Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/91f8f680-3529-30da-b7ca-a545285b4d50.roa
File:                     91f8f680-3529-30da-b7ca-a545285b4d50.roa (raw, json)
Hash identifier:          aVM1v6Igi6rfnmsOfy1SToCRxcsw5NCO8RqsWVMhD/o=
Subject key identifier:   FF:85:DD:D3:70:68:98:78:44:7A:07:CD:FD:9F:B0:2B:2B:5A:6A:B2
Certificate issuer:       /CN=b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5
Certificate serial:       010D0C9F4328584B8BE239CF199A2417A2425B00
Authority key identifier: DB:F4:ED:9B:E8:FD:BD:34:98:5C:6A:7F:D2:D1:AB:2A:29:D8:8A:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/91f8f680-3529-30da-b7ca-a545285b4d50.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     209699
IP address blocks:        2602:f65c::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:39:cf:19:9a:24:17:a2:42:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=d42e2bd7-5bb5-412d-8a0c-0e0468b3152a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:21:51:1f:ed:a8:04:02:db:71:93:bc:ac:55:
                    46:10:33:c1:88:64:09:8d:a8:91:fe:52:c9:c6:88:
                    d5:92:0d:5c:49:45:12:5e:e3:85:bb:bc:31:dd:16:
                    a2:54:cb:55:1f:bd:c7:b6:56:a6:e4:3f:5d:b2:ee:
                    7e:71:5b:70:38:bf:4b:38:72:bf:3e:f0:fb:9f:f8:
                    83:5a:4c:1b:0f:cf:3e:50:0c:70:66:7b:75:f7:0e:
                    ae:ef:90:9f:f2:69:05:05:16:fe:f9:e1:87:50:58:
                    76:11:44:ae:10:ae:0f:29:3a:b0:b6:4a:05:54:64:
                    b8:79:37:ad:d7:fc:38:54:30:ac:c6:63:3c:70:79:
                    6c:b2:49:d7:6b:a1:6f:c2:bf:49:38:39:26:af:21:
                    36:f9:e6:33:3c:7b:46:b8:ab:3b:dd:c9:53:9b:01:
                    08:3e:2c:41:06:61:bf:48:64:92:b3:31:29:6d:29:
                    5f:5a:4e:53:e4:03:1c:18:47:86:9f:f3:d3:a2:89:
                    fb:e9:5f:66:7e:50:27:c4:08:53:36:fe:4d:b3:ee:
                    99:44:77:1a:0e:1c:ab:0a:15:5d:d3:cc:f7:3f:6a:
                    4f:eb:e0:5d:85:51:f8:7d:ac:cc:f7:fb:3e:b8:c9:
                    ee:7e:25:5f:c5:4c:bd:71:25:24:41:a1:6f:2c:04:
                    e4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:85:DD:D3:70:68:98:78:44:7A:07:CD:FD:9F:B0:2B:2B:5A:6A:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/91f8f680-3529-30da-b7ca-a545285b4d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl

            X509v3 Authority Key Identifier:
                keyid:DB:F4:ED:9B:E8:FD:BD:34:98:5C:6A:7F:D2:D1:AB:2A:29:D8:8A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f65c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:51:74:65:6f:26:8e:15:c1:91:8d:35:5c:43:7d:d9:76:72:
         86:de:8a:f6:9d:54:62:0a:45:be:e1:a4:9d:14:e9:44:da:71:
         ab:6d:a8:a1:4b:6c:7f:17:9e:2b:77:a0:cd:33:6f:1d:fe:c2:
         a3:48:03:e2:80:ea:f0:0b:34:34:52:42:41:0e:4a:9d:cf:2f:
         ca:36:a5:0b:f5:e9:38:08:00:43:fd:50:f0:55:60:03:bb:37:
         93:e3:08:14:c5:4e:d3:b8:fd:e1:e3:31:16:91:c2:ac:58:1a:
         56:5a:36:74:de:04:a0:67:eb:f4:1e:6b:ac:72:11:19:c5:76:
         a3:85:66:04:f2:fe:3d:89:af:18:74:62:8c:be:e5:23:1d:1e:
         02:57:b7:05:e2:75:39:75:02:18:26:31:db:75:65:d5:6c:d2:
         be:da:87:4c:d0:d0:43:58:eb:6b:6c:8c:5b:6d:a0:85:d4:7e:
         51:44:25:d9:59:2d:a2:19:f7:52:af:9d:7d:19:b6:52:0f:88:
         ad:0c:85:5c:b9:0a:d5:13:75:f2:2e:b3:01:a7:0d:00:95:44:
         d6:93:8f:df:2d:92:df:09:66:b0:c3:50:ec:4e:a6:eb:0d:d9:
         51:0f:8d:34:70:63:5d:1c:cf:cc:d3:6d:74:8a:2d:87:1f:04:
         00:b3:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:17:22 2025 by rpki-client