Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/e6bc8fdf-e537-3c1c-9aea-8017173e3a59.roa
File:                     e6bc8fdf-e537-3c1c-9aea-8017173e3a59.roa (raw, json)
Hash identifier:          Me6/Y8crbd8s+PJBEJB/WQ0Ur+MrDi6K5CLplMEKE3g=
Subject key identifier:   D0:53:AA:1B:C7:FB:8D:7E:04:9D:C4:2A:92:5D:89:E7:8C:E0:49:35
Certificate issuer:       /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial:       010D0C9F4328584B434CAF563EBB26C6951B9C80
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/e6bc8fdf-e537-3c1c-9aea-8017173e3a59.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     401243
IP address blocks:        2602:2b5:2c::/48 maxlen: 48
                          2602:2b5:2d::/48 maxlen: 48
                          2602:2b5:2e::/48 maxlen: 48
                          2602:2b5:2f::/48 maxlen: 48
                          2602:2b5:38::/48 maxlen: 48
                          2602:2b5:39::/48 maxlen: 48
                          2602:2b5:3a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:af:56:3e:bb:26:c6:95:1b:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=4b6bf0f8-da6e-42d5-bd14-c1f69c6962ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:03:d8:fc:e1:8c:26:f1:f8:4d:ce:1e:56:
                    22:57:39:f7:df:94:df:12:f8:1d:2c:e0:f6:d6:55:
                    b5:cc:1c:7a:f1:c7:80:ea:ec:b2:60:65:97:af:7e:
                    b0:b5:b0:a6:9b:a0:32:2f:4a:e5:34:15:47:90:3c:
                    69:a3:f0:d2:87:4e:69:d1:15:4c:05:6f:30:f1:e0:
                    f3:58:59:cb:ec:a3:51:ea:e0:78:32:e7:9d:50:be:
                    db:b3:d5:0d:a1:dd:19:75:21:4f:6e:d3:b2:68:b2:
                    e7:39:0a:3f:da:6b:e6:8a:3a:1b:68:da:cd:9c:90:
                    3f:8c:14:85:27:9e:53:52:3a:94:dc:92:b7:2b:38:
                    65:24:f6:3d:ba:d4:69:a9:e6:94:bc:24:7c:bb:c8:
                    e1:b8:71:e7:f4:bd:7b:91:05:a1:6c:27:cb:6f:da:
                    0a:21:2a:5c:12:bc:29:75:32:af:5b:2e:1a:ad:d1:
                    dd:3c:5f:c1:c0:0f:1e:ab:ce:5d:88:8c:85:d2:7e:
                    b2:0e:5f:10:3d:41:15:fa:7a:5a:b6:9d:3b:19:30:
                    29:fb:f2:88:38:25:10:cc:74:d8:6a:77:1d:bf:9e:
                    12:e2:7f:7e:d8:5e:51:f7:fb:eb:62:8b:b2:3e:1b:
                    f0:3f:11:06:41:87:13:d3:1f:21:f0:6b:6a:cd:e4:
                    f1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:53:AA:1B:C7:FB:8D:7E:04:9D:C4:2A:92:5D:89:E7:8C:E0:49:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/e6bc8fdf-e537-3c1c-9aea-8017173e3a59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl

            X509v3 Authority Key Identifier:
                keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2b5:2c::/46
                  2602:2b5:38::-2602:2b5:3a:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:63:08:ee:89:32:1e:fd:7b:de:9a:fc:e3:96:ef:a7:66:d2:
         41:c6:4f:34:fa:dc:69:7c:61:93:5a:cf:74:86:97:48:3b:dc:
         21:a1:18:04:c0:25:c0:40:43:22:e4:24:7a:a6:a9:55:7c:f3:
         16:89:39:02:eb:da:ea:af:77:bb:09:4f:14:ca:fc:e0:0a:00:
         00:1b:78:07:be:0b:9a:49:82:a9:d8:53:25:93:e7:20:1a:97:
         5d:69:bb:cd:d8:f8:53:48:ff:da:c0:66:8b:e4:26:79:fc:8b:
         16:dd:07:4d:9e:e3:21:0f:da:34:aa:af:0e:92:13:ff:ff:2e:
         1b:2a:d6:0c:39:1f:71:6f:06:b1:d9:9c:63:42:52:04:3f:1c:
         96:e6:72:66:2c:a8:be:95:49:ae:79:25:3d:41:70:b6:0e:13:
         32:fe:8d:ff:99:78:5c:2a:55:53:3c:ec:e9:c3:57:62:a2:50:
         01:6c:87:33:f6:f0:21:f1:90:46:d8:f7:22:15:fe:c4:ee:9e:
         95:a9:f1:26:78:55:6b:45:81:3d:43:f0:01:9a:d4:21:8e:fc:
         bf:b8:56:af:48:1d:b1:0f:4d:41:12:67:74:2a:f4:d9:9b:0a:
         b1:3f:14:b8:77:fc:d4:40:a1:82:5e:44:0a:f0:8f:bc:70:a0:
         a7:08:8f:a3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:21:19 2025 by rpki-client