Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/802c21f0-6b99-4fac-bc2f-67d0945b4b94/6dc99ad7-f16d-39e6-86eb-78eba8c5d60e.roa
File:                     6dc99ad7-f16d-39e6-86eb-78eba8c5d60e.roa (raw, json)
Hash identifier:          I/DU0FK9mUgvMfZmFhP+vKN1lR56++P/16vpEXJAQOc=
Subject key identifier:   87:24:6B:91:D5:07:60:2E:18:07:CB:59:D8:7A:3A:DA:A9:8A:E2:68
Certificate issuer:       /CN=802c21f0-6b99-4fac-bc2f-67d0945b4b94
Certificate serial:       010D0C9F4328584B503D4B59D867FFC5D411EF80
Authority key identifier: 94:D3:F4:CF:3D:18:C9:F9:EA:B8:79:01:5E:B6:46:51:B4:7F:F8:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/802c21f0-6b99-4fac-bc2f-67d0945b4b94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/802c21f0-6b99-4fac-bc2f-67d0945b4b94/6dc99ad7-f16d-39e6-86eb-78eba8c5d60e.roa
Signing time:             Thu 25 Sep 2025 16:15:52 +0000
ROA not before:           Thu 25 Sep 2025 16:15:52 +0000
ROA not after:            Wed 24 Dec 2025 17:15:52 +0000
asID:                     401977
IP address blocks:        2602:fa04::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/802c21f0-6b99-4fac-bc2f-67d0945b4b94/802c21f0-6b99-4fac-bc2f-67d0945b4b94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/802c21f0-6b99-4fac-bc2f-67d0945b4b94/802c21f0-6b99-4fac-bc2f-67d0945b4b94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/802c21f0-6b99-4fac-bc2f-67d0945b4b94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:50:3d:4b:59:d8:67:ff:c5:d4:11:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802c21f0-6b99-4fac-bc2f-67d0945b4b94
        Validity
            Not Before: Sep 25 16:15:52 2025 GMT
            Not After : Dec 24 17:15:52 2025 GMT
        Subject: CN=a7107df2-51ab-498a-a182-3ba6bd21dbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1d:bf:6e:1a:fe:c7:1a:5b:37:a4:e5:b6:f8:
                    f8:63:1e:f7:2d:12:26:94:2b:b7:1e:d8:cd:a7:01:
                    45:e1:d7:44:27:05:0a:27:66:9d:ac:f9:e6:41:5e:
                    b6:24:db:da:ac:88:3b:31:54:07:a8:76:4d:69:b7:
                    bc:92:b7:c9:68:5e:8e:1a:dd:ea:e4:82:9e:3c:dd:
                    c6:85:ea:73:95:da:18:72:96:41:98:43:9f:02:2c:
                    ad:11:d3:49:38:15:23:3c:21:a1:66:4f:e2:07:2c:
                    fb:34:b6:b5:5b:99:23:53:47:af:e8:42:69:69:aa:
                    89:04:00:46:a0:20:bb:55:25:cf:e4:42:90:a2:6b:
                    94:0b:c3:1b:af:3a:13:38:4c:23:ef:34:f7:54:50:
                    04:e8:8e:7d:92:1b:bb:b6:49:29:1d:09:ee:9f:46:
                    b8:3d:7c:42:a1:32:75:5f:37:5b:f4:b2:74:e3:87:
                    02:b9:17:dc:7f:5d:76:ae:e2:7f:50:f4:ec:c1:b9:
                    7e:85:b2:f3:2a:62:5a:31:a5:4c:28:e4:65:a2:93:
                    b6:79:27:3b:ed:79:74:6c:16:c4:7f:2b:2a:8f:c8:
                    91:6e:f0:6a:6a:81:8a:f2:f9:10:5f:c1:57:46:e9:
                    df:3a:b4:59:59:8c:ec:2a:08:91:f8:fc:ad:0e:8c:
                    dd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:24:6B:91:D5:07:60:2E:18:07:CB:59:D8:7A:3A:DA:A9:8A:E2:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/802c21f0-6b99-4fac-bc2f-67d0945b4b94/6dc99ad7-f16d-39e6-86eb-78eba8c5d60e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/802c21f0-6b99-4fac-bc2f-67d0945b4b94/802c21f0-6b99-4fac-bc2f-67d0945b4b94.crl

            X509v3 Authority Key Identifier:
                keyid:94:D3:F4:CF:3D:18:C9:F9:EA:B8:79:01:5E:B6:46:51:B4:7F:F8:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/802c21f0-6b99-4fac-bc2f-67d0945b4b94.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa04::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:fe:ab:5d:4f:cf:7c:1c:df:ff:39:09:51:60:2a:f6:0c:db:
         53:40:03:a2:f2:41:21:ed:39:d4:17:18:87:ea:c1:3c:d0:88:
         e8:ae:d8:eb:16:66:43:ea:a3:42:84:06:17:de:74:d5:aa:7f:
         8a:28:6b:cf:c1:36:79:80:ad:a1:34:1a:d7:e5:83:99:0d:e1:
         09:84:4f:62:55:b5:8e:d9:fe:bf:4e:88:0d:38:7c:ce:73:cf:
         40:74:2a:10:ed:a4:38:4e:0b:60:53:75:a1:5c:f9:8e:5c:cc:
         2e:75:a2:3b:49:8c:63:9c:b9:af:75:5a:58:f5:c2:a3:8b:ff:
         1c:0f:6c:f0:f7:d0:dd:a1:6a:2b:9a:ff:0f:2b:8b:22:0b:24:
         2e:25:d5:6c:02:03:ce:42:73:dc:15:f8:d9:d8:17:f3:7d:0e:
         f0:cb:89:70:5d:0e:8c:43:d5:97:f8:d0:0a:ef:1d:1f:cb:40:
         fc:bd:a3:a1:a4:a8:de:0e:86:56:ab:fc:2f:99:cc:ae:fc:b9:
         82:ec:e5:eb:07:00:06:69:4f:d4:6b:3e:69:15:7f:97:da:7f:
         50:59:26:be:2e:de:dc:08:4a:a6:76:f7:4b:ac:5a:d4:73:b9:
         bf:a7:ae:7f:c9:a9:67:e4:f9:e8:1e:d5:f3:f8:51:09:fb:52:
         63:fb:55:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:16:17 2025 by rpki-client