Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c/3b3d4011-27b7-384a-a0b5-68c64f0848ce.roa
File:                     3b3d4011-27b7-384a-a0b5-68c64f0848ce.roa (raw, json)
Hash identifier:          +mk+MxW/jufSZTh+rESi7e7FUQ77NxysgT/bWJKsHQo=
Subject key identifier:   7B:04:22:0E:8D:FE:C2:96:E2:F5:E3:7A:E1:8A:4E:FA:A3:F2:CC:91
Certificate issuer:       /CN=b9ee24c4-7325-4cbe-8291-8c22f4eef30c
Certificate serial:       010D0C9F4328584B885C8285B4FCF39787AA5E80
Authority key identifier: FA:06:55:DD:F2:23:C4:68:D6:AE:16:EE:25:04:F2:9D:B9:5A:9E:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c/3b3d4011-27b7-384a-a0b5-68c64f0848ce.roa
Signing time:             Wed 15 Oct 2025 15:12:17 +0000
ROA not before:           Wed 15 Oct 2025 15:12:17 +0000
ROA not after:            Tue 13 Jan 2026 16:12:17 +0000
asID:                     14618
IP address blocks:        2602:f517::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c/b9ee24c4-7325-4cbe-8291-8c22f4eef30c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c/b9ee24c4-7325-4cbe-8291-8c22f4eef30c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:88:5c:82:85:b4:fc:f3:97:87:aa:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ee24c4-7325-4cbe-8291-8c22f4eef30c
        Validity
            Not Before: Oct 15 15:12:17 2025 GMT
            Not After : Jan 13 16:12:17 2026 GMT
        Subject: CN=7ed13f99-7176-43f0-868c-103f0d9a9674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1e:76:45:6d:7a:e4:d8:d8:c0:c8:21:12:70:
                    d7:1e:d4:1e:2c:70:aa:34:7e:9e:ff:aa:62:84:ea:
                    d0:3f:6d:16:41:96:41:93:fc:92:0f:a3:e9:d6:22:
                    b9:e3:a5:19:26:aa:7a:a2:b6:55:e6:d0:f5:15:ee:
                    76:11:3d:38:ad:92:05:de:c2:f1:2c:b8:51:a9:4c:
                    6f:69:1d:07:50:7d:f7:eb:d5:05:06:99:f2:4e:38:
                    a9:5c:ce:48:93:88:4e:f0:5f:cc:50:f9:f8:40:32:
                    11:88:46:79:86:c9:8a:fb:e2:8f:ed:68:62:17:14:
                    21:5c:c2:2e:bb:48:27:57:78:cb:d8:45:a3:64:84:
                    98:26:70:ff:1f:c5:10:06:4a:30:67:12:68:50:e6:
                    93:07:91:d3:3b:dd:0d:e7:fc:b2:bd:2c:49:ad:ef:
                    b7:89:d5:b4:f9:06:4e:90:f8:5a:55:16:ec:6f:a0:
                    a2:b0:54:1c:97:2b:3b:6d:c6:59:0c:54:4d:59:1c:
                    13:38:29:e4:89:e0:88:bc:62:e1:2f:c9:01:f0:6c:
                    6c:7f:eb:3e:73:4f:55:2b:b2:51:5c:19:5f:27:e4:
                    7f:22:d8:16:58:9f:80:92:80:39:42:a0:90:63:e6:
                    d9:f1:8e:a6:c3:f9:74:63:43:d6:04:cb:b0:74:13:
                    73:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:04:22:0E:8D:FE:C2:96:E2:F5:E3:7A:E1:8A:4E:FA:A3:F2:CC:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c/3b3d4011-27b7-384a-a0b5-68c64f0848ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c/b9ee24c4-7325-4cbe-8291-8c22f4eef30c.crl

            X509v3 Authority Key Identifier:
                keyid:FA:06:55:DD:F2:23:C4:68:D6:AE:16:EE:25:04:F2:9D:B9:5A:9E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b9ee24c4-7325-4cbe-8291-8c22f4eef30c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f517::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:50:38:cd:98:30:3f:62:b8:ad:dc:ac:e9:af:18:0c:a9:d4:
         2a:bb:cd:a2:8a:7c:c4:03:31:be:2f:b2:9c:e4:ec:f4:df:7c:
         3d:5e:65:56:72:b5:7c:c1:26:59:13:9e:db:2c:a4:88:ea:ca:
         af:c7:77:ce:bf:61:a9:be:75:8d:fe:98:22:84:65:23:54:17:
         71:5d:aa:bf:b6:f3:80:28:60:5c:d4:a4:61:fc:ab:fb:fb:02:
         2c:51:20:1f:c9:f8:b5:1e:77:0e:8c:2f:57:5c:6f:18:ed:87:
         d5:95:5b:1e:71:55:ea:ef:32:18:49:7e:e3:0a:b0:c8:8b:8c:
         1e:7f:ee:70:01:e0:54:be:42:1d:6c:ab:cd:67:c7:17:b8:22:
         d9:3e:e7:ff:fc:81:4f:e2:94:06:fe:ae:a3:7b:6d:bc:9b:d8:
         9b:bb:b3:ac:9e:8b:d3:af:00:b9:e4:11:bd:4d:ed:41:a5:19:
         e2:e6:59:50:f0:3f:28:1f:2c:d4:11:1f:c3:f7:12:c6:c0:eb:
         9f:c7:48:bc:07:af:1e:e4:ff:06:e1:ad:ab:d6:90:8d:28:f3:
         0d:fc:44:b9:1c:71:da:bf:8b:79:fd:fb:26:2a:ba:32:88:9c:
         dc:b9:85:81:f7:b5:39:be:56:dc:e0:d2:fe:37:eb:4c:98:57:
         02:b2:7e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:48 2025 by rpki-client