Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/e1cbbdf1-1a5c-3465-9779-6faf0e061be0.roa
File:                     e1cbbdf1-1a5c-3465-9779-6faf0e061be0.roa (raw, json)
Hash identifier:          +M7t0LQVJRpwGm6Nl+Od0wmFxvjmGGELqtsQTFA31gw=
Subject key identifier:   AA:E9:B4:CB:D8:CC:AF:35:6F:08:C7:17:75:5B:CC:D7:CF:AE:BA:36
Certificate issuer:       /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
Certificate serial:       010D0C9F4328584B7AF18129AE88AB7A92EF95D0
Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/e1cbbdf1-1a5c-3465-9779-6faf0e061be0.roa
Signing time:             Fri 10 Oct 2025 23:22:55 +0000
ROA not before:           Fri 10 Oct 2025 23:22:55 +0000
ROA not after:            Fri 09 Jan 2026 00:22:55 +0000
asID:                     62553
IP address blocks:        2602:f71e:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:f1:81:29:ae:88:ab:7a:92:ef:95:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
        Validity
            Not Before: Oct 10 23:22:55 2025 GMT
            Not After : Jan  9 00:22:55 2026 GMT
        Subject: CN=6e014cf8-4a51-4680-b70a-3655c725a2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a7:5e:6c:41:0e:ad:2d:8d:60:39:05:2f:4c:
                    36:47:77:70:9d:2b:20:be:62:e0:00:41:64:8a:c5:
                    6d:49:9a:77:a6:c3:37:fc:28:78:fa:3b:7d:3e:b8:
                    b9:65:b2:69:47:37:54:52:c1:27:16:4b:bd:e1:91:
                    21:88:ce:fb:97:e9:00:db:e2:8c:2e:ed:44:cc:e1:
                    cc:30:4d:6b:ba:46:27:de:86:0b:b9:2a:bb:fd:af:
                    c9:e0:1f:95:69:6d:15:39:b5:82:f8:a5:3b:04:79:
                    4b:08:f2:87:86:dd:43:9c:07:4f:e3:c0:b5:ee:d3:
                    1a:25:42:46:a5:03:03:80:2f:26:c4:ce:43:33:cb:
                    dd:e7:b1:ab:a5:10:19:62:28:3e:bb:f1:40:4e:34:
                    d6:8f:40:7d:fa:90:8a:ac:69:45:9d:de:e6:8d:c3:
                    7a:e0:5e:2f:9c:c3:7e:a6:5c:49:ba:49:cf:69:53:
                    81:ed:1d:cd:84:62:da:49:21:fb:fc:38:a6:0a:7e:
                    e9:f3:d4:fd:e2:31:14:be:c5:41:01:fc:78:63:52:
                    bc:4f:e0:a7:db:d5:b7:49:d5:44:3b:13:bd:32:23:
                    61:bb:d7:e3:1d:6a:cc:8f:6d:41:3d:61:dc:fa:50:
                    25:55:c2:59:8f:2f:7e:8a:49:dd:ee:5a:f5:b7:ab:
                    da:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E9:B4:CB:D8:CC:AF:35:6F:08:C7:17:75:5B:CC:D7:CF:AE:BA:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/e1cbbdf1-1a5c-3465-9779-6faf0e061be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f71e:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:09:1e:f8:d5:ee:79:24:8b:9b:eb:22:6e:eb:32:8e:07:15:
         7e:1f:36:f8:10:cf:17:e1:43:35:13:72:ce:b5:ea:02:74:80:
         88:d3:df:14:1d:b8:54:49:5f:c7:4d:4e:0e:45:e8:f7:6b:dc:
         b6:00:07:ae:07:3b:ee:5c:a3:07:fb:d1:96:fd:ce:89:e9:ad:
         be:1c:9f:23:b8:d4:d8:c7:e2:ed:3e:28:ae:2d:e0:c1:0b:96:
         0b:57:70:54:25:bd:3c:cf:f4:a4:15:03:a5:fc:8f:ad:0e:b7:
         bb:0e:ef:55:08:64:bf:0d:8b:b9:6d:8c:85:57:3b:a7:65:ca:
         36:17:4d:ad:33:93:e6:b0:69:9a:ce:0b:43:53:72:58:f1:0b:
         2d:13:3b:48:2c:61:de:f0:72:df:fc:9b:3e:a4:ab:22:18:a7:
         d3:d6:6d:03:77:2c:99:42:a9:cd:12:88:f8:19:36:0d:7a:b0:
         51:d3:22:cd:40:e7:34:e9:60:46:c3:92:17:d9:72:db:27:51:
         1b:ac:b0:97:45:3f:de:7f:40:77:f2:af:fe:38:ed:3d:07:3e:
         9c:8c:d7:05:5d:22:e7:56:94:68:db:55:28:4a:24:d2:bd:a0:
         62:66:94:2a:b1:a0:d9:08:cc:29:ac:4c:5c:0e:7c:96:15:f8:
         b3:be:90:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:20:32 2025 by rpki-client