Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5dce8184-c9c9-3635-bceb-804afcbed6f1.roa
File:                     5dce8184-c9c9-3635-bceb-804afcbed6f1.roa (raw, json)
Hash identifier:          Y2wwNV6f8imZjZH/6SkyEy+bE7K5LYCVMxnwJQhHIfc=
Subject key identifier:   08:07:8B:35:67:FC:B4:D5:2C:28:BF:9D:B2:09:0C:D3:9A:65:76:45
Certificate issuer:       /CN=5541e022-414f-45f5-9426-a7643db1ec8d
Certificate serial:       010D0C9F4328584B33F1A29FD469FF8EE3995A80
Authority key identifier: F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5dce8184-c9c9-3635-bceb-804afcbed6f1.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     149020
IP address blocks:        2602:fa08:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:a2:9f:d4:69:ff:8e:e3:99:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5541e022-414f-45f5-9426-a7643db1ec8d
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=a508a75a-0545-4903-8b8a-2f26572c7588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:55:70:cf:74:4d:5b:0f:bf:6e:ef:d6:10:e8:
                    01:4f:b9:dc:fe:3f:0a:ef:25:82:05:63:20:c3:6a:
                    37:9a:25:ab:25:df:9a:d3:5e:60:bb:9b:04:89:09:
                    48:62:ff:c4:db:4d:e9:ab:6c:7d:8f:d0:50:e8:db:
                    54:e4:d5:7f:8e:68:b6:a3:73:dd:9c:8f:87:de:cd:
                    d4:5b:6e:6e:06:be:97:24:f3:e4:89:f6:a3:eb:0f:
                    0c:ab:4d:3f:dd:bb:ae:45:90:91:a1:1a:82:3a:69:
                    88:8f:8a:6b:0c:0f:59:b1:ba:40:7e:eb:86:c1:6b:
                    89:59:c8:10:2b:13:39:44:17:18:e3:95:1f:92:c8:
                    0a:8a:c7:66:b6:54:07:ad:a9:c3:8e:f3:83:3d:90:
                    56:3d:74:77:75:f8:56:a9:5d:52:50:75:0f:67:c5:
                    e2:2d:c0:54:fb:73:ad:44:b8:95:c6:53:38:f2:03:
                    f2:d3:b0:57:57:92:26:c0:4b:17:a8:9e:64:7a:4c:
                    d0:a6:4e:4f:5a:50:9a:2c:cc:44:6d:0d:7c:ee:13:
                    d6:0c:19:1a:4b:77:34:f3:d0:17:1a:a8:3a:5a:a5:
                    01:8d:7e:a8:fa:e6:f7:3e:36:1d:80:24:12:ab:cb:
                    bc:62:5c:aa:0f:6d:6f:9a:cf:a7:b2:86:25:90:a7:
                    02:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:07:8B:35:67:FC:B4:D5:2C:28:BF:9D:B2:09:0C:D3:9A:65:76:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5dce8184-c9c9-3635-bceb-804afcbed6f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d/5541e022-414f-45f5-9426-a7643db1ec8d.crl

            X509v3 Authority Key Identifier:
                keyid:F5:72:66:9B:FA:2B:D5:E4:58:2E:1F:EA:1A:CA:67:24:96:6B:3F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5541e022-414f-45f5-9426-a7643db1ec8d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa08:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:dd:a1:51:9e:15:88:b4:fa:0e:d2:a9:49:a2:53:58:1f:bb:
         9c:fa:db:43:86:95:43:19:f1:63:34:4d:70:14:36:11:11:04:
         32:8a:c9:4a:e4:c4:db:c0:08:24:d2:cc:fd:d0:c5:88:00:74:
         8f:69:bb:a8:b2:45:e2:64:5f:65:bd:66:cf:d4:6b:8c:f5:cd:
         2e:58:be:f6:c1:d5:91:9e:82:a0:6d:ea:a6:fd:b2:5d:1e:94:
         e8:2e:e6:9b:c4:3a:25:14:35:d7:5f:8e:08:46:5e:5a:e7:63:
         72:96:e4:bb:97:d0:d8:1b:4b:8b:9a:d6:e8:1d:41:f9:5a:7f:
         04:4e:5d:83:e1:92:4b:c8:d7:09:1c:20:ad:dd:a9:25:cf:8a:
         84:5a:64:7b:22:26:05:a9:86:a7:97:db:ef:e3:cb:f0:76:f9:
         46:6e:7f:41:2e:51:8a:dc:66:c0:ce:cd:a8:3d:3e:6e:64:cd:
         2c:1a:dd:4f:7e:16:eb:a1:e5:1f:82:e7:fc:e7:40:5e:f6:0c:
         9a:de:1c:2d:cb:00:3c:9c:ec:57:a7:75:96:39:dc:2c:c5:af:
         b1:2e:a3:65:b1:ec:64:66:75:74:0b:3a:40:f0:45:8a:01:d3:
         0b:82:07:ab:3b:cc:82:a0:11:34:f2:c4:62:25:f0:f5:9f:bd:
         89:c0:be:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:29:54 2025 by rpki-client