Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/5a8f9e04-3f94-3c78-a611-d353f4c1963f.roa
File:                     5a8f9e04-3f94-3c78-a611-d353f4c1963f.roa (raw, json)
Hash identifier:          s7KAIq9SFgFLJZzhWmghgg6lg3TuErUlHcU/tico1Sc=
Subject key identifier:   44:7E:08:00:47:EE:27:C5:66:04:8B:62:50:A7:14:55:09:BA:35:E6
Certificate issuer:       /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
Certificate serial:       010D0C9F4328584B25FC35033D17AEDB502216C0
Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/5a8f9e04-3f94-3c78-a611-d353f4c1963f.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     3819
IP address blocks:        2602:f69a:16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:35:03:3d:17:ae:db:50:22:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=05968088-a03e-4615-8594-d79ae472b25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fd:54:7c:e6:fc:e1:31:86:e4:01:31:64:d7:
                    d4:db:6d:fc:58:17:92:35:7e:4a:a4:71:07:cf:cd:
                    c1:51:41:d4:0f:46:95:ec:19:53:1a:d6:d0:02:8c:
                    c9:94:a2:a2:0b:d0:6c:22:79:88:56:95:28:88:be:
                    e0:13:33:4f:a6:9d:82:d8:6d:02:c6:18:8b:7b:c6:
                    72:fb:41:0e:37:50:c0:f5:d3:96:95:cb:0d:db:3d:
                    24:8b:8e:dc:1a:5b:66:06:be:b1:f0:1b:5d:2b:c0:
                    99:b7:fb:58:04:f5:06:80:37:69:13:9c:24:9e:af:
                    a8:e6:d2:72:14:eb:34:96:34:b9:4e:9a:c7:1c:de:
                    76:b1:4f:e3:0e:74:45:64:49:66:02:af:b4:c6:d4:
                    fb:d8:14:77:2e:70:a4:f4:00:1c:56:f3:4e:21:10:
                    09:14:da:86:1d:3b:90:da:eb:b5:9c:cd:d6:28:82:
                    86:b4:38:9a:47:27:29:0d:93:a2:dd:65:36:4f:39:
                    d5:1e:e6:95:41:ed:1a:16:1c:1c:fa:e9:7b:f5:c4:
                    f1:cd:3d:96:84:5f:34:f6:92:ed:92:75:3d:68:bc:
                    02:68:f0:df:ce:a6:0d:41:59:e6:84:cb:5c:1c:2e:
                    fc:fc:15:fe:62:97:be:44:74:db:0d:95:dd:44:56:
                    cb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7E:08:00:47:EE:27:C5:66:04:8B:62:50:A7:14:55:09:BA:35:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/5a8f9e04-3f94-3c78-a611-d353f4c1963f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl

            X509v3 Authority Key Identifier:
                keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f69a:16::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b4:46:4e:62:b0:ec:b1:4e:b6:14:b3:fb:d9:35:79:48:90:
         d6:b9:a0:b9:af:06:4f:e8:ec:03:6c:a9:16:fe:a4:b0:25:69:
         36:d5:8f:c9:9f:ee:80:53:e6:5e:33:22:bc:d1:d7:ef:87:63:
         40:f1:41:71:be:0f:0c:f8:a7:c9:dc:10:81:2c:6e:f0:d9:2f:
         78:a9:e0:fc:2e:c9:ab:76:b4:b6:c8:d5:e9:72:e8:7d:0d:68:
         68:d9:d5:c6:40:3f:db:d9:16:b2:95:49:6d:97:98:46:40:3c:
         59:f5:71:47:14:d4:b8:a5:92:ef:b9:00:04:fa:be:84:67:73:
         ab:21:4e:8c:26:4e:4e:72:28:88:43:ee:ab:1b:f2:7f:ae:06:
         30:15:61:10:fb:41:0d:c1:7a:04:24:62:29:cf:2e:98:ce:79:
         0a:02:d0:9e:45:6a:bc:89:49:0b:47:f2:42:72:83:2e:10:88:
         f3:83:7f:64:af:8e:ed:81:a3:97:ad:ab:37:76:0b:a4:b6:a4:
         f7:03:f3:6c:28:b6:20:86:1c:ba:7c:a3:6d:73:8f:e9:de:69:
         34:75:7a:e7:7a:b7:59:7a:14:1b:71:60:61:39:c6:49:27:a4:
         fe:27:42:2b:88:bf:18:63:82:4c:0f:1d:33:47:f7:34:9c:e9:
         dc:b5:8d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:26:25 2025 by rpki-client