Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/69e4c6e1-7d31-3219-97d4-24ced0dc33d4.roa
File:                     69e4c6e1-7d31-3219-97d4-24ced0dc33d4.roa (raw, json)
Hash identifier:          zUIcInv0w8s9w1t5ia9TRIrS37uwiROcD16Zz1zWrTU=
Subject key identifier:   79:72:D9:E5:98:A4:96:84:1D:3B:5E:D4:D8:A6:44:DB:33:FA:08:BE
Certificate issuer:       /CN=423dceca-a5b5-4f9a-8509-49ac01f41c66
Certificate serial:       010D0C9F4328584B758C9D16C04A5CB25C014B00
Authority key identifier: FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/69e4c6e1-7d31-3219-97d4-24ced0dc33d4.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     63101
IP address blocks:        2602:f824::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:9d:16:c0:4a:5c:b2:5c:01:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=423dceca-a5b5-4f9a-8509-49ac01f41c66
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=1599770e-fa5b-4af0-bccd-91da184dff33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:23:fb:46:be:f9:86:df:b4:9b:ab:0c:0a:fe:
                    46:e3:50:e4:0b:4b:ce:b9:16:8c:ff:dc:b8:f9:12:
                    25:2c:dd:c9:59:31:37:ed:3c:ad:3e:24:fb:b4:5b:
                    c5:6a:6c:c9:4a:14:0d:6d:17:03:c5:d4:a2:f2:cf:
                    9b:7a:2c:95:8f:91:79:45:b9:dd:ed:7b:ab:7e:c8:
                    aa:c5:c0:07:6a:b2:6e:2c:55:2e:05:e6:20:0f:af:
                    ea:fd:5b:c2:68:94:9e:7c:b1:81:95:87:60:3c:5c:
                    1e:17:98:34:b3:5e:ee:7b:c4:0c:19:da:c8:63:f9:
                    52:5d:a3:3a:d8:6a:5e:7b:15:12:9b:05:9b:b6:e1:
                    29:a9:a1:17:6e:03:2f:18:4e:f8:96:4c:0d:61:af:
                    1c:04:65:78:c3:19:6a:71:f4:78:2b:82:f4:cb:ac:
                    9f:b3:42:2a:a3:33:24:d3:09:de:6c:57:23:0d:4f:
                    3f:2e:88:a0:8b:90:a2:69:6a:f7:a9:23:9a:1b:12:
                    d0:3f:39:ab:6a:95:19:a0:43:e5:9a:03:36:82:e5:
                    2f:53:29:0f:99:4f:76:b8:24:67:70:22:04:8a:60:
                    c1:2a:18:49:dd:d7:25:95:29:f2:c6:35:9b:eb:3d:
                    9e:14:c3:d9:c5:21:41:6d:ad:97:57:29:40:50:04:
                    eb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:72:D9:E5:98:A4:96:84:1D:3B:5E:D4:D8:A6:44:DB:33:FA:08:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/69e4c6e1-7d31-3219-97d4-24ced0dc33d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl

            X509v3 Authority Key Identifier:
                keyid:FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f824::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:1f:80:31:c9:40:4f:6b:dc:1b:32:5f:56:d8:ee:dc:da:9e:
         1a:de:12:5e:06:6a:37:67:be:16:63:85:23:33:a6:bf:16:e2:
         e7:44:d6:77:79:ad:32:5e:6b:bc:8e:58:ed:9d:17:dc:96:bd:
         d4:e9:f5:2b:96:47:9b:41:1f:bf:bf:f3:eb:22:ce:54:ad:b6:
         40:d9:e6:cf:ec:c0:2c:14:30:8b:e4:19:30:e7:85:1b:1a:81:
         4c:65:56:6b:59:62:8e:dc:6e:0a:1f:e0:68:7d:2d:e5:79:b7:
         0e:09:3d:46:db:7f:a9:ab:eb:02:33:3c:78:ea:f5:51:f9:b3:
         57:6a:63:78:e9:13:2a:4a:5a:1a:d8:0b:fc:f3:d0:2e:08:10:
         93:2e:37:56:9a:4c:6c:1a:9d:99:f2:f8:78:a8:49:64:d5:46:
         f7:0c:dd:32:b9:e0:43:10:3a:2b:9c:20:a7:e1:bd:5c:60:38:
         c4:47:4d:9d:24:0c:b2:10:39:9d:ec:a7:d5:a5:8a:16:5f:45:
         85:94:d0:84:4f:3f:ed:f4:ed:c1:90:1d:74:bc:5f:2c:65:72:
         dc:db:b0:e1:92:00:48:10:c2:15:7c:21:fb:b2:ca:92:d4:89:
         71:ea:93:9f:10:da:e8:ea:4a:85:12:a2:d8:3b:66:79:b7:5b:
         91:6a:b4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:54:47 2025 by rpki-client