Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/d0378387-a0be-357b-8116-7c390e43d55d.roa
File:                     d0378387-a0be-357b-8116-7c390e43d55d.roa (raw, json)
Hash identifier:          EF1f1u3nMtj8ZOtpJ7yN5faTDLpqxYPPHCWCszD8GdE=
Subject key identifier:   D4:D5:41:9C:53:2A:44:F2:26:93:13:EB:AA:87:CC:F3:D2:01:02:10
Certificate issuer:       /CN=5c5260f5-8262-4a34-b49c-e993dbadd1b1
Certificate serial:       010D0C9F4328584B84E77C0F37FE6A35FBAB29E0
Authority key identifier: 68:61:4A:21:BB:FB:DF:5B:84:00:F2:A0:40:DE:24:06:E3:EA:DF:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/d0378387-a0be-357b-8116-7c390e43d55d.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     398310
IP address blocks:        2602:fd4f::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:7c:0f:37:fe:6a:35:fb:ab:29:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5260f5-8262-4a34-b49c-e993dbadd1b1
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=744c974b-e898-4fb1-9619-84f2c8a4b0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:57:81:55:0c:e6:43:03:2c:23:39:9d:ee:78:
                    05:0b:11:c3:4a:48:15:c6:27:1d:8a:5b:e5:26:36:
                    fd:5b:72:33:5d:ad:08:f2:2e:6d:c8:a1:bf:6f:0f:
                    cb:db:ae:2a:60:0f:73:c9:c4:20:41:4f:4e:ab:73:
                    6a:2d:1a:84:a8:c4:7b:bd:b1:ba:02:dd:f5:9b:fe:
                    9d:aa:6d:92:e1:2d:f0:f2:61:ff:b4:96:a3:8f:c9:
                    06:70:c9:21:b1:58:6f:6b:6d:21:80:56:61:94:af:
                    23:6e:37:4f:31:6c:0d:0b:d3:ff:6b:2e:36:bf:67:
                    ed:ad:35:39:d7:5f:64:7b:54:9e:52:e8:4a:a1:d3:
                    e0:64:c7:23:0a:e9:22:4c:94:5a:57:44:0c:c8:5d:
                    6f:9c:c9:a1:f2:8c:9e:9a:e6:be:fb:34:fd:ec:7f:
                    91:d3:ef:01:f6:a5:71:82:26:49:9a:36:e5:95:60:
                    ab:cb:18:17:31:3f:9c:9c:ec:73:18:3f:55:96:6e:
                    8f:24:0f:31:a6:76:c2:52:46:80:96:2d:2b:14:49:
                    96:a1:92:83:07:ea:03:23:25:48:78:15:dc:e2:08:
                    3c:0f:2c:4e:27:78:28:57:5f:30:25:81:a1:e6:97:
                    83:32:65:a2:40:41:64:92:91:12:e7:48:f5:0d:f5:
                    cc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D5:41:9C:53:2A:44:F2:26:93:13:EB:AA:87:CC:F3:D2:01:02:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/d0378387-a0be-357b-8116-7c390e43d55d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.crl

            X509v3 Authority Key Identifier:
                keyid:68:61:4A:21:BB:FB:DF:5B:84:00:F2:A0:40:DE:24:06:E3:EA:DF:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd4f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:7c:35:33:5e:01:4d:e2:c5:ab:87:2c:8d:8a:a4:ec:6c:fd:
         fc:56:21:d0:ef:21:96:f6:20:92:e1:04:f7:3b:07:34:01:d7:
         e2:0e:c6:7c:de:a8:ea:02:d4:8a:f7:d6:2e:59:b5:93:86:fd:
         bd:d9:34:1f:12:b8:24:af:12:41:af:09:9a:b8:09:88:5d:38:
         62:aa:be:78:31:44:3a:cc:05:7f:8a:54:57:34:b8:d2:11:b0:
         c7:94:a2:77:0a:96:64:a4:08:14:9b:cf:83:d3:35:ef:1e:49:
         2e:e6:fb:e0:66:ac:94:69:4c:59:9c:9b:39:3d:44:3d:8c:66:
         39:b2:16:1e:eb:cf:1e:ef:3c:fd:0f:c7:8a:ed:48:07:41:06:
         34:4b:f2:ec:8c:94:3e:fe:f7:6d:d8:46:63:0e:64:4d:99:18:
         ab:ec:89:c8:88:c1:dd:68:1c:77:ad:08:fa:b7:6b:ad:eb:32:
         ca:c0:2c:f9:d4:8a:14:dd:d8:8b:3f:b7:03:a8:dc:37:75:68:
         98:34:db:80:fc:9b:9d:a3:ce:4f:85:3c:7b:b8:24:ac:07:48:
         78:72:a7:f6:f6:ad:3e:cf:da:11:51:b6:ee:46:cf:aa:1b:6e:
         2c:03:91:de:d5:9c:6f:c8:b7:25:e7:89:e0:22:49:65:c9:2c:
         84:f5:8f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:12:27 2025 by rpki-client