Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/7be5e84b-d6be-3ff5-b9a4-b61f812305e2.roa
File:                     7be5e84b-d6be-3ff5-b9a4-b61f812305e2.roa (raw, json)
Hash identifier:          UgvtgwpyugPHCEiYNlplIULwfM1dIxi98O8/CrFtBV8=
Subject key identifier:   BA:F9:84:6D:24:54:C2:DA:DC:E9:31:C6:73:E1:CB:ED:B1:FB:87:47
Certificate issuer:       /CN=df5adac7-ed86-4b24-911d-716f2c94711d
Certificate serial:       010D0C9F4328584B81E10B787CE1BF1D5F530F40
Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/7be5e84b-d6be-3ff5-b9a4-b61f812305e2.roa
Signing time:             Mon 13 Oct 2025 11:00:25 +0000
ROA not before:           Mon 13 Oct 2025 11:00:25 +0000
ROA not after:            Sun 11 Jan 2026 12:00:25 +0000
asID:                     214439
IP address blocks:        2602:f92a:a473::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:81:e1:0b:78:7c:e1:bf:1d:5f:53:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d
        Validity
            Not Before: Oct 13 11:00:25 2025 GMT
            Not After : Jan 11 12:00:25 2026 GMT
        Subject: CN=1205141e-e8ff-400d-8734-b497583cdeac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:d1:c8:1e:80:21:6d:30:85:4a:25:75:b8:
                    9a:22:92:38:0a:48:96:11:b9:2b:2f:6c:46:60:f5:
                    8b:79:a2:f4:ad:92:2a:38:0f:cc:2c:5c:a4:94:f4:
                    ff:58:c3:ae:7f:d4:ca:77:88:85:b8:02:29:32:35:
                    f7:0c:0e:ea:0b:1a:94:c0:92:78:db:7b:74:9d:3d:
                    00:38:03:67:f0:d4:50:94:26:c6:b4:de:8e:07:52:
                    df:d4:8d:01:eb:e8:68:b4:04:3c:4e:fc:89:d7:48:
                    56:78:8b:52:37:47:64:88:89:48:7f:00:da:5c:6b:
                    9e:68:6e:49:ab:53:2a:2c:ab:51:1e:a0:0f:b8:c5:
                    3d:5f:bf:80:b3:45:39:59:7c:ff:9f:fc:26:2c:39:
                    16:90:63:f1:2d:59:49:9a:81:ad:2c:6d:a3:a1:cc:
                    09:07:0e:25:69:ff:31:e5:47:fb:47:fe:ff:2d:7b:
                    7a:b9:9f:ff:08:ff:3a:82:2a:1c:f9:c6:70:cd:88:
                    a1:4c:a0:c5:b7:8e:20:91:8a:f9:4e:0e:ac:84:73:
                    dc:24:43:72:14:2e:b2:2c:d0:4d:a1:93:fd:21:4d:
                    85:3e:0e:51:84:04:b6:49:ab:8b:a5:d2:2d:55:bd:
                    66:eb:32:ef:d4:ec:47:a3:f6:af:a6:bc:a8:5f:54:
                    06:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F9:84:6D:24:54:C2:DA:DC:E9:31:C6:73:E1:CB:ED:B1:FB:87:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/7be5e84b-d6be-3ff5-b9a4-b61f812305e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl

            X509v3 Authority Key Identifier:
                keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a473::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:5a:48:b2:5c:d2:3a:c9:85:3a:e7:8a:b4:04:5e:11:0c:9c:
         c9:62:65:3b:a0:65:cf:0b:a0:9a:df:69:52:2b:63:e0:da:91:
         3d:42:12:5b:de:e5:60:5e:5b:df:74:17:2e:ec:6f:94:65:d6:
         29:81:c1:58:88:e6:32:21:01:65:1b:00:d7:d3:2f:f5:ac:1e:
         78:da:d2:aa:98:45:aa:3e:e7:c9:7d:f8:f9:64:18:80:00:25:
         d1:6c:3f:24:19:05:90:5a:73:6a:a2:f7:60:f6:61:9c:23:22:
         ec:c4:36:93:d2:50:3b:7c:b0:08:61:79:2c:e2:fc:01:5e:27:
         de:9a:57:d0:9a:27:f4:61:36:f3:1c:a9:14:61:66:0d:03:59:
         c8:4b:73:60:8f:3c:ae:78:b0:8d:93:40:e4:59:d3:d6:f9:d8:
         21:1e:52:51:9c:dc:d0:d1:64:26:67:6b:8e:aa:b0:1b:27:5d:
         7e:6c:1c:ab:e0:8b:f5:3e:b1:f7:79:c2:23:f1:a0:e9:43:0e:
         cd:57:33:2a:58:95:c9:a5:b4:0e:05:42:00:05:7d:e0:c1:98:
         54:9e:fe:b2:7b:f7:64:26:9a:88:6c:8e:5c:d5:67:9c:bc:f8:
         5f:86:4b:6c:46:cf:4c:56:af:6a:5e:67:59:c7:bc:58:48:58:
         36:ac:60:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:59:36 2025 by rpki-client