Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/101dc82f-fc97-31a5-91b4-27b864fd35bd.roa
File:                     101dc82f-fc97-31a5-91b4-27b864fd35bd.roa (raw, json)
Hash identifier:          6OfxleHPm6ZqYjlvUsKfPAtiqlfHxrfysFQmqK7NL3s=
Subject key identifier:   1E:6D:49:95:0C:DC:CD:16:24:53:8C:61:CB:EC:A4:21:63:ED:7B:CA
Certificate issuer:       /CN=de5f810d-f2f5-43b1-88e2-7f7aa486b8d4
Certificate serial:       010D0C9F4328584B5B0744D3F645865B93C27280
Authority key identifier: 1B:AD:F1:C4:3B:E7:17:F0:DE:DE:97:CC:CC:0E:9F:1D:FA:B7:3A:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/101dc82f-fc97-31a5-91b4-27b864fd35bd.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     197767
IP address blocks:        2602:fa56::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:44:d3:f6:45:86:5b:93:c2:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de5f810d-f2f5-43b1-88e2-7f7aa486b8d4
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=1d86b6ee-b26d-434f-93f7-83294b837fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:46:5a:a8:cf:1f:69:7c:cd:86:cb:a0:94:32:
                    ef:a4:54:de:4c:cc:08:55:b5:5f:9d:c7:21:1e:4e:
                    5e:d9:52:24:78:86:74:a9:e4:53:ab:c1:52:43:9f:
                    be:05:7b:3a:de:95:1a:2b:be:95:f1:52:53:88:1a:
                    5d:28:8d:9e:70:0d:23:40:9f:41:4d:7d:cf:cd:89:
                    5e:73:94:28:17:6f:1f:b1:a9:1c:3b:12:7e:c1:13:
                    66:df:2b:b6:db:d8:ff:50:05:c4:d4:0b:b7:ab:69:
                    5e:6b:66:9b:58:eb:d2:a7:6b:a4:9f:a6:9b:9f:10:
                    68:f5:cb:3b:9e:43:eb:61:c5:36:47:82:77:da:d8:
                    4d:a0:a0:40:c8:3c:69:d5:64:22:f1:7a:5a:04:c8:
                    32:f0:4a:cc:4d:48:8d:aa:81:43:f8:3b:ae:4d:b3:
                    d1:f4:37:16:26:f0:e9:19:20:b5:c8:3b:b1:fd:07:
                    d0:95:b6:d1:99:56:d4:be:ea:ae:c7:5d:73:63:9f:
                    6e:90:0c:e2:41:81:29:ff:51:9b:7d:a1:b9:96:6f:
                    88:41:91:97:90:3f:a2:1a:44:69:5d:3b:91:93:62:
                    4e:51:9d:d8:2c:9c:96:ce:91:2e:1f:5e:77:bf:02:
                    d4:4b:76:7f:c3:d2:b0:82:28:9a:71:67:c5:cd:4f:
                    08:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6D:49:95:0C:DC:CD:16:24:53:8C:61:CB:EC:A4:21:63:ED:7B:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/101dc82f-fc97-31a5-91b4-27b864fd35bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.crl

            X509v3 Authority Key Identifier:
                keyid:1B:AD:F1:C4:3B:E7:17:F0:DE:DE:97:CC:CC:0E:9F:1D:FA:B7:3A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa56::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:0e:b7:79:0f:f1:14:00:45:de:03:5a:13:c9:0d:64:48:cd:
         42:42:b8:c0:ce:10:70:6e:a6:3a:7a:62:85:4d:1c:d1:09:fa:
         36:fe:2c:53:1e:88:7f:17:f0:46:39:94:7d:5f:5a:63:13:f8:
         af:9d:f5:85:7b:06:3c:0b:d1:66:7a:5c:a1:4d:9f:22:33:90:
         4b:62:38:5f:6e:13:9a:6b:c4:ff:ee:9b:58:20:f0:86:01:9f:
         29:99:34:bc:e4:b6:08:55:da:35:ae:68:65:06:8b:f6:4f:7f:
         4f:a7:85:0f:d6:65:58:8c:16:1c:9c:ac:6c:16:7c:2c:5a:ff:
         90:e5:03:93:1a:29:fc:74:3f:9a:3e:87:81:58:6a:a9:a0:d7:
         94:e7:05:95:2b:8a:3f:e8:28:b2:c5:cc:e8:6d:09:15:c4:a7:
         0f:38:60:dd:2e:04:9f:5f:19:c9:69:b8:9a:5c:fe:e6:47:40:
         cb:49:3d:02:4a:c2:fb:a2:9c:1d:44:04:09:09:95:5b:b0:90:
         3c:fe:13:02:f3:3d:ae:c3:00:f2:63:20:20:4c:35:9f:3e:0e:
         27:93:75:1f:c4:a2:e5:6f:10:87:91:bd:a9:78:8e:54:d2:74:
         3a:60:69:77:9d:06:75:10:86:4b:16:40:5b:bc:51:6d:92:3f:
         a9:ad:bd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:39 2025 by rpki-client