Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/e497d3e9-a9d1-3199-96be-8395d6cc959b.roa
File:                     e497d3e9-a9d1-3199-96be-8395d6cc959b.roa (raw, json)
Hash identifier:          MdC4uv8nWJ20jjPHAlqEU//UcIjZR6zNTZVv/8iLCwQ=
Subject key identifier:   91:F7:62:9D:1B:4B:A8:48:A2:DE:3E:79:AC:EC:81:5D:96:33:39:83
Certificate issuer:       /CN=deaf388e-6941-424e-9f96-abe06598e29c
Certificate serial:       010D0C9F4328584B94421E6A981A3414AF2D51C0
Authority key identifier: D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/e497d3e9-a9d1-3199-96be-8395d6cc959b.roa
Signing time:             Mon 20 Oct 2025 01:00:31 +0000
ROA not before:           Mon 20 Oct 2025 01:00:31 +0000
ROA not after:            Sun 18 Jan 2026 02:00:31 +0000
asID:                     401371
IP address blocks:        2602:f652::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:94:42:1e:6a:98:1a:34:14:af:2d:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deaf388e-6941-424e-9f96-abe06598e29c
        Validity
            Not Before: Oct 20 01:00:31 2025 GMT
            Not After : Jan 18 02:00:31 2026 GMT
        Subject: CN=346a9768-82bb-4f6a-afca-96a8fc965163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:2a:57:3b:a4:32:16:dd:2e:bb:41:07:4b:
                    69:e2:fd:ec:77:cb:29:3a:cb:59:78:2e:90:58:92:
                    8a:d0:38:8c:dc:7b:cf:da:3e:ac:51:3b:77:0c:51:
                    34:8e:71:0e:91:c2:c5:08:72:b3:5c:9f:0c:2b:26:
                    65:e0:93:de:69:4e:6f:c1:ae:a1:b6:54:2b:f6:10:
                    ad:8b:aa:5a:25:cd:99:59:d4:85:0b:94:f5:35:6f:
                    ae:e9:b3:7a:7b:4e:4f:55:b4:c5:84:57:94:d3:d9:
                    24:c7:ab:90:8b:15:af:1f:16:93:7d:b5:2f:e8:7a:
                    2d:3e:6a:14:60:66:68:2a:d3:08:45:91:dc:32:3e:
                    9b:2f:e2:b8:57:73:97:b5:96:3e:86:b8:e2:27:18:
                    c6:e9:dd:af:e3:20:7a:e6:ab:d2:8c:a4:b8:b4:4c:
                    20:de:1c:11:ba:a3:11:4d:d5:3c:43:08:b9:8d:f5:
                    22:8b:18:51:3d:d7:29:ce:f4:9c:38:94:f4:15:45:
                    69:09:de:a4:20:f8:0c:30:c9:d7:15:17:ac:01:4a:
                    34:4f:ea:e3:a9:24:78:64:65:21:82:45:4a:26:a3:
                    0e:6f:4d:15:20:c3:76:36:f7:63:fe:bc:9b:a0:8c:
                    67:4f:6c:27:9b:ae:3c:1e:d3:99:73:dc:8e:a4:53:
                    e8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F7:62:9D:1B:4B:A8:48:A2:DE:3E:79:AC:EC:81:5D:96:33:39:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/e497d3e9-a9d1-3199-96be-8395d6cc959b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.crl

            X509v3 Authority Key Identifier:
                keyid:D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f652::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:fd:26:d9:58:2d:3f:92:98:ed:71:05:3b:fb:2f:da:6d:ca:
         f4:e3:f2:fe:f3:d6:6e:17:5d:d6:35:ba:a3:c4:c3:14:ff:5c:
         de:f1:ca:ff:30:b2:77:71:09:26:e4:da:61:bd:2d:73:f6:ac:
         33:d6:be:e4:27:b4:d2:9b:61:2d:1a:f8:6b:8b:38:64:ce:e0:
         1c:79:d1:0e:c3:3b:7b:10:f6:17:40:4d:e4:98:8f:f1:f6:7c:
         ef:09:8b:bf:b6:18:26:69:a9:a4:ea:15:84:3e:9e:e3:74:2e:
         0b:40:8a:49:61:78:b3:ff:ef:3d:2d:6d:4d:28:62:d7:e1:40:
         99:53:23:71:0e:08:c3:37:fa:07:3e:28:54:b5:3a:a4:79:a6:
         1b:ee:21:5b:3e:d2:41:ef:b3:2c:91:23:5d:8a:38:6f:67:03:
         2e:f0:17:55:2d:21:6f:25:74:94:34:2c:07:31:4e:d1:76:9b:
         c9:c2:82:c1:20:75:66:5d:40:5c:4c:ed:ea:d0:73:86:b7:4a:
         84:9a:08:9e:06:15:ae:ad:16:78:cf:65:f7:89:c8:b5:57:32:
         14:d5:53:71:a6:88:aa:24:ae:95:ec:7d:0c:05:4b:87:59:8d:
         e5:ef:b7:77:20:de:bf:09:d7:a6:69:30:dc:cc:2b:38:af:17:
         d1:83:5a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:34:59 2025 by rpki-client