Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/02f7900b-4251-375f-870d-3940bd4d4331.roa
File:                     02f7900b-4251-375f-870d-3940bd4d4331.roa (raw, json)
Hash identifier:          Jm+fSm0rq95bHrHUgLZRT8I5zxqrXi8HOHEtNlgHtgI=
Subject key identifier:   E0:7F:1A:39:53:FF:90:2B:46:FC:A6:E9:A0:05:4B:DE:00:03:6F:BD
Certificate issuer:       /CN=cc664683-d58e-4d26-8cf1-e5f5c5dc24c2
Certificate serial:       010D0C9F4328584B758C92BCFFDF067B98395700
Authority key identifier: D0:65:B9:1A:8B:5E:DD:F3:FA:1A:9C:17:3D:BA:C6:E1:DB:E4:69:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/02f7900b-4251-375f-870d-3940bd4d4331.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     216360
IP address blocks:        2602:f869::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:92:bc:ff:df:06:7b:98:39:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc664683-d58e-4d26-8cf1-e5f5c5dc24c2
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=20181e92-f8aa-4fe7-a00a-2432c0fa97e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:84:2e:a9:01:5b:a9:41:de:61:2a:b4:ce:be:
                    c6:15:b3:bd:95:ed:79:3e:c1:71:83:46:ca:9c:c1:
                    ee:8d:9b:d6:69:97:57:a2:ce:b3:7a:18:64:42:04:
                    1c:f8:b5:be:2a:c1:aa:e4:a0:93:60:28:6a:73:42:
                    2e:bd:a6:89:bd:a5:bc:df:43:69:b0:ee:5a:6c:e6:
                    f3:01:0e:03:97:d7:0b:21:b8:bd:37:ad:69:68:bd:
                    43:12:05:fe:9d:37:55:03:fc:e8:93:4a:ab:3b:95:
                    38:50:58:e0:57:54:cc:b3:d1:b2:a2:38:15:ea:c3:
                    33:5f:01:5f:d8:4e:c1:20:96:77:f8:06:33:c5:2c:
                    76:29:e7:d7:d1:fc:a3:63:3b:fb:f7:28:7c:f4:25:
                    3c:f7:74:7a:73:c1:b7:c8:f3:a6:7d:05:94:34:e9:
                    4d:5a:d3:8c:60:ee:fb:4c:58:99:7d:a1:89:84:0b:
                    9b:ac:ff:89:66:ef:2e:ce:97:50:cb:e1:e3:ab:46:
                    c8:e9:56:e0:33:76:ad:e4:f0:0a:21:5f:1e:ad:a2:
                    fc:0f:c2:34:e7:bc:ea:9c:03:cc:27:ea:76:b7:bd:
                    44:45:db:e3:2c:e8:9e:f1:b9:78:74:2a:4a:f4:c4:
                    c6:bc:8c:dc:aa:01:e1:3a:bf:af:31:c6:3c:9e:c1:
                    e0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7F:1A:39:53:FF:90:2B:46:FC:A6:E9:A0:05:4B:DE:00:03:6F:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/02f7900b-4251-375f-870d-3940bd4d4331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.crl

            X509v3 Authority Key Identifier:
                keyid:D0:65:B9:1A:8B:5E:DD:F3:FA:1A:9C:17:3D:BA:C6:E1:DB:E4:69:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cc664683-d58e-4d26-8cf1-e5f5c5dc24c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f869::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:ec:e9:0b:b1:57:7d:d1:61:51:b7:7a:0d:60:5b:7e:c9:b0:
         91:03:ed:ec:1b:db:0a:d9:d1:9a:62:91:fd:7c:0d:c8:77:69:
         ab:96:d0:91:4c:1e:50:21:1d:da:05:82:1e:85:c6:42:39:04:
         f9:f3:3d:c2:3e:ab:e5:94:de:61:87:69:e0:8e:2f:f1:39:f3:
         11:87:82:e7:29:04:34:dc:ab:56:3a:1b:51:08:b4:95:d3:2b:
         00:53:ae:fd:9e:3d:1d:b5:16:6e:28:00:ec:3c:61:9f:8a:db:
         c0:a1:69:a4:8a:f4:f3:92:93:2a:c8:88:29:05:a2:ae:8b:7f:
         5f:86:67:34:2b:f5:bc:56:a4:6b:98:d7:5a:5a:a2:ad:d0:db:
         21:6b:6b:bb:31:56:5d:0f:62:8f:26:9a:2f:f1:82:03:49:f0:
         e6:48:65:4a:59:e0:c4:b7:76:26:35:b0:41:12:70:cf:7e:8f:
         71:c4:f0:f1:4a:6b:41:2d:67:9f:b3:d1:ab:8a:95:f4:ed:4c:
         cd:8b:fb:4d:68:55:a8:dd:3f:e4:70:09:69:cb:fc:4f:32:24:
         e0:1b:c3:51:e7:ad:7f:74:86:47:b9:96:16:d9:9f:b6:40:fe:
         33:a1:30:25:77:ca:05:c6:ba:07:8b:63:0a:12:d8:e8:00:a3:
         5f:5c:03:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:31:06 2025 by rpki-client