Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c7cf8b1d-dbcb-31b0-85ac-f21982c684bb.roa
File:                     c7cf8b1d-dbcb-31b0-85ac-f21982c684bb.roa (raw, json)
Hash identifier:          FReTRvfPV79fu7OD9NqFlsQSEww5+0mNrDqt10T5vCc=
Subject key identifier:   AD:DD:0D:FE:D4:36:6A:B0:5F:90:8F:6D:F5:78:82:4F:23:67:A5:F4
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584B7F5213A14B6F95997772C6D8
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c7cf8b1d-dbcb-31b0-85ac-f21982c684bb.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     38047
IP address blocks:        2602:f83b:886::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:13:a1:4b:6f:95:99:77:72:c6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=5ece6bdb-c5ef-493a-842a-d357527f0507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:7a:fd:f9:9f:98:be:e4:0d:05:a7:cd:79:
                    65:5b:8c:92:b4:25:be:ef:9a:ba:19:b8:76:50:97:
                    8b:0f:df:d4:4a:7d:67:d2:b0:57:73:a6:a7:7e:81:
                    29:b7:ca:7b:df:52:91:58:4b:6b:d0:cd:35:85:c2:
                    3c:4e:4a:4c:4a:df:91:cc:b6:06:d6:68:48:43:9f:
                    54:5a:be:a4:c9:fb:3d:58:6d:65:e0:24:40:72:54:
                    77:71:52:84:8e:e3:55:79:b8:e6:db:1b:4f:64:65:
                    ed:80:5a:fe:99:24:65:70:63:76:0a:82:29:63:f1:
                    f2:c4:99:66:1a:b5:06:01:e6:55:38:db:6c:74:0c:
                    dc:49:e4:f5:69:60:bd:6e:e1:b1:03:67:ad:1d:e2:
                    59:fd:cf:f0:ef:df:24:25:17:94:05:68:82:83:c6:
                    1e:34:f7:8e:e9:62:9b:57:08:58:8e:0b:4d:10:87:
                    db:aa:15:56:38:c0:1d:52:67:b7:b4:25:86:13:bc:
                    ff:87:46:44:8b:ae:9f:46:cd:47:8a:33:56:6f:a3:
                    e0:bb:fe:70:f9:c2:89:d1:87:69:2d:19:c0:6e:85:
                    00:47:7d:c6:73:11:06:93:74:16:65:40:6d:42:3d:
                    65:e9:f4:c6:e5:78:ce:2a:59:7f:55:fe:73:a3:57:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DD:0D:FE:D4:36:6A:B0:5F:90:8F:6D:F5:78:82:4F:23:67:A5:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c7cf8b1d-dbcb-31b0-85ac-f21982c684bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:886::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:75:de:df:2f:8a:67:34:01:22:b4:ed:ff:66:d2:ec:c6:c9:
         45:b4:e8:e7:c8:db:76:a3:0b:85:5c:81:46:42:d7:19:4b:90:
         d8:1c:f6:da:49:e0:e9:71:28:5e:43:6f:57:ac:11:74:0d:a2:
         10:8c:4f:5f:c8:53:6a:32:be:9e:a1:d2:74:8c:fe:45:68:7f:
         be:6e:35:60:8d:9f:87:75:8a:74:88:4b:27:b3:b6:d6:1b:ed:
         dc:ce:27:65:c4:c4:be:d2:36:95:cf:d2:0d:d8:7e:ae:58:14:
         02:9d:50:6e:46:98:0b:c5:8d:4f:d1:98:41:75:38:ae:ef:52:
         a7:0f:58:b2:55:ca:81:57:51:9b:ed:fc:6b:d2:b3:58:c8:19:
         62:80:e4:ed:e8:be:b6:40:47:5f:27:a9:91:90:cc:21:1f:fa:
         39:5a:80:56:35:b9:6f:8f:b5:b1:62:99:2b:91:02:81:d0:1f:
         8b:fb:15:62:72:4f:76:8c:ba:ae:8d:d1:c6:0d:b8:96:05:c5:
         c8:d5:be:d3:75:9c:05:a7:fa:e1:49:4f:e9:e1:86:65:68:a9:
         d2:d1:fc:5f:a3:eb:a0:1b:10:b6:48:cb:74:a7:35:02:43:49:
         fd:bd:b7:34:e3:83:9a:e7:5e:c8:a6:ec:ee:bb:06:6e:d3:cc:
         d3:4b:f4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:00:17 2025 by rpki-client