Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/e66ad57e-e8fc-3ec5-ac6d-365072e68792.roa
File:                     e66ad57e-e8fc-3ec5-ac6d-365072e68792.roa (raw, json)
Hash identifier:          vKDtRvnldVP0JCFQSU0GvZvat+8guE0dTqWZL7Qnmow=
Subject key identifier:   E7:03:18:8A:B1:85:EA:A2:B6:4E:50:F3:81:FC:E8:5E:53:51:08:23
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584B62023D6989A8C7BDF6D79300
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/e66ad57e-e8fc-3ec5-ac6d-365072e68792.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     151194
IP address blocks:        2602:f9f6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:3d:69:89:a8:c7:bd:f6:d7:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=6411e9ed-3a3a-4c9d-a3f9-0d455303a9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:09:36:c8:1f:25:8a:cd:e9:58:f9:11:16:01:
                    7f:06:43:f1:51:07:59:d2:f1:9a:38:06:cb:11:93:
                    e8:4a:71:13:ba:fb:c8:14:ca:d1:26:c9:08:8c:6b:
                    d1:7c:4d:6c:95:18:b4:4c:2d:d2:c4:1b:a5:78:96:
                    1b:26:70:00:4a:61:54:88:75:ca:5b:a6:a6:dc:93:
                    66:99:64:01:b8:5c:d0:e1:88:b3:42:50:c7:06:d7:
                    0d:01:74:ea:d9:f9:60:9b:eb:9b:f1:e8:65:31:10:
                    7f:91:91:e4:da:8c:72:79:58:a4:6b:1a:aa:87:38:
                    6f:88:34:d4:06:c6:1e:14:b4:30:90:ff:ec:5d:b7:
                    6f:f1:a2:4a:1d:84:d8:0d:8a:00:8a:58:e2:3a:8e:
                    b5:ea:27:3e:61:ee:97:ba:75:df:ca:69:dc:a3:6c:
                    8d:94:8d:2c:c9:38:78:b1:bd:c8:ba:66:3b:68:ee:
                    06:b1:a1:f5:a4:08:1c:80:ad:cf:d3:96:75:f9:67:
                    91:7a:e8:bd:28:0b:bf:27:22:ab:29:e9:7a:b3:ec:
                    3e:f0:5d:30:41:f8:c7:c8:cc:22:57:2f:f9:de:bc:
                    58:13:71:40:a1:d7:af:de:62:89:66:ae:a6:86:e6:
                    3f:f8:13:c2:f3:7b:0b:c3:de:7d:a2:03:38:65:cd:
                    86:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:03:18:8A:B1:85:EA:A2:B6:4E:50:F3:81:FC:E8:5E:53:51:08:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/e66ad57e-e8fc-3ec5-ac6d-365072e68792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:2a:3c:12:da:43:76:b8:cc:ed:b9:52:b2:94:88:08:44:56:
         30:6a:d0:49:ac:fe:d1:24:f8:09:79:8c:3d:6e:d6:e6:14:72:
         a7:38:ce:ce:ca:24:5c:f6:99:0e:d4:f2:8c:76:e2:4d:d4:49:
         d2:81:83:98:c9:16:7b:72:9f:c3:14:d1:3a:24:71:1e:58:63:
         16:50:4d:23:ca:f8:1a:ed:13:d3:85:74:78:7d:bc:62:bd:fe:
         69:ce:59:1b:01:0b:ea:a9:55:c8:43:ea:22:d4:2a:70:ef:fa:
         4c:19:e0:40:b2:09:dd:28:5b:32:77:c9:93:3a:15:08:98:25:
         f0:f4:68:55:4a:83:73:0e:c0:7f:92:d3:3f:5c:89:7d:35:04:
         3a:ef:a6:9f:91:18:2a:0d:80:b2:73:f4:d6:fb:ea:53:99:56:
         ba:90:23:1a:83:93:d0:16:8e:6e:b1:01:0f:5b:ae:db:0b:d2:
         1f:9a:13:86:72:cb:3f:29:70:ab:74:ab:c8:35:5a:f7:d3:1b:
         b8:96:04:8f:fd:e4:2c:8d:2a:db:ff:23:65:f4:a0:35:b8:0d:
         9a:a8:ea:60:3f:63:da:cc:3b:4b:62:cf:2e:1a:3e:00:dc:e1:
         f1:29:8e:c2:e9:13:d4:f7:c9:f8:8d:b2:f8:85:8c:2a:40:ea:
         6c:73:ee:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:49:41 2025 by rpki-client