Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/c5f3f466-3b7b-3b78-aa89-43102de4b9d1.roa
File:                     c5f3f466-3b7b-3b78-aa89-43102de4b9d1.roa (raw, json)
Hash identifier:          HEbAOUrQso5Dj7SXrzKeTPApAA/QzH8hoQf7s4Bu7Gk=
Subject key identifier:   29:09:A1:01:37:0F:89:B2:E7:4D:19:28:49:86:A6:5A:6F:2F:40:EA
Certificate issuer:       /CN=058a49b1-635c-42be-b1a3-1465228f2130
Certificate serial:       010D0C9F4328584B74275242614181A237D4C591
Authority key identifier: 68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/c5f3f466-3b7b-3b78-aa89-43102de4b9d1.roa
Signing time:             Wed 08 Oct 2025 13:00:37 +0000
ROA not before:           Wed 08 Oct 2025 13:00:37 +0000
ROA not after:            Tue 06 Jan 2026 14:00:37 +0000
asID:                     26682
IP address blocks:        2602:f795::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:27:52:42:61:41:81:a2:37:d4:c5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058a49b1-635c-42be-b1a3-1465228f2130
        Validity
            Not Before: Oct  8 13:00:37 2025 GMT
            Not After : Jan  6 14:00:37 2026 GMT
        Subject: CN=2c9852c2-10c9-4c4e-be3f-0e0dbf02d948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9b:75:4a:de:4f:4f:cc:f7:ea:fd:f8:55:4f:
                    08:d9:ac:a1:57:9c:dd:3a:76:3c:0f:de:81:a4:a5:
                    b4:9c:ea:64:09:9f:81:46:d5:4a:a8:04:1e:54:c3:
                    d3:b5:54:9b:a6:de:86:f1:0d:8a:f3:dc:2f:55:10:
                    27:61:a3:d6:26:d1:61:b1:df:f6:d5:42:18:eb:75:
                    77:28:ee:3a:7e:08:9f:fa:33:fe:59:44:6e:4e:60:
                    bc:d4:bb:52:a6:38:81:63:65:cb:ab:95:fa:2e:ad:
                    56:e0:37:27:b9:38:1b:73:f5:01:2a:4a:a2:fd:c7:
                    54:37:54:92:ab:ab:dc:d0:ef:a8:0f:6f:96:b0:83:
                    65:54:7b:f8:a2:a3:ac:4c:cb:b8:a8:c3:3f:f1:11:
                    13:fd:1c:2b:4e:b4:e8:66:d3:ec:86:27:36:65:ed:
                    61:e6:ab:f7:98:85:9f:7a:f4:9c:01:4d:87:fa:1b:
                    c0:92:c3:ff:b7:e1:62:62:57:a9:3e:42:81:c6:2d:
                    da:af:1e:38:c6:c1:fd:4d:93:1a:20:25:0d:74:16:
                    ce:ba:88:c4:c7:ad:46:91:f7:31:da:b2:43:76:2d:
                    9a:65:71:59:0a:9d:58:68:3d:81:33:2c:bd:f5:35:
                    9c:b9:6c:5a:c4:33:e2:3b:eb:8e:eb:72:f1:24:da:
                    89:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:09:A1:01:37:0F:89:B2:E7:4D:19:28:49:86:A6:5A:6F:2F:40:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/c5f3f466-3b7b-3b78-aa89-43102de4b9d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl

            X509v3 Authority Key Identifier:
                keyid:68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f795::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:be:a9:25:59:13:78:bd:08:70:86:0f:4b:88:21:63:1a:1b:
         b7:c9:dd:4e:20:9a:8b:aa:88:2b:19:49:dc:40:0e:9e:8d:43:
         c5:06:0f:fd:24:c2:a0:a0:bf:2a:4b:94:da:96:f9:2a:73:fa:
         db:7c:3e:85:a0:d6:13:f4:62:af:5b:3d:26:6a:04:f0:ea:d1:
         ca:a9:52:11:b9:1a:8a:22:13:ec:c9:e1:9a:33:6f:d6:fe:50:
         c9:49:8d:9d:bc:b0:41:87:59:cc:4f:55:42:bb:3c:d7:a7:d0:
         c1:19:9f:63:72:c2:e3:a6:88:ce:ff:71:9b:0d:62:fe:76:fd:
         43:1c:15:d0:00:62:ad:1a:b1:04:f1:a1:89:e6:1a:61:e1:fa:
         1a:cb:74:cf:a0:0a:a7:65:71:4f:f7:87:7e:e6:fc:ad:a5:0b:
         e9:46:82:19:52:39:20:ea:76:22:c6:f0:c1:1c:05:e9:4d:c6:
         61:8f:eb:e1:95:69:87:57:17:22:f2:15:df:cd:17:90:0f:c1:
         fd:43:7c:64:8a:b6:dc:fc:98:29:50:8d:ab:04:78:64:71:b2:
         1a:83:c8:b7:37:d5:07:8b:ee:1e:61:62:ce:30:bd:b2:7d:0c:
         3e:99:57:36:97:82:ab:57:79:ab:48:89:cf:4d:f2:4a:cf:7d:
         b4:9f:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:02 2025 by rpki-client