Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa
File:                     2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa (raw, json)
Hash identifier:          MZvpsWVHCLl1qr9ew3lwa4OFIKfx9q3al5VOH114gCk=
Subject key identifier:   EE:23:F5:77:0E:30:32:4E:FD:F6:FA:8C:A6:18:90:30:82:8F:F4:A0
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F4328584B6A61F06D99E25E3222C4F780
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     61112
IP address blocks:        2602:fa4f:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:f0:6d:99:e2:5e:32:22:c4:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=271cca9b-ee98-4843-adb4-eb4274f84ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c2:84:25:9e:f5:11:69:78:1c:2b:9f:6e:80:
                    00:59:ef:3d:e1:1a:68:c8:c2:b3:f4:95:89:6d:cd:
                    6f:8f:fd:bd:eb:05:fe:8f:f2:b2:e3:8d:fa:af:83:
                    5a:bd:e1:4d:72:cb:ac:b0:4b:da:48:6a:d1:aa:cf:
                    0a:39:82:a8:e6:00:f0:1b:06:d3:f3:3b:40:2d:4f:
                    35:8f:b6:9f:84:e8:0f:21:44:55:05:06:eb:6b:95:
                    ae:90:7a:94:29:ee:b6:28:69:da:e2:62:c6:a4:53:
                    f5:c5:80:1b:3b:49:8c:e2:e2:3d:53:1e:e7:bc:f8:
                    e2:65:8c:58:38:c9:7d:87:07:06:89:34:f5:dd:4e:
                    04:88:37:d6:8f:78:2b:32:5d:76:54:50:14:3a:5a:
                    68:e1:73:ae:4e:06:8d:82:11:3b:9c:ab:1a:c7:44:
                    d2:62:ef:63:4c:09:90:83:42:47:90:3f:13:fb:55:
                    65:5b:6d:83:dd:9d:4f:05:e5:d0:23:d6:7c:5c:38:
                    20:3a:56:35:ed:cf:7e:c4:35:ef:25:89:85:78:b4:
                    27:14:44:6b:f3:a0:eb:d4:6f:7d:3d:d3:f0:77:22:
                    43:73:3b:69:bb:cc:ac:04:6a:bf:a0:c4:ad:18:c5:
                    b0:d7:76:4b:92:f8:8f:38:c4:ab:dc:4c:7b:22:56:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:23:F5:77:0E:30:32:4E:FD:F6:FA:8C:A6:18:90:30:82:8F:F4:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/2babb0a1-9a1a-3bd4-9f14-ebf6dd309386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:39:db:c3:a6:45:e5:26:44:bf:53:58:d3:24:6f:22:7c:35:
         28:f5:d4:9b:d7:0a:f0:36:72:19:a9:0b:a8:1f:b1:f4:65:39:
         91:6c:50:64:11:37:a8:ed:4e:1a:59:9e:3b:cb:d6:ab:9b:4a:
         df:98:53:3c:71:b3:79:76:a6:30:ff:a4:f3:d4:7e:68:60:ae:
         a0:22:43:f8:88:27:a9:63:05:91:a4:6f:d4:d0:c8:3a:db:8f:
         2b:80:05:76:4c:35:14:85:82:00:ec:f9:6b:6d:66:ad:85:bb:
         2d:75:40:c7:57:b2:45:df:ac:93:ab:fd:87:21:52:7f:79:41:
         82:df:df:55:8e:ae:65:c5:93:cd:64:e9:cf:4a:82:b5:e4:3b:
         b3:34:75:a1:57:b9:b4:a5:bd:6f:20:3e:70:ba:b3:b3:5e:ea:
         c9:88:21:38:a2:87:cf:73:01:67:51:71:a8:79:95:3e:98:62:
         25:c6:d0:dc:f7:80:d1:c5:04:8c:32:05:75:72:b3:cb:95:7e:
         a0:ee:3a:6f:f2:20:68:5c:62:ff:fe:aa:1b:f2:ef:f3:7e:1c:
         71:82:ff:59:1b:56:75:75:18:de:96:9d:5d:de:2c:9f:ca:0c:
         47:95:b4:35:7e:ac:b2:d7:6a:06:34:b2:55:92:c5:73:18:f3:
         58:5e:55:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:49:44 2025 by rpki-client