Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/56ef51ad-5c96-3514-901e-7d87c5eec06b.roa
File:                     56ef51ad-5c96-3514-901e-7d87c5eec06b.roa (raw, json)
Hash identifier:          Tm2P09kTVgAhNAeBspfg0I0zn8Ytni27Hx6Zahw2a3o=
Subject key identifier:   AB:D2:B5:86:7F:86:0E:F3:30:02:31:D5:23:C1:CD:C8:65:76:5A:E2
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584B7F520D71D4471D8B16BE96E0
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/56ef51ad-5c96-3514-901e-7d87c5eec06b.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     62517
IP address blocks:        2602:f83b::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:0d:71:d4:47:1d:8b:16:be:96:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=b191f1ce-0224-44b7-825f-40533e474533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:95:a7:17:56:90:47:8b:bb:79:e4:8e:07:43:
                    c3:bd:02:a2:71:00:fe:3c:5e:7f:bd:3a:e4:47:8a:
                    a0:86:ea:fc:79:40:72:33:08:da:fb:7f:6c:16:e3:
                    d3:1e:43:b3:dd:2a:df:46:00:59:fb:9f:fb:86:96:
                    ca:83:9a:52:a8:0d:1e:ef:a4:16:bb:54:93:a7:e3:
                    e6:10:8f:7d:9c:90:d7:24:1b:ba:14:a9:2c:4d:b4:
                    86:65:1f:49:a4:6e:c8:1b:25:f4:da:72:9e:93:50:
                    49:77:23:1f:7e:9f:07:b7:21:27:da:89:9f:fa:12:
                    53:bb:15:55:c7:09:14:20:18:ed:75:db:7f:84:6c:
                    6c:b0:f4:04:3c:05:63:d2:11:af:b5:78:a2:c5:23:
                    e7:07:b4:56:63:90:4d:ec:87:b1:40:c2:cd:31:37:
                    7c:43:f5:fa:25:98:9f:47:c6:70:a5:f9:16:ec:bf:
                    c4:59:03:da:93:e7:c5:94:9b:29:90:43:26:8e:ad:
                    ef:ab:bc:46:91:0a:aa:ea:a3:83:13:75:55:8d:9f:
                    91:75:69:fb:73:06:11:5f:77:36:a4:c6:61:3b:27:
                    7a:25:d0:9e:15:ed:ca:6d:97:0e:4d:ec:3c:a1:18:
                    c2:49:49:2a:b1:ab:8b:72:71:d8:cd:8b:fd:a6:04:
                    ab:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D2:B5:86:7F:86:0E:F3:30:02:31:D5:23:C1:CD:C8:65:76:5A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/56ef51ad-5c96-3514-901e-7d87c5eec06b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:02:5d:4e:ae:03:1a:56:96:aa:0f:1e:3e:4b:c8:98:25:67:
         9c:b2:60:d1:dc:d7:f6:20:8f:90:29:ca:6e:e5:b6:17:c6:95:
         53:0a:80:5d:93:de:5a:8e:23:8e:ef:fa:61:99:f8:63:09:f9:
         2e:38:77:c7:3e:3a:df:da:b5:e8:60:28:6a:b4:55:00:d5:56:
         8a:d5:7d:c7:76:d3:58:99:7c:8a:92:01:0b:58:e7:e1:85:4a:
         e0:4f:ad:86:46:31:6c:93:58:b5:91:7f:01:44:be:e1:24:b7:
         5a:15:a2:1f:14:f6:8c:82:05:79:3e:d8:ad:49:c7:7e:57:b3:
         fe:b2:88:cc:6b:6a:1f:e5:a4:aa:5b:56:8f:e8:cd:bf:aa:96:
         65:18:bf:86:81:5a:d6:ff:05:12:62:b0:97:cb:3d:f9:63:bb:
         75:bb:68:8f:4f:94:b2:56:ea:dd:32:27:8e:05:51:30:da:12:
         78:19:1f:ca:52:3d:4d:37:ca:ef:00:61:13:aa:1e:f3:4c:15:
         15:f1:23:ce:72:bb:3d:f3:01:f5:8f:a4:1a:69:42:61:fb:d7:
         ef:5e:e4:dd:09:6e:d5:64:60:a0:cd:14:9d:c0:e7:a6:d3:a9:
         e5:67:47:7a:c9:69:78:56:43:73:e7:f8:d1:fe:0a:a3:16:2d:
         40:07:ac:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:43:49 2025 by rpki-client