Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/a9b5ebc3-3d2e-30d7-a836-ba8ce67fdded.roa
File:                     a9b5ebc3-3d2e-30d7-a836-ba8ce67fdded.roa (raw, json)
Hash identifier:          2ZqhALe4jGLrCUlYuyo9+q/djtbKq088ctO1Io9Ony8=
Subject key identifier:   23:4A:EF:28:50:11:68:ED:9A:7C:1B:46:5A:7C:DD:22:FD:36:DD:72
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328584B477C6E48F39E80CB3AADFDA0
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/a9b5ebc3-3d2e-30d7-a836-ba8ce67fdded.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     29802
IP address blocks:        2602:ffd1:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:6e:48:f3:9e:80:cb:3a:ad:fd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=c65ef290-621f-473b-9538-68c999afc2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4e:f9:12:9e:0a:f1:c8:dc:8f:8d:b9:c3:47:
                    e1:3a:da:b5:91:1e:f8:75:87:86:b2:30:67:60:0c:
                    f8:5b:40:c6:cb:92:b4:f7:fc:8c:9e:2a:c3:1e:ed:
                    dd:f0:7d:ff:cd:e6:7a:50:da:90:c2:81:a5:50:a8:
                    a7:f4:2e:e0:0e:d0:88:19:56:60:83:5d:cd:97:52:
                    2b:30:13:e4:a6:0f:61:f9:0a:83:fb:63:a1:30:20:
                    0b:7b:ea:3f:63:e0:2b:a0:ff:90:db:54:a7:91:f1:
                    1a:30:a7:52:0a:40:2a:a2:d1:26:06:1a:09:fb:57:
                    6b:76:66:20:c7:de:ee:bd:fa:60:ca:e9:d8:02:39:
                    84:47:ee:90:8b:03:3a:57:1a:e3:dc:b8:20:65:f9:
                    16:bf:c4:29:8a:5e:cb:06:00:d1:1b:61:ac:b9:7e:
                    58:5a:e6:4f:90:ef:04:41:17:ec:5c:2d:0c:02:68:
                    37:e8:15:55:82:4f:8c:5d:0e:ef:2d:d4:dd:33:b8:
                    5f:a1:d6:51:45:24:31:11:d7:91:09:f1:f7:7e:e1:
                    d4:63:ec:99:df:9f:89:c1:e7:45:86:8a:60:55:a1:
                    2e:33:ab:79:61:25:15:3a:bd:e3:ac:0f:b8:05:71:
                    a3:74:a1:24:c9:56:39:7c:87:c8:55:40:39:ce:d6:
                    a7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4A:EF:28:50:11:68:ED:9A:7C:1B:46:5A:7C:DD:22:FD:36:DD:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/a9b5ebc3-3d2e-30d7-a836-ba8ce67fdded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffd1:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d3:89:9d:9b:ef:42:6c:b7:a4:8c:94:d0:bb:03:d4:f5:33:
         f5:43:b3:5d:d9:ff:30:55:3f:55:14:08:7c:87:35:3c:82:b5:
         de:7a:65:3b:22:7f:12:96:01:e9:79:50:3f:33:69:74:41:b2:
         07:ee:3d:a0:a1:09:f0:c2:38:53:92:86:ed:3f:fb:fe:07:62:
         60:50:47:4d:8c:b2:0e:7d:3e:f1:d6:b5:df:fc:d6:96:1d:55:
         f7:7e:63:25:8d:f0:ed:31:1a:d0:52:d3:40:eb:ce:06:7f:db:
         5c:0b:47:3b:4d:b8:0f:34:43:7d:f9:86:ed:0b:3b:ca:e9:96:
         e1:96:80:ca:9b:c6:97:8d:96:e7:1e:79:08:a1:55:5c:99:a2:
         f3:ac:33:8b:93:13:69:fb:a0:9d:ff:5b:c8:c7:0d:3f:07:f0:
         b9:cb:4b:f6:c2:fd:3c:f3:df:b7:f8:57:f7:75:67:81:69:47:
         b3:82:a2:56:72:25:76:57:ed:05:69:4f:9b:bc:42:1b:4e:cd:
         99:9e:90:e7:07:c8:6e:43:f4:44:ee:29:57:5b:d5:82:9d:bb:
         70:c1:96:d8:0a:82:de:37:5f:cd:a8:6f:cd:ab:f8:15:76:cd:
         a4:08:23:ae:90:0d:81:d4:71:8a:9b:bc:d6:e5:23:a4:78:a4:
         a1:52:8d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:56:35 2025 by rpki-client