Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/fc2b3d39-983a-317b-b002-8ee06eb3b3ea.roa
File:                     fc2b3d39-983a-317b-b002-8ee06eb3b3ea.roa (raw, json)
Hash identifier:          dXD3iOaqT/KlHnUitJE5HJMwLY/DhaePo/o+zFmeMVY=
Subject key identifier:   6E:B6:3F:B0:32:A5:76:4B:4C:C6:2C:04:31:86:2D:36:8E:0C:03:86
Certificate issuer:       /CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
Certificate serial:       010D0C9F4328584B84E786DA4FD7E89D2FA78DC0
Authority key identifier: 16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/fc2b3d39-983a-317b-b002-8ee06eb3b3ea.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     23477
IP address blocks:        2602:f899::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:86:da:4f:d7:e8:9d:2f:a7:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=98feb63e-d799-4d8a-883d-3ed55b7762e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:52:7a:e4:b5:c8:f5:4b:60:32:a7:c2:78:5f:
                    5e:8d:32:ee:b1:a0:a2:29:ca:fe:92:63:f8:b6:7d:
                    1b:98:ef:7f:7c:25:d9:25:dc:af:ee:da:94:b3:ae:
                    c8:c0:c6:47:be:21:30:26:9e:96:1c:9c:39:72:c1:
                    60:7c:a8:ac:23:9a:46:d6:58:ff:77:e6:40:b8:8a:
                    27:51:c0:e0:b8:95:33:df:ad:5f:ff:60:53:64:78:
                    77:8f:45:4e:5b:c1:1a:25:79:ea:1a:b9:61:86:e2:
                    15:5e:16:53:9f:31:a6:87:19:e5:2e:fb:52:de:19:
                    ea:1c:35:07:2f:4f:f5:cd:e3:dd:02:3c:ff:f4:81:
                    71:28:22:b2:9a:3c:62:50:e0:3d:2f:86:07:db:13:
                    11:be:be:92:a1:66:00:a2:27:4d:3b:ac:d6:d5:01:
                    b2:9e:95:ed:d9:37:4c:d2:b4:63:d0:2a:bb:b3:65:
                    64:5b:56:ce:c3:8c:27:14:3d:a3:3a:03:63:61:b1:
                    2d:db:24:fa:08:12:be:ed:a2:fe:f2:90:f8:10:d7:
                    bc:8d:e9:64:1b:ce:04:9d:68:ec:3e:37:55:b5:96:
                    a0:1d:bf:4b:27:18:1f:f8:28:87:0a:4a:fc:b6:0e:
                    f9:9e:67:f6:06:19:bc:f1:80:3a:c8:cb:46:5b:c1:
                    e8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B6:3F:B0:32:A5:76:4B:4C:C6:2C:04:31:86:2D:36:8E:0C:03:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/fc2b3d39-983a-317b-b002-8ee06eb3b3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl

            X509v3 Authority Key Identifier:
                keyid:16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f899::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:9d:1c:b3:9a:fc:33:2a:01:96:a0:e7:52:96:c8:ae:ac:36:
         f6:40:11:4e:d2:41:8f:3f:68:54:ed:30:00:d2:f1:f4:e2:5f:
         6b:da:b1:a2:42:af:17:2f:6c:3d:e6:33:c9:9d:98:22:c7:aa:
         43:8d:7e:cc:5f:d7:f8:17:30:64:b3:fb:3b:6c:9b:0e:2f:d5:
         d0:5c:93:21:aa:df:35:a1:d3:a4:ea:14:f5:49:9a:ec:c7:93:
         10:d0:ad:d2:fd:4d:c3:99:4e:19:e0:25:d0:ac:81:d3:79:0d:
         82:5c:7b:ba:d4:d3:2c:4f:e8:0b:72:c5:5e:7f:23:a3:d4:af:
         61:56:f5:6e:4f:42:aa:b6:4a:c6:bb:93:bc:e4:24:29:f3:73:
         37:6e:22:11:75:c7:c9:1b:ad:6e:3c:a8:dc:22:6b:28:e1:54:
         0f:34:0c:97:75:45:dc:c7:52:6f:f5:ff:ab:29:09:b9:fd:bd:
         94:87:86:e1:73:4c:da:0c:dc:cd:68:ab:e6:5b:e4:1a:26:04:
         f4:95:7e:ec:ac:2c:bb:21:ec:eb:9a:74:50:4a:8d:24:ba:df:
         aa:05:9a:8e:c9:7d:a0:ce:3c:ab:7b:b4:5e:2e:b4:ad:53:c8:
         b2:0c:ba:fe:c7:ea:35:f7:4b:0a:51:4c:07:7a:69:60:5d:19:
         c5:75:ea:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:47:47 2025 by rpki-client