Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/c005238f-e667-357a-9bf5-bdf33e9305cc.roa
File:                     c005238f-e667-357a-9bf5-bdf33e9305cc.roa (raw, json)
Hash identifier:          6xOglSuoZw1JWPEnZC7yZnGeCByxj7pP+8DjzCLjPO4=
Subject key identifier:   76:46:B1:CF:9F:EF:21:74:6D:90:89:26:62:F8:A3:C7:E3:E2:64:50
Certificate issuer:       /CN=cda047c8-1dc9-4cca-b1de-b651af254414
Certificate serial:       010D0C9F4328584B72C1F434DE78D58AA0A30580
Authority key identifier: C5:47:3E:9D:27:46:CC:54:40:32:8B:E9:74:8C:3D:D1:93:28:82:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/c005238f-e667-357a-9bf5-bdf33e9305cc.roa
Signing time:             Wed 08 Oct 2025 01:00:29 +0000
ROA not before:           Wed 08 Oct 2025 01:00:29 +0000
ROA not after:            Tue 06 Jan 2026 02:00:29 +0000
asID:                     36832
IP address blocks:        2602:f91d::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/cda047c8-1dc9-4cca-b1de-b651af254414.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/cda047c8-1dc9-4cca-b1de-b651af254414.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:c1:f4:34:de:78:d5:8a:a0:a3:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cda047c8-1dc9-4cca-b1de-b651af254414
        Validity
            Not Before: Oct  8 01:00:29 2025 GMT
            Not After : Jan  6 02:00:29 2026 GMT
        Subject: CN=b331bb39-f093-49d7-b942-ef9d4e47c9e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:84:cb:ec:fc:28:e9:04:2b:05:60:49:68:4f:
                    a8:f7:26:0c:23:72:b2:97:66:0b:7e:b6:4c:57:01:
                    c5:6a:b4:8f:72:dd:2b:3d:e4:00:d4:ab:60:f3:af:
                    8d:00:68:06:f6:c5:42:e0:9d:4a:7c:bd:66:6b:89:
                    e7:c9:65:a7:e9:ba:f4:58:80:99:9f:d6:fd:99:f2:
                    4c:3d:1e:71:b9:96:a1:97:35:22:cc:36:fb:48:d6:
                    33:b4:01:5b:30:eb:1b:55:8f:99:a3:54:be:4c:6c:
                    0c:86:aa:18:a4:44:34:83:da:e6:40:29:0f:91:e2:
                    e9:fa:d5:0f:c7:08:53:b0:60:9a:de:de:e8:ee:e6:
                    44:a4:96:d7:bd:df:a3:88:a2:ec:35:e1:e2:48:ec:
                    e0:6c:19:ed:2a:fc:96:96:f5:85:98:f1:2e:88:61:
                    4b:25:71:29:45:d9:24:c4:3e:cf:2a:e8:53:76:4d:
                    40:ed:19:aa:96:66:2f:94:4a:25:36:ce:c0:70:6b:
                    3a:7e:e8:3a:20:de:89:7a:12:8a:4d:61:b8:f7:ce:
                    20:0e:97:b1:32:f5:52:74:b4:22:91:33:d6:a1:d6:
                    e8:a2:9b:77:7d:7c:34:19:3e:bf:d5:9e:fa:89:ca:
                    8d:ea:ef:19:ac:eb:16:95:56:b3:59:a8:05:11:16:
                    ad:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:46:B1:CF:9F:EF:21:74:6D:90:89:26:62:F8:A3:C7:E3:E2:64:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/c005238f-e667-357a-9bf5-bdf33e9305cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414/cda047c8-1dc9-4cca-b1de-b651af254414.crl

            X509v3 Authority Key Identifier:
                keyid:C5:47:3E:9D:27:46:CC:54:40:32:8B:E9:74:8C:3D:D1:93:28:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda047c8-1dc9-4cca-b1de-b651af254414.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f91d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:5d:2d:11:73:7d:0d:00:f9:18:9b:1f:e8:72:fc:9b:a9:dd:
         94:88:bb:61:96:67:aa:f7:50:7c:19:07:2f:ef:68:ef:aa:83:
         ed:1f:25:6b:2e:c8:94:9d:a1:50:de:83:ae:c5:5a:c5:c5:f1:
         76:c5:89:8b:33:25:62:5e:dc:d9:65:95:48:0f:5d:21:16:8d:
         95:77:18:7f:9b:db:6b:07:c3:1a:69:75:2e:41:58:5e:25:24:
         85:f7:29:cb:d1:ad:80:12:18:2e:4d:fb:b5:45:3d:f3:c0:64:
         7e:b8:5e:8e:8c:17:27:3a:bc:66:df:a5:9c:45:ac:4f:45:22:
         ac:07:f9:ba:17:c9:af:5a:56:34:7d:89:d7:67:bb:fe:2f:7d:
         61:8e:d8:1f:82:d2:1d:72:bd:a7:f7:6d:52:bd:2d:70:93:ca:
         fc:54:9d:1e:72:d3:82:7c:be:76:f5:f9:9f:98:35:c6:61:17:
         84:01:f7:93:78:99:37:53:ca:38:1b:92:9f:34:66:f0:7d:a0:
         73:45:d0:16:b6:7c:cc:1c:40:0e:ce:84:39:96:f9:0b:72:16:
         d1:fe:2d:93:89:0b:95:ca:77:26:a0:df:28:88:f7:98:a8:a3:
         f4:d1:71:b8:f8:3d:44:fd:5b:07:f6:5c:33:35:ee:8b:02:64:
         f7:b0:60:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:51:09 2025 by rpki-client