Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/fc8157c6-7c1c-3f32-a229-61a454c91ac7.roa
File:                     fc8157c6-7c1c-3f32-a229-61a454c91ac7.roa (raw, json)
Hash identifier:          Y+LpCGPeJI7w7fcPZaXKllsn8FHg5lkHYKAnViyItlM=
Subject key identifier:   D5:8E:85:A5:7C:42:8E:5F:B8:63:5D:91:56:BC:9D:99:C0:B6:A5:D2
Certificate issuer:       /CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546
Certificate serial:       010D0C9F4328584B7F7302D3A4838A503FD80400
Authority key identifier: 2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/fc8157c6-7c1c-3f32-a229-61a454c91ac7.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     394106
IP address blocks:        2602:f6a6::/48 maxlen: 48
                          2602:f6a6:1::/48 maxlen: 48
                          2602:f6a6:2::/48 maxlen: 48
                          2602:f6a6:3::/48 maxlen: 48
                          2602:f6a6:4::/48 maxlen: 48
                          2602:f6a6:5::/48 maxlen: 48
                          2602:f6a6:6::/48 maxlen: 48
                          2602:f6a6:7::/48 maxlen: 48
                          2602:f6a6:8::/48 maxlen: 48
                          2602:f6a6:9::/48 maxlen: 48
                          2602:f6a6:a::/48 maxlen: 48
                          2602:f6a6:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:73:02:d3:a4:83:8a:50:3f:d8:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=014ad4ee-a70c-4cec-8e4d-7a8817e6c0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a4:e6:64:3c:41:9b:82:7e:8e:25:6e:62:b7:
                    78:34:b5:aa:a4:35:3d:8b:98:1c:ac:60:0f:dc:33:
                    24:5b:59:2a:ee:2f:23:78:ab:32:cd:fd:d9:cd:34:
                    f3:e4:f6:d1:c4:b6:a3:77:05:f1:0c:98:ee:ee:00:
                    ff:6a:18:ac:24:0e:58:44:90:ea:a5:7b:35:f5:64:
                    b8:d9:b0:e8:f1:18:07:40:d9:85:86:be:35:6a:36:
                    95:dc:ad:fd:a9:f5:a5:54:b8:c5:10:f1:65:78:02:
                    a2:a4:7f:35:ec:8a:e0:ee:6e:f9:02:2c:c2:31:6a:
                    6b:7f:29:31:0e:88:53:37:04:57:16:01:8c:64:ee:
                    12:99:b4:f8:ec:6a:39:0d:cc:9c:c7:d5:33:e4:cd:
                    db:0d:c8:b9:1b:e4:df:0a:ad:52:1d:8e:2c:02:69:
                    d3:b8:98:e7:72:49:c7:11:18:ff:10:2a:2a:e1:c1:
                    ca:4f:0e:db:42:50:2e:2b:8f:60:00:de:68:ae:13:
                    26:b0:22:49:7f:33:f1:de:33:62:91:62:f9:82:76:
                    2a:49:51:cc:9e:a5:fd:ff:04:5d:46:93:9f:94:84:
                    8b:6d:4d:f2:d5:9f:5e:da:75:b5:e1:3f:d3:52:07:
                    e8:8d:bc:2a:e0:7d:57:a4:d4:5c:ef:98:65:6a:62:
                    90:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:8E:85:A5:7C:42:8E:5F:B8:63:5D:91:56:BC:9D:99:C0:B6:A5:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/fc8157c6-7c1c-3f32-a229-61a454c91ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl

            X509v3 Authority Key Identifier:
                keyid:2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6a6::-2602:f6a6:b:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:08:d9:7c:1a:4a:87:a1:ab:09:b8:8e:66:73:25:a2:30:18:
         1f:1a:b1:ac:29:86:a4:51:f1:df:f3:b9:42:61:af:34:99:3b:
         a7:c1:fc:d6:b4:a3:97:58:4a:fa:f7:6c:b9:36:c2:8b:f0:77:
         1f:88:d3:e5:fb:b8:39:ac:c5:7a:1a:f4:02:ad:10:34:41:41:
         a7:17:a6:1e:b7:dc:5e:84:2d:50:72:52:75:d4:5e:fc:1d:31:
         f1:6b:6e:a1:44:dc:74:7d:3d:e9:ec:10:3e:eb:c3:2e:25:03:
         4d:c4:fe:f7:9b:e5:c3:90:92:31:cd:23:47:86:d3:31:3f:f7:
         0e:31:e2:3f:80:58:ea:d0:6f:78:e9:1e:42:ed:0d:de:b0:8f:
         9a:fd:fc:fc:b4:18:6c:ee:1d:40:a7:50:e8:e3:1f:db:c7:5c:
         63:a2:b2:fb:d1:b9:96:c5:85:e9:af:68:09:b3:35:2e:84:3c:
         f2:9a:44:bf:73:f6:e1:45:1b:25:60:47:e8:43:05:f8:b9:a3:
         3c:b7:e4:ab:9c:b0:bb:1b:c8:1f:fa:0d:22:f9:7f:c7:a2:31:
         e3:48:ca:c9:5b:1a:4c:ac:59:5e:59:d1:c1:f3:43:6e:d1:ab:
         fa:da:5b:d0:cd:bf:6c:00:78:0c:72:75:92:8f:64:14:03:6b:
         75:0a:a6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:17:13 2025 by rpki-client