Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/efdc3ac8-cafe-3dec-8426-7c8a1eecbda5.roa
File:                     efdc3ac8-cafe-3dec-8426-7c8a1eecbda5.roa (raw, json)
Hash identifier:          jnR5vPxe+RitbhrLXl3EYcUCwewKdMTr3WTWWMeqR6c=
Subject key identifier:   8A:A8:F8:5A:F5:39:76:72:25:1A:8D:FF:F9:5A:1C:4A:DF:B7:27:13
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F4328584B434C67608DB417D547535940
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/efdc3ac8-cafe-3dec-8426-7c8a1eecbda5.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     396908
IP address blocks:        2602:f956:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:67:60:8d:b4:17:d5:47:53:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=82bdcbf4-9d4e-4abd-ba44-41e8a60b4902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fd:1b:9e:59:5c:22:d5:de:2d:59:e8:ac:40:
                    d0:1b:c5:50:b3:3d:5d:6a:ae:d8:5c:b8:60:56:4a:
                    7f:9d:01:b4:f6:13:4e:ef:7e:ab:27:51:b7:ba:e8:
                    aa:32:6d:fc:9c:57:52:92:70:75:67:d9:ab:eb:15:
                    48:9e:77:82:62:94:9a:4a:e9:79:c3:b8:a1:7e:80:
                    7e:03:14:83:2e:ce:7b:68:53:e4:06:4d:94:44:b3:
                    8a:57:07:b6:10:17:01:9d:5a:47:5b:9a:e7:e1:2c:
                    93:ac:1f:18:c3:a2:1a:bd:76:2a:fe:06:f5:e3:c0:
                    54:c5:5f:78:3c:12:d2:9d:c7:31:06:92:7d:1c:c5:
                    b7:8e:de:1a:d9:4e:7a:b0:d5:74:08:00:76:b6:f6:
                    40:01:7a:9b:00:7e:4e:c7:5a:37:ee:74:b3:12:2b:
                    5c:7e:fb:0f:a4:7f:a8:c0:7b:94:7c:28:97:5e:47:
                    a7:b4:f9:bf:2b:ba:b0:6e:c4:79:7d:be:72:e1:01:
                    cd:46:19:7a:23:fd:26:cd:ea:ca:cf:fc:5e:0b:22:
                    f6:52:fd:1c:ca:63:18:a9:b2:07:2e:56:90:c8:1a:
                    37:1c:f3:81:26:80:f6:44:83:a7:2f:c9:46:b0:08:
                    e5:ec:7e:4e:53:40:b1:7e:67:c1:c4:c6:44:b9:79:
                    e1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A8:F8:5A:F5:39:76:72:25:1A:8D:FF:F9:5A:1C:4A:DF:B7:27:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/efdc3ac8-cafe-3dec-8426-7c8a1eecbda5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:f3:8d:77:07:44:36:47:f0:80:d5:5d:60:5e:be:96:b4:97:
         1e:9a:68:d9:ac:fe:dd:cf:d9:9a:d9:2a:a8:34:82:b1:89:bc:
         d1:34:d3:de:a4:7a:20:00:b5:0c:2d:c6:c6:a8:19:60:73:38:
         c7:71:44:a7:34:f1:2a:b0:58:e7:21:6b:d0:56:22:42:59:57:
         e3:51:85:b6:d8:e3:61:c4:e8:af:a8:5a:c8:b5:61:18:60:a5:
         79:b4:ba:a3:b9:e8:c0:b8:e0:49:39:72:52:43:3c:7a:0e:4b:
         25:2d:ff:cc:d8:a5:e0:a6:f1:ad:01:c9:e9:d8:57:b0:53:e9:
         3b:9e:86:8d:9a:82:36:37:b5:82:73:54:66:a2:51:8f:22:f2:
         4e:10:67:f2:1d:e2:aa:34:4c:4d:e7:64:d9:ec:5a:27:72:ef:
         01:3a:66:51:c0:13:cc:9e:2d:45:94:2f:ff:b5:16:e2:3a:91:
         2c:4d:f3:ae:50:54:33:85:38:50:f1:7b:47:0e:be:76:0e:5b:
         37:e7:be:37:d8:3d:08:16:86:dd:47:f8:0a:4c:92:c9:1d:62:
         b7:2a:f9:81:de:66:24:30:eb:ec:15:81:0b:e6:78:f6:ed:73:
         23:9b:1b:a6:e4:28:e8:5b:28:e2:f4:de:a3:3a:13:1a:7f:4e:
         35:f3:79:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:08:00 2025 by rpki-client