial:       010D0C9F4328584B87593BDE5F8B0460F0D9EB00
Authority key identifier: B3:F9:3E:6D:67:CC:AE:97:6A:74:D1:E5:4B:FC:E3:48:06:51:42:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0e6f6261-8230-4ca9-ac15-54bf8c7152c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0e6f6261-8230-4ca9-ac15-54bf8c7152c0/c5f62988-1a7c-39fb-8c88-0d1fcdf84ee2.roa
Signing time:             Wed 15 Oct 2025 10:01:37 +0000
ROA not before:           Wed 15 Oct 2025 10:01:37 +0000
ROA not after:            Tue 13 Jan 2026 11:01:37 +0000
asID:                     40676
IP address blocks:        2602:f580::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0e6f6261-8230-4ca9-ac15-54bf8c7152c0/0e6f6261-8230-4ca9-ac15-54bf8c7152c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0e6f6261-8230-4ca9-ac15-54bf8c7152c0/0e6f6261-8230-4ca9-ac15-54bf8c7152c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0e6f6261-8230-4ca9-ac15-54bf8c7152c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:59:3b:de:5f:8b:04:60:f0:d9:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e6f6261-8230-4ca9-ac15-54bf8c7152c0
        Validity
            Not Before: Oct 15 10:01:37 2025 GMT
            Not After : Jan 13 11:01:37 2026 GMT
        Subject: CN=e60aded4-8bb7-4002-bdfe-c1c60fb72123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:29:65:81:ed:44:73:05:18:71:18:1d:c2:a3:
                    7d:a1:78:3b:99:f1:c9:04:7c:8e:97:51:89:60:f3:
                    98:e0:37:59:49:22:b8:a5:af:17:97:f1:da:f8:c6:
                    6e:77:07:b8:13:89:f8:0e:5b:00:97:e2:2f:e5:36:
                    83:dd:86:cc:33:3f:fc:11:7c:97:46:90:fb:fc:f5:
                    72:6a:3f:92:d2:a0:1e:9a:ac:b2:b1:e2:81:07:a3:
                    a0:6f:ee:4d:08:3c:6b:f4:7f:75:b8:b1:93:32:da:
                    23:de:7e:7e:81:ee:a6:d6:9e:d9:d2:05:e3:be:7b:
                    4c:0b:9e:97:bf:44:8a:03:79:25:92:58:30:bb:bf:
                    33:b0:23:5d:53:57:90:79:19:66:26:39:f3:08:f5:
                    31:ae:25:be:01:62:10:61:55:e9:8a:7b:0f:21:41:
                    5a:60:0d:41:cb:73:3c:c9:31:4f:72:fd:3e:a3:72:
                    bd:4d:49:96:b8:a8:64:e1:2e:fc:d6:78:7f:ff:99:
                    a0:19:52:23:da:92:c5:9a:7c:9a:12:2a:72:98:5a:
                    e5:93:5b:c0:bc:01:29:d0:c8:2e:f5:16:c5:11:6c:
                    62:1e:7a:b2:c9:f6:59:6c:33:de:b0:58:b9:e8:d3:
                    ba:b7:9c:8b:28:35:af:f7:54:52:32:3e:80:73:63:
                    02:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9A:B3:0F:01:27:5A:F4:5F:4D:59:AF:1F:13:2C:D4:20:F6:26:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0e6f6261-8230-4ca9-ac15-54bf8c7152c0/c5f62988-1a7c-39fb-8c88-0d1fcdf84ee2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0e6f6261-8230-4ca9-ac15-54bf8c7152c0/0e6f6261-8230-4ca9-ac15-54bf8c7152c0.crl

            X509v3 Authority Key Identifier:
                keyid:B3:F9:3E:6D:67:CC:AE:97:6A:74:D1:E5:4B:FC:E3:48:06:51:42:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0e6f6261-8230-4ca9-ac15-54bf8c7152c0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f580::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:6f:f2:2a:35:ab:95:cf:05:68:7b:be:9a:16:52:96:20:65:
         ef:00:ef:25:93:5d:6d:e5:d4:ef:27:f2:e5:3b:be:6e:fe:6f:
         bf:7c:52:12:b1:a5:56:c1:8f:e5:8f:ae:97:2b:9b:c0:9a:89:
         31:2e:b2:1a:78:d8:8a:f2:65:f2:1b:90:e4:87:51:fd:29:1b:
         aa:35:5b:42:0c:a8:50:e5:d4:b7:9d:24:09:24:b0:4f:22:7b:
         34:44:df:5a:44:5d:e6:b2:03:3b:4a:42:cd:d1:71:b0:45:3f:
         d5:5c:fe:df:d8:68:d6:22:21:e5:b3:a8:ba:83:d6:da:45:00:
         9f:9d:47:e3:07:a6:d0:0e:b7:7f:b7:09:3a:3b:d9:e4:6c:8f:
         10:d1:16:69:3b:75:c6:bc:3e:b8:f6:8e:4b:32:e2:bb:1c:fc:
         c3:d4:2d:28:bd:0f:c7:a1:1c:4a:94:63:6e:78:91:0e:b3:6c:
         aa:07:eb:94:44:99:9f:3d:61:67:10:c4:cf:4a:3a:c6:b2:b5:
         4f:3b:39:3b:03:1a:89:f8:92:da:8e:04:e7:70:a9:68:f2:6a:
         ab:22:e4:1f:5e:e5:c3:5e:9e:7d:aa:4b:27:84:66:33:3b:a3:
         e8:1f:6f:53:9d:74:da:e4:c8:5d:13:85:b0:f5:cd:f5:e2:5b:
         10:d2:d1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:56 2025 by rpki-client