Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/919825eb-22e0-3e4f-b598-ed097a5f212a.roa
File:                     919825eb-22e0-3e4f-b598-ed097a5f212a.roa (raw, json)
Hash identifier:          g+OKOrSRrQ/opgoA8P3gTJreUSTdN3LZUXWW5tC5oaM=
Subject key identifier:   53:FE:D3:5C:A6:3C:DF:B9:B9:A7:E7:AD:21:BA:98:92:8F:F2:8F:A1
Certificate issuer:       /CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
Certificate serial:       010D0C9F4328584B25FC4746D92ACDBBF54C0280
Authority key identifier: 77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/919825eb-22e0-3e4f-b598-ed097a5f212a.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     3819
IP address blocks:        2602:f69a:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:47:46:d9:2a:cd:bb:f5:4c:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=2eecb540-5d5c-4a50-bdfe-1f600c9e6b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5e:22:bf:95:dc:44:2b:e3:e0:3d:2b:60:1f:
                    69:2e:9d:88:28:87:e7:c2:08:4c:2f:81:08:c4:a1:
                    e5:a9:17:f7:b1:87:f0:02:e3:31:2e:76:6d:10:67:
                    a0:af:55:ce:fe:8b:09:07:76:82:ea:ac:eb:e3:4c:
                    56:cb:7b:5f:a1:57:a7:79:ec:6f:7d:59:8b:53:04:
                    c4:fa:38:47:d0:46:80:7f:68:e4:e8:e4:6b:c2:8f:
                    2f:e6:fc:5c:ed:9a:7a:a0:15:3a:00:da:bd:4a:59:
                    b2:3e:e0:a7:fa:2b:cd:58:fe:45:c6:f0:a1:44:07:
                    74:60:01:d3:2a:f2:52:5c:13:75:e9:3d:4e:21:78:
                    ef:47:dd:84:cd:fc:f1:04:f6:c6:e2:75:69:d6:63:
                    34:10:75:12:41:ec:0c:01:00:c4:29:7e:11:d2:95:
                    0c:da:9b:0f:54:8f:25:9c:90:ae:15:75:7f:6b:af:
                    cc:5c:e0:fa:f2:75:6b:df:7f:c2:20:1d:28:4f:e7:
                    dd:15:4c:6e:a9:86:e2:82:d6:5d:64:65:c0:64:d5:
                    63:13:2e:7d:1b:f3:a3:f4:be:17:1a:af:7a:75:92:
                    dc:e2:84:c1:a7:96:3e:ba:15:4a:d5:09:e2:02:40:
                    11:96:4f:4d:1f:ce:d2:04:5c:cb:90:82:ec:b7:36:
                    29:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FE:D3:5C:A6:3C:DF:B9:B9:A7:E7:AD:21:BA:98:92:8F:F2:8F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/919825eb-22e0-3e4f-b598-ed097a5f212a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.crl

            X509v3 Authority Key Identifier:
                keyid:77:0A:A2:DE:25:38:C9:59:D2:B2:F4:06:6A:C7:D5:11:1D:84:FE:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac9ba7ca-04dc-49a2-ae79-4e6f6b34e488.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f69a:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a2:28:55:77:fb:0d:a8:7b:d9:85:fd:5e:f5:5e:de:99:44:
         49:32:91:ad:0e:c7:bf:33:ce:a9:2b:d4:89:6f:dc:d2:b7:e7:
         43:04:94:4e:ec:eb:ad:5b:54:51:af:ff:cb:a0:bd:a1:7c:6b:
         4d:75:ee:8a:a2:1f:0e:80:4e:47:33:db:0e:ff:47:59:1b:a7:
         59:13:9a:30:0d:5e:8e:6a:c0:d3:e3:f0:58:f8:bb:e8:88:67:
         89:95:4b:62:0c:46:78:e9:9f:30:13:76:28:5d:59:24:21:4a:
         f8:77:4f:27:ba:aa:5d:80:64:85:bf:75:56:8f:be:10:da:a0:
         4b:c4:00:08:b1:47:a1:68:db:52:64:6e:bf:ed:04:82:a4:77:
         83:fb:9c:70:aa:1a:c0:67:8c:39:58:a1:c9:60:13:96:9f:dc:
         86:9c:78:22:94:0c:b4:df:91:39:99:74:21:df:00:50:11:15:
         2e:72:93:b5:b0:f0:7d:4d:db:87:86:dd:80:56:55:37:cd:22:
         cc:cd:7c:75:20:e0:2b:26:c0:22:1e:17:c2:75:dc:f0:d0:9c:
         71:10:fb:19:cf:5c:d7:97:d6:94:a0:71:53:76:92:7a:26:54:
         c9:3a:10:ea:f1:44:94:b2:07:aa:57:39:60:0b:f8:18:5c:0c:
         38:c9:a5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:57:36 2025 by rpki-client