Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa
File:                     df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa (raw, json)
Hash identifier:          udZFyAVbi/+0K8guMVVzWFqudIH9mMqrShZKREo4XrY=
Subject key identifier:   1D:CC:23:EB:94:92:D2:1D:99:60:B0:87:7D:B4:03:7E:34:CC:AE:07
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F4328584BBB758726F73B14358A4D4F00
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     0
IP address blocks:        2602:fd10:900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:87:26:f7:3b:14:35:8a:4d:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=aa1eca76-a2b3-4e36-8b56-4777147aee11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:42:15:c2:6a:4e:42:99:85:83:8c:0e:2b:4f:
                    da:ec:dd:18:29:0d:2e:af:06:38:19:01:83:1f:0e:
                    b4:aa:f4:61:07:cb:30:62:34:e7:eb:8d:13:14:48:
                    1c:3a:f5:8b:b5:ee:81:59:91:fe:df:fa:92:52:d2:
                    41:07:fc:4a:89:01:78:92:9b:cc:75:60:e9:95:7f:
                    c8:f3:de:22:a3:9e:81:cb:b6:23:2a:40:68:14:e3:
                    55:ba:b3:55:f8:42:5f:0d:8a:1b:52:2c:a6:05:33:
                    2f:2b:05:b2:d2:6b:9c:6e:73:74:78:0b:5c:68:8b:
                    69:67:da:14:24:1c:f0:0a:a9:8a:32:e9:8a:60:75:
                    b8:38:f9:7f:74:34:df:7b:cd:cc:68:e4:29:f0:b4:
                    b2:0c:0f:23:23:d9:f6:2b:00:c9:f0:c9:71:10:e4:
                    f4:63:f3:41:7b:4d:b1:be:02:8c:36:b5:50:fa:b2:
                    e6:a3:a8:a9:11:e8:55:d6:42:4d:20:22:d1:5e:a8:
                    05:79:21:07:93:62:20:1d:c1:8e:fb:18:91:7d:42:
                    29:50:5f:38:22:0a:ef:7d:90:ba:46:fe:db:76:68:
                    9e:ee:10:27:86:a3:65:64:bf:c4:6f:71:7d:51:e8:
                    bd:53:d9:e4:96:5a:3a:fd:b3:7a:c0:94:ec:86:4a:
                    0d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CC:23:EB:94:92:D2:1D:99:60:B0:87:7D:B4:03:7E:34:CC:AE:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:2e:8a:c7:51:37:79:ff:f3:e1:85:99:f7:f1:06:64:80:be:
         a6:d3:d5:ea:65:92:f7:b6:a6:a2:31:2f:7d:86:28:35:90:06:
         bd:e5:07:94:d1:8e:3f:ef:9c:44:3e:88:cf:62:50:54:13:b6:
         7c:b5:38:58:ff:58:05:88:d7:3a:b1:4d:41:30:33:69:18:bf:
         96:54:4e:ab:f2:d7:c5:33:4a:5a:18:3f:c4:97:b4:29:c1:b5:
         33:93:65:1d:00:4b:65:26:d9:ee:a9:54:3b:6b:09:b3:9e:a9:
         c4:a7:70:13:48:26:a2:7c:1d:58:11:f3:e1:2c:a0:1e:da:42:
         c5:3f:07:33:1b:70:aa:97:ae:0f:8a:aa:ea:4f:84:17:1c:55:
         3e:83:3a:b9:14:34:12:47:e9:1d:99:d0:c4:bf:7c:2b:30:4e:
         4b:27:dc:6f:fb:0a:6c:ed:3e:76:56:45:8e:af:a3:d9:a9:a2:
         17:13:2a:07:61:ba:b1:c5:a9:71:da:f4:5e:10:29:d5:aa:9f:
         06:fa:92:d4:a5:44:69:1f:4f:36:92:40:45:08:33:98:df:36:
         c5:1a:37:f3:d4:eb:43:8d:ed:72:aa:4b:e5:7f:6d:0f:2a:e1:
         c3:70:23:99:b6:ab:d0:cf:a5:22:b2:53:95:1c:6b:f3:dc:a8:
         c7:5b:82:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:16 2025 by rpki-client