Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/df531e46-9975-34cb-872c-d6f5a7d7c0a0.roa
File:                     df531e46-9975-34cb-872c-d6f5a7d7c0a0.roa (raw, json)
Hash identifier:          JV2J4X7I7FK7TEi0u+/2nkiFpjkiy+xSsoZ7AwC/h9A=
Subject key identifier:   19:1D:C6:85:9E:D1:96:AB:AF:E1:79:AC:3F:9C:01:0C:06:9F:A5:C1
Certificate issuer:       /CN=dacb0047-4725-424f-a3e9-b6f212c4c5e3
Certificate serial:       010D0C9F4328584B79BCC8BD2E9B8F1DCED20000
Authority key identifier: 8A:97:87:F5:9B:AF:E2:9E:8A:04:00:52:AF:25:84:7D:11:C7:E3:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/df531e46-9975-34cb-872c-d6f5a7d7c0a0.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     401541
IP address blocks:        2602:f757:ff8::/48 maxlen: 48
                          2602:f757:ff9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:c8:bd:2e:9b:8f:1d:ce:d2:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dacb0047-4725-424f-a3e9-b6f212c4c5e3
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=b706536c-ea46-4755-9f1c-a9217ceee9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:79:23:4e:16:c0:8b:09:62:6d:24:6e:df:d5:
                    f8:f6:47:25:d9:1a:09:46:ee:bd:ab:7a:e6:89:3f:
                    9c:45:6c:34:e9:2c:c0:b5:dc:d5:c5:bd:56:b6:aa:
                    f4:a7:e1:4c:72:14:38:34:e1:b7:96:76:5a:96:34:
                    57:d4:c5:55:d9:5e:cf:9e:f5:56:e2:74:c4:75:f7:
                    0b:52:27:f0:2e:d9:e6:7d:e5:94:ff:2c:7b:b5:5a:
                    93:f4:78:71:e9:e7:67:34:fb:e1:7e:95:2d:7f:47:
                    1c:4f:75:1e:bb:39:e6:3f:af:e2:f9:49:c1:b1:b8:
                    b0:d0:e7:f6:8b:a0:d2:9d:5b:49:c2:df:f8:5c:f0:
                    20:1a:f4:c5:f9:af:b4:33:de:91:41:94:de:96:92:
                    68:b4:37:46:f1:84:4d:28:b4:68:cd:ed:63:55:7f:
                    c3:14:b9:e0:c3:ef:a4:13:bd:f3:66:6e:6b:c5:26:
                    5b:f2:f4:01:77:b7:98:76:a7:6b:90:a2:f6:3a:39:
                    ec:1c:ba:2a:88:28:bb:05:c1:09:6e:58:10:cf:2d:
                    56:95:bf:fe:09:f5:e7:d4:dc:8e:93:9a:64:ef:44:
                    2d:30:7c:98:cd:17:7b:7c:36:37:ff:16:7c:34:59:
                    ae:12:88:1d:65:5f:70:79:d4:16:05:35:8d:ee:20:
                    ff:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1D:C6:85:9E:D1:96:AB:AF:E1:79:AC:3F:9C:01:0C:06:9F:A5:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/df531e46-9975-34cb-872c-d6f5a7d7c0a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:97:87:F5:9B:AF:E2:9E:8A:04:00:52:AF:25:84:7D:11:C7:E3:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f757:ff8::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:12:7b:53:6d:83:91:34:2a:96:e3:82:d6:e4:36:30:92:48:
         f2:51:6a:ed:15:18:7a:73:2c:5c:6c:72:e3:35:1e:0c:17:4f:
         d0:79:f1:84:63:96:66:55:62:ac:24:95:42:17:b7:e3:78:ab:
         22:70:e1:9d:a5:cc:fc:f5:8b:c8:d1:6e:8d:cc:a1:26:c5:c0:
         1d:bf:17:90:e9:bb:88:f9:20:4a:e6:85:0d:5c:23:af:68:5d:
         3d:23:99:f8:ef:dd:ee:d5:41:8e:b0:bb:2c:69:71:56:bf:23:
         c3:4f:60:58:e7:03:47:49:ff:c3:32:eb:f0:50:c5:9c:b8:e9:
         a8:70:b7:aa:af:b5:7a:25:c3:cd:b3:f6:be:c9:b8:8e:a2:36:
         f9:06:ce:a7:a0:4b:75:94:ac:13:87:83:2b:05:f3:7d:6b:63:
         60:87:3e:44:25:f8:50:a1:b4:6f:64:16:8e:79:80:04:4f:de:
         e8:91:16:5a:61:a1:bd:c5:6b:2b:13:76:43:10:3f:9e:78:9c:
         e7:dd:f7:47:6d:02:68:cd:3b:50:25:bf:98:33:85:6e:8a:e1:
         e9:ae:36:92:9d:9f:4c:43:63:07:ab:8d:38:86:37:91:c0:d5:
         91:52:23:46:63:dc:02:16:10:5a:e0:c3:91:77:ed:09:f1:0f:
         44:fe:c3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:48:24 2025 by rpki-client