Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/83e053be-e67c-3e61-9877-60e586960fb9.roa
File:                     83e053be-e67c-3e61-9877-60e586960fb9.roa (raw, json)
Hash identifier:          lRxaIVlZVlaCTo7vndC6vXUV7GBHcsXHwTJ0OX16V4U=
Subject key identifier:   10:92:B6:C3:F0:97:B5:6C:29:77:07:91:6B:CE:BD:5A:12:22:2E:56
Certificate issuer:       /CN=8b56caea-2136-4342-baff-6f31268d4cc4
Certificate serial:       010D0C9F4328584B4E7707BED2594BDA585CC2C0
Authority key identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/83e053be-e67c-3e61-9877-60e586960fb9.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     203125
IP address blocks:        2602:faaf:1::/48 maxlen: 48
                          2602:faaf:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:07:be:d2:59:4b:da:58:5c:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b56caea-2136-4342-baff-6f31268d4cc4
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=e0b5536d-64b6-4c9a-b903-a370761e31fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:e3:ce:7b:a8:57:b1:f2:8b:c1:67:cc:06:
                    f0:79:48:8f:53:a3:94:67:1f:2c:d0:88:a1:79:4d:
                    db:31:0c:09:46:77:ef:cc:eb:f9:74:88:91:7d:76:
                    31:a9:1a:8e:6a:60:2c:b3:5f:72:fb:87:d4:b9:38:
                    78:47:28:ad:9b:77:cd:9e:8c:bf:d8:77:56:85:9c:
                    d7:c3:7d:d1:98:62:f8:9b:46:e2:e5:6f:8c:70:7d:
                    06:45:56:37:36:53:2c:2c:30:bf:72:e3:e8:a0:f6:
                    2c:30:43:2a:e5:6e:95:87:a5:0e:d5:0d:2a:e2:93:
                    86:55:27:71:85:76:40:ac:b6:b5:1a:14:c6:7e:80:
                    f3:b7:be:72:56:42:d5:8a:41:e7:1a:fa:ba:ec:00:
                    c6:bb:46:21:6f:3e:c5:03:e8:1a:7d:55:f0:67:cd:
                    bc:33:4c:07:69:5a:01:b5:32:88:6b:1e:8d:da:35:
                    50:97:a3:be:d5:6f:21:89:65:50:95:a1:85:98:f4:
                    51:99:49:c1:2f:44:86:c2:f4:44:15:5d:63:ce:43:
                    9d:7e:ec:11:cc:4c:19:8c:87:95:97:6d:77:e3:fc:
                    6f:27:bf:98:1d:a6:22:c0:4c:7b:85:35:03:ac:03:
                    ac:33:da:18:72:a6:38:6f:6d:4c:f0:34:b3:b8:2d:
                    d3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:92:B6:C3:F0:97:B5:6C:29:77:07:91:6B:CE:BD:5A:12:22:2E:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/83e053be-e67c-3e61-9877-60e586960fb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl

            X509v3 Authority Key Identifier:
                keyid:5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faaf:1::-2602:faaf:2:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:15:c0:57:9c:34:bf:05:56:33:01:b6:dd:aa:a4:6a:ab:26:
         95:e5:f1:99:fe:19:bd:2f:c0:37:57:0c:43:b1:a4:31:ca:97:
         43:57:7a:30:3f:c8:5b:31:88:33:9b:1d:61:a4:30:1b:b9:83:
         ee:c0:8c:d2:fa:22:83:38:6e:f9:ef:55:14:55:3d:6d:bf:b6:
         09:83:95:bf:a3:f1:e4:10:23:a5:bf:83:b3:2d:70:89:e3:11:
         f4:2b:1c:6c:0c:29:88:9f:7e:8e:32:b1:d2:33:8c:6f:28:e7:
         70:38:67:14:49:f1:dd:03:80:38:51:ed:72:ab:13:a4:4a:e1:
         42:0b:66:d4:60:0f:a9:c0:73:59:72:f8:e6:20:85:ac:ad:58:
         b4:02:30:dd:74:b0:4b:b9:b7:28:fe:90:e5:cb:b9:76:e9:1b:
         be:76:37:29:41:d7:e9:a2:d9:24:d5:36:6f:d2:2f:d3:52:7e:
         31:a0:65:09:ba:36:80:d6:2c:8d:fc:9a:61:7d:1b:d7:f8:2f:
         67:b6:4c:b3:02:1a:3f:f3:09:0b:d3:5d:6e:80:9a:76:9b:61:
         ee:25:c4:4c:61:6c:ff:50:1b:f8:5d:8c:38:bc:c0:67:6f:a2:
         82:5a:98:8a:31:ae:86:57:85:bc:22:81:b5:8e:e7:3a:ec:58:
         e5:17:9d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:56 2025 by rpki-client