Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/678b3993-91f5-38e4-8904-da250d8e607d.roa
File:                     678b3993-91f5-38e4-8904-da250d8e607d.roa (raw, json)
Hash identifier:          fxjgYwQVjMqsAV+FawoTxexHudAbjxfwVK1ofzlgXls=
Subject key identifier:   A1:2B:6B:21:61:02:CE:91:10:5D:FA:14:08:C8:7A:5F:92:F3:76:1A
Certificate issuer:       /CN=9e2b7dc4-1844-4e70-989b-5e446f8cc70f
Certificate serial:       010D0C9F4328584B4A4737FDFD7E169F0AF5AD80
Authority key identifier: E7:D5:3C:62:27:DD:CB:83:61:D5:40:ED:2E:92:C0:56:38:63:A4:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/678b3993-91f5-38e4-8904-da250d8e607d.roa
Signing time:             Tue 23 Sep 2025 13:00:40 +0000
ROA not before:           Tue 23 Sep 2025 13:00:40 +0000
ROA not after:            Mon 22 Dec 2025 14:00:40 +0000
asID:                     46170
IP address blocks:        2602:f70c:66::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:47:37:fd:fd:7e:16:9f:0a:f5:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e2b7dc4-1844-4e70-989b-5e446f8cc70f
        Validity
            Not Before: Sep 23 13:00:40 2025 GMT
            Not After : Dec 22 14:00:40 2025 GMT
        Subject: CN=6aef1d26-2079-4d95-a3b2-d15f330bec4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d7:c5:7c:bd:ee:9f:ef:d8:81:97:5c:0b:3d:
                    4a:87:33:2b:60:43:20:51:5d:f1:14:03:10:84:3b:
                    79:3b:18:75:83:e6:a2:88:56:9c:4d:ae:e6:49:83:
                    96:e1:0b:b6:04:d1:0e:0a:15:35:d7:76:12:51:b6:
                    2b:84:49:93:3d:87:55:80:d7:6a:e3:fe:a5:af:d5:
                    14:35:ff:b3:cd:44:c6:fa:87:3e:c0:55:af:11:bd:
                    4e:99:a8:9f:32:52:87:a7:ba:86:fa:52:be:be:2e:
                    89:8f:f8:06:71:85:17:f7:92:02:3c:42:f8:27:a6:
                    5a:06:9c:97:2e:23:f2:9b:b3:c3:d9:d8:80:53:4d:
                    2f:14:d9:96:b6:c1:be:a0:1c:08:f2:67:aa:12:4b:
                    73:3b:5d:50:e8:9c:1b:08:0f:b1:f8:11:ce:35:80:
                    3a:fe:13:09:35:01:6e:ca:e5:07:a7:b9:94:0d:af:
                    75:ee:85:26:b6:6f:32:ed:3a:45:f9:f1:be:b5:ae:
                    46:a1:b0:56:31:1a:7d:1a:e1:d6:78:e6:d2:2c:db:
                    bf:5e:66:f8:1d:7e:3d:a9:a7:24:58:8e:b4:08:29:
                    15:e6:69:87:d5:14:5b:31:0c:c5:00:02:22:54:1c:
                    82:da:04:d1:8f:ad:ce:7d:94:d1:49:1f:27:b9:e7:
                    92:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2B:6B:21:61:02:CE:91:10:5D:FA:14:08:C8:7A:5F:92:F3:76:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/678b3993-91f5-38e4-8904-da250d8e607d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.crl

            X509v3 Authority Key Identifier:
                keyid:E7:D5:3C:62:27:DD:CB:83:61:D5:40:ED:2E:92:C0:56:38:63:A4:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9e2b7dc4-1844-4e70-989b-5e446f8cc70f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f70c:66::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:1f:5b:26:ff:bf:ee:5f:ac:3c:d0:ee:2d:13:6c:16:48:91:
         2e:6f:29:27:26:0c:8b:b8:3e:e7:cf:c7:c9:e0:dc:9c:c1:98:
         df:a6:79:99:a5:56:4d:9a:70:fc:a2:a9:60:b5:3b:27:d6:23:
         9b:74:e3:ab:09:fc:29:ed:f1:82:5d:7a:33:2c:ea:a8:a3:3d:
         8e:91:bb:3a:5d:ef:ac:8d:2f:ef:51:ce:d7:18:ca:2f:69:9d:
         52:b4:47:ce:9a:57:dc:c3:3d:1e:b4:c5:34:46:c4:85:69:2b:
         a5:26:e9:5c:f9:4b:12:f7:72:30:48:9c:2c:3a:91:65:e5:a8:
         57:8f:89:40:a9:0c:83:b1:76:6f:0e:48:58:ca:8d:e8:a6:2d:
         68:5c:b1:20:9c:1a:38:2d:28:e8:8d:c0:a6:b2:81:18:1e:77:
         17:1d:33:64:db:66:8e:6a:66:e5:85:23:25:1e:fa:f2:cc:3a:
         17:0f:6a:ff:a8:5d:6c:26:66:3b:02:56:01:d4:f0:d9:c1:43:
         3a:67:22:6b:b6:e1:b8:ca:8a:72:2f:a6:54:f4:9b:5e:54:ea:
         f2:a8:be:39:6e:c0:9d:a7:5a:13:22:5d:1d:fc:a9:07:c7:02:
         54:ae:5c:6d:86:b2:1c:6e:77:4d:ce:c0:bd:32:11:f0:40:26:
         7e:aa:8e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:02:09 2025 by rpki-client