Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/06cf7f0e-bd5f-31d3-8ef4-8a76bdca230c.roa
File:                     06cf7f0e-bd5f-31d3-8ef4-8a76bdca230c.roa (raw, json)
Hash identifier:          wgBBtY8LHVocqwSEHmA31gHy57In8cZCasW7jOao7ug=
Subject key identifier:   95:95:A6:55:24:17:BC:A1:3A:15:AE:54:BD:EA:45:1E:CE:94:13:2C
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584BB2F7BE45677E06F17B964F00
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/06cf7f0e-bd5f-31d3-8ef4-8a76bdca230c.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     206216
IP address blocks:        2602:fb54:400::/40 maxlen: 40
                          2602:fb54:500::/40 maxlen: 40
                          2602:fb54:600::/40 maxlen: 40
                          2602:fb54:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:be:45:67:7e:06:f1:7b:96:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=03f4661f-eb9d-49dd-97f0-98d92d3e9fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7b:fd:fd:31:a9:7b:a0:d6:18:ee:12:5a:52:
                    17:50:9b:64:18:7b:4d:32:ff:a0:d7:29:9b:bc:f4:
                    d1:3e:47:08:54:d8:b4:8f:6c:bf:34:ba:0b:dd:6b:
                    69:34:fc:d4:10:3d:dc:3f:a7:b4:27:af:26:74:df:
                    a7:00:65:16:f6:64:b8:4d:bd:3d:b6:cd:25:79:e6:
                    39:6f:b4:0b:f4:c5:0d:88:94:9b:05:80:36:60:31:
                    ca:8d:32:26:01:c0:1d:ae:d1:21:38:a6:d4:bf:49:
                    2f:e2:76:f4:75:5e:c6:62:50:a0:12:fb:36:3e:d9:
                    72:ac:a5:3c:56:3f:73:1d:5b:a5:ea:25:b7:5a:f1:
                    39:ac:ee:6b:b5:b6:cc:b0:08:92:d3:7e:17:22:c5:
                    5e:f1:71:9e:68:a7:52:89:d5:fa:e4:46:64:5d:be:
                    01:1f:53:5e:ea:6f:43:0c:d8:75:36:98:0d:94:0a:
                    1f:8a:a8:2d:21:0d:02:0d:e8:45:b8:22:81:28:1f:
                    45:a2:10:e1:89:ef:23:d3:f1:c2:3a:b2:b4:ca:cc:
                    45:29:a3:c2:1e:22:3e:d9:0a:50:49:1c:78:94:33:
                    c9:22:5c:ce:84:9b:c8:0d:9b:a2:d5:85:96:7b:3b:
                    9d:9b:8a:b1:9f:b0:7f:6e:56:6d:ff:68:30:0c:3e:
                    97:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:95:A6:55:24:17:BC:A1:3A:15:AE:54:BD:EA:45:1E:CE:94:13:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/06cf7f0e-bd5f-31d3-8ef4-8a76bdca230c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:ef:d6:66:3d:04:ca:bd:7e:e6:dd:35:da:77:12:4c:37:27:
         f0:51:f7:05:66:e5:ff:f6:7d:de:fe:cd:ec:5c:13:90:1d:ba:
         3e:8f:73:df:e8:56:53:5d:4f:ee:79:ac:25:25:13:c6:f3:46:
         45:66:a8:83:2e:a5:70:81:d5:a2:67:7a:78:e6:c0:9e:4a:26:
         3b:80:3c:65:d7:0a:32:82:31:5d:00:da:53:13:86:c0:fc:08:
         0b:ea:d1:e6:ee:ee:08:6a:38:e9:42:10:99:d4:32:74:61:1b:
         e9:11:19:46:ee:32:a5:0d:4a:bb:65:b7:f2:08:5a:16:e7:3d:
         c9:5d:63:bc:8c:a6:32:9a:f1:e7:08:59:cd:97:11:d3:a6:8a:
         ee:15:a7:32:52:63:ea:40:91:d9:58:36:17:ca:cc:2b:c5:80:
         56:9f:1d:97:42:1f:9a:d6:59:43:dc:2d:6e:c8:5f:2c:a1:78:
         0a:f4:7f:5d:54:d1:6d:27:f4:98:27:b8:40:c3:ea:b8:9a:b0:
         62:28:75:d9:5b:72:fb:b0:22:83:bc:bd:7f:d0:f2:51:d8:aa:
         b8:ad:b6:d3:8f:22:42:12:3c:30:87:7f:2b:c7:60:61:fd:c4:
         ee:7d:74:fc:dc:13:ef:11:bf:17:51:b9:02:25:3d:20:e1:93:
         2e:75:ba:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:25:04 2025 by rpki-client