Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa
File:                     8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa (raw, json)
Hash identifier:          1wCh9PJ3UFaVNRKIms5AN2eVRc2/i4ZwthTvemKvsAQ=
Subject key identifier:   5B:9C:31:25:AC:BF:E7:4D:1E:57:A4:15:E6:E7:E1:6E:AC:45:0B:9C
Certificate issuer:       /CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59
Certificate serial:       010D0C9F4328584B7F5210A3D8F7A379A9009170
Authority key identifier: 0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     23077
IP address blocks:        2602:f9aa::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:10:a3:d8:f7:a3:79:a9:00:91:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=be2d2673-06b6-4bf5-b236-f06acad6ad6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:b7:b4:74:e8:fc:cf:8b:60:15:b3:c8:bf:
                    61:18:97:84:bb:7b:ff:f4:b4:3b:8c:9c:9e:36:cb:
                    59:5d:79:22:b9:e8:48:eb:27:c6:97:f2:2f:a0:99:
                    d4:0e:16:b1:34:73:1b:60:77:99:3e:d7:57:b7:29:
                    ec:9d:b8:d5:7d:8e:d7:ee:a5:22:c3:28:88:e2:6d:
                    94:c0:5f:89:84:74:28:43:f0:38:93:63:c6:8d:11:
                    38:6b:ae:8a:7b:19:17:9c:65:3f:c9:32:fd:48:32:
                    07:ce:be:dc:9f:ba:34:84:e8:fe:52:bd:cc:4e:1b:
                    cf:b7:76:df:60:d8:e4:f8:3a:09:ae:93:93:54:dd:
                    eb:8c:ac:be:c2:52:bf:c9:76:3b:2a:09:47:4d:7f:
                    ad:e4:6c:df:42:6b:fd:10:69:63:40:9f:3e:73:60:
                    5d:ba:8e:88:9a:45:c2:3f:45:5c:61:48:2f:02:7e:
                    fe:88:77:83:ed:a9:8f:a9:07:13:03:bb:15:5b:e2:
                    f2:6c:5c:a0:d3:74:ad:e2:05:20:5c:50:a9:3b:88:
                    b5:bd:bb:bd:34:3b:47:dd:19:5a:57:87:35:4a:a6:
                    8e:81:ce:d6:a9:83:2d:fb:2b:29:dc:99:b8:63:a5:
                    3d:56:6e:d3:43:4c:4e:56:53:9c:5f:2d:1c:a5:41:
                    2a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9C:31:25:AC:BF:E7:4D:1E:57:A4:15:E6:E7:E1:6E:AC:45:0B:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/8447c4a2-c4ab-3b5e-9bc5-2908a1e396e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.crl

            X509v3 Authority Key Identifier:
                keyid:0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9aa::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ad:a8:8b:28:81:23:67:ca:f9:39:00:cf:2b:a0:6a:ba:69:
         7c:b9:88:df:50:7e:23:25:5b:8c:ff:4f:37:c2:c8:9e:50:ac:
         c3:55:90:3e:97:9e:b5:7d:6d:5e:4f:d1:e5:d1:e1:8a:e9:21:
         09:28:f0:30:bc:cd:27:e0:88:c4:16:64:e6:53:a5:bb:f0:00:
         dd:92:68:8d:07:41:c8:fe:7f:37:be:44:02:63:34:28:e8:44:
         bf:69:a3:cd:0a:3a:c0:e1:1d:fc:ca:1d:e1:f7:e9:29:9c:b2:
         07:00:a5:3a:42:75:17:7b:3d:cc:c3:5d:10:5e:3c:6d:16:6d:
         48:9f:4d:7e:c0:e7:f6:d2:bb:96:66:ec:41:38:15:f7:4f:37:
         a9:62:03:0d:6d:19:32:34:9a:c5:a3:33:3d:6c:1e:12:a7:48:
         69:d4:c9:8b:c4:08:fb:d1:fc:24:1a:cb:05:43:5a:4e:fe:52:
         38:57:fe:34:6c:e8:86:06:46:c9:7f:65:a3:14:a7:b1:d0:66:
         ea:72:2e:d8:bb:a2:ec:eb:cf:31:ae:dd:ce:d8:86:8a:f7:7e:
         2d:6b:ee:a5:92:0d:8f:ac:8b:df:57:ef:23:c7:b2:91:c0:be:
         46:31:22:75:5a:1a:28:3f:4e:5d:89:01:72:9f:26:ab:ad:e7:
         03:d2:9c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:06:21 2025 by rpki-client