Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/ff9424a4-3029-386d-b13a-01eeb9b5c1b1.roa
File:                     ff9424a4-3029-386d-b13a-01eeb9b5c1b1.roa (raw, json)
Hash identifier:          TIPX4xUFVtCOA8d9/a8eZWZqpL7D5ASutVKBeyZLh7A=
Subject key identifier:   F4:DB:F9:6F:4B:91:96:E8:C3:C3:73:CB:E0:93:5C:53:84:59:68:E2
Certificate issuer:       /CN=32cbdaf6-e528-4a14-9e49-ebfdd566c487
Certificate serial:       010D0C9F4328584B9537A0931070449C7EC43080
Authority key identifier: F4:5B:6D:52:7D:AC:DF:B3:6A:33:80:AE:4E:7E:0D:76:48:30:5E:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/ff9424a4-3029-386d-b13a-01eeb9b5c1b1.roa
Signing time:             Mon 20 Oct 2025 09:15:14 +0000
ROA not before:           Mon 20 Oct 2025 09:15:14 +0000
ROA not after:            Sun 18 Jan 2026 10:15:14 +0000
asID:                     1075
IP address blocks:        2602:fb39:10::/48 maxlen: 48
                          2602:fb39:11::/48 maxlen: 48
                          2602:fb39:12::/48 maxlen: 48
                          2602:fb39:13::/48 maxlen: 48
                          2602:fb39:14::/48 maxlen: 48
                          2602:fb39:15::/48 maxlen: 48
                          2602:fb39:16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/32cbdaf6-e528-4a14-9e49-ebfdd566c487.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/32cbdaf6-e528-4a14-9e49-ebfdd566c487.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:37:a0:93:10:70:44:9c:7e:c4:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32cbdaf6-e528-4a14-9e49-ebfdd566c487
        Validity
            Not Before: Oct 20 09:15:14 2025 GMT
            Not After : Jan 18 10:15:14 2026 GMT
        Subject: CN=d7c390ee-5f25-4648-b95f-52aa6b107e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:42:71:e9:37:0a:c6:ef:d8:5e:3f:8c:60:
                    0e:21:6f:cc:e8:02:8a:d0:4d:9b:f9:e7:cf:88:cd:
                    d6:a4:03:69:1b:11:c7:ee:c1:38:ab:b9:0f:fa:4c:
                    53:2b:ec:7b:99:e4:4b:56:1d:3c:5b:5f:dc:da:4a:
                    11:ba:eb:b0:f7:23:30:1a:95:77:93:3d:d6:00:06:
                    ae:7c:63:19:fa:bd:cb:79:99:e1:50:4f:a7:b7:e1:
                    e8:53:ff:34:05:18:5d:d3:f7:c5:aa:d2:39:85:9a:
                    99:00:7b:e6:01:20:69:09:8f:e7:b2:fc:b9:35:b7:
                    f5:21:bf:2d:60:fa:28:40:55:3e:76:9b:42:6b:18:
                    10:5e:60:c5:07:84:19:f2:f0:e7:8f:67:47:b1:6a:
                    23:8b:13:7b:e4:c6:23:a7:91:5c:a6:b3:dc:fa:b5:
                    db:6c:a1:6a:7a:44:42:11:f5:b8:d4:92:2f:8e:68:
                    59:28:ee:ab:94:f3:41:f7:2c:dd:da:56:88:65:36:
                    2f:11:d2:e1:35:a1:53:b3:98:11:23:4f:16:1c:71:
                    52:5e:71:f8:63:f9:8b:62:56:18:ca:b3:6d:34:c4:
                    88:87:dd:b3:f4:77:78:0d:59:fd:65:f2:af:f5:ef:
                    e3:0b:3d:31:8e:9c:2f:13:3f:73:d7:3c:4e:fb:ec:
                    db:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DB:F9:6F:4B:91:96:E8:C3:C3:73:CB:E0:93:5C:53:84:59:68:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/ff9424a4-3029-386d-b13a-01eeb9b5c1b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/32cbdaf6-e528-4a14-9e49-ebfdd566c487.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5B:6D:52:7D:AC:DF:B3:6A:33:80:AE:4E:7E:0D:76:48:30:5E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb39:10::-2602:fb39:16:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:6e:d7:13:30:af:da:0b:ff:4f:1f:4e:bd:e4:36:4f:b1:ec:
         63:95:43:58:ca:86:71:f3:6d:d1:b4:c5:b9:5c:5f:c6:e9:0f:
         6b:a3:c1:7c:9e:9f:a8:a7:be:77:4b:8c:3e:97:d7:24:22:57:
         c3:b7:92:69:89:43:8d:f6:49:37:a1:e7:88:2b:30:c4:36:1e:
         7d:e1:a1:d0:e5:d2:60:66:71:82:fd:b4:94:88:32:84:dc:d1:
         27:98:1e:89:d8:5c:c3:86:63:19:8e:7d:1f:31:e3:7d:49:0b:
         d5:03:25:d9:76:09:8f:07:75:f5:63:ae:17:9d:c7:ca:12:49:
         eb:e8:ee:f6:af:8b:a1:80:45:4b:59:28:97:bf:72:14:48:9a:
         09:e1:48:5b:1f:9f:2f:48:66:dc:20:6b:c6:8f:db:87:f3:66:
         59:99:9f:e3:b9:77:5a:36:fb:a3:b5:7d:6d:f4:91:3d:cd:e6:
         27:83:7b:3a:14:9f:38:56:3c:7d:b2:36:b1:c9:e5:2b:4f:04:
         6f:fc:79:b9:21:8b:3c:c1:06:94:57:07:04:f6:c0:79:62:ae:
         54:b8:ce:b0:2b:7c:41:c1:a0:68:96:96:20:f8:bc:f8:fb:ae:
         7c:0f:ce:02:21:4b:d9:fa:ee:34:d3:a8:c0:e7:ab:38:02:6c:
         d8:de:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:13:51 2025 by rpki-client