Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc6556e9-7402-360d-ad41-262ad86e7772.roa
File:                     dc6556e9-7402-360d-ad41-262ad86e7772.roa (raw, json)
Hash identifier:          pl/3PhCxZZbZvOf4hF9XQP7LV9otpbbyKmiSKeNz158=
Subject key identifier:   57:82:E5:14:E6:80:90:7A:8F:12:42:9D:10:71:E5:05:44:D2:38:12
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584BBB75A3D6C797BCA2F9961CC0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc6556e9-7402-360d-ad41-262ad86e7772.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     396982
IP address blocks:        2605:4300:3b02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:a3:d6:c7:97:bc:a2:f9:96:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=b12431b1-1e40-4b67-9089-df2b51a612c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b5:55:e6:28:31:1b:79:cc:28:7a:ca:07:81:
                    a4:58:06:b5:0c:cc:d4:44:17:0d:90:5c:98:28:e2:
                    19:15:22:17:8a:e7:7d:65:d5:60:d9:6b:5f:d6:92:
                    03:ed:e7:67:c0:59:03:a1:5a:33:e0:81:26:20:28:
                    eb:5c:4b:e3:c8:c9:00:81:98:1f:3c:23:33:9e:d6:
                    f2:74:66:2c:79:40:0d:0b:68:a5:83:2a:b5:95:c5:
                    73:8f:88:74:8e:02:c4:61:5d:d4:2b:7d:d2:b4:46:
                    ef:f8:e5:49:f0:fd:2a:9c:54:2b:9e:0d:ea:64:e7:
                    cd:64:9b:45:7d:3c:eb:22:fe:4b:3d:7c:b5:f0:3b:
                    d2:6b:bb:2d:3a:92:d8:d8:17:18:10:cd:09:78:f7:
                    2b:ea:ad:38:6c:63:d2:fc:be:04:bf:02:f6:40:66:
                    7a:20:3c:5e:83:82:1d:ad:1b:26:64:84:4f:de:0d:
                    70:b5:ec:63:e1:7a:2d:bb:cd:07:ec:d8:d4:94:b4:
                    03:0c:89:b7:9a:ee:2f:63:ba:58:d3:b9:3a:a4:10:
                    47:a3:2d:b9:b9:7a:a9:1d:17:f6:ad:64:09:ba:3c:
                    8d:ea:d1:16:e8:ec:82:69:2d:88:8b:d3:56:9c:fd:
                    76:68:30:23:6a:af:ea:3a:3b:da:09:e7:96:42:48:
                    7e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:82:E5:14:E6:80:90:7A:8F:12:42:9D:10:71:E5:05:44:D2:38:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/dc6556e9-7402-360d-ad41-262ad86e7772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:3b02::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ae:3c:f3:8c:7d:41:c6:ac:e6:b7:0c:3a:ab:62:f2:fa:ac:
         46:02:7f:b1:06:d2:17:0d:fe:4c:78:ca:35:1b:fb:87:16:89:
         3f:94:e4:11:ce:af:b0:d0:d7:48:cc:94:7b:e2:56:78:55:c6:
         5b:17:2c:64:66:f6:28:ac:94:7a:bb:1d:fe:ef:fc:98:ee:c7:
         d2:98:4a:2e:b6:1f:c2:fb:d0:bd:46:0d:37:a8:38:39:c3:7c:
         83:48:b4:f4:12:d6:07:45:85:30:ba:72:6d:9c:a3:4c:98:6a:
         17:10:d1:c8:96:d6:97:3b:ed:d2:ae:58:4b:72:e2:38:ef:e0:
         c9:ef:7a:c5:04:c9:7d:2b:bd:45:94:87:12:96:da:31:bb:31:
         c5:f4:64:53:13:6f:51:99:d3:31:ec:14:55:4b:f2:09:6e:eb:
         81:68:fb:b4:2b:ee:e0:da:28:45:d4:54:b6:d7:46:38:ba:12:
         73:18:81:c2:7a:9a:b8:ab:1c:de:6f:a7:e6:9e:dc:17:b9:23:
         98:a6:69:4c:e9:21:45:91:0a:9b:29:ec:fd:79:d9:d4:01:ff:
         85:07:04:99:81:90:f6:8c:10:6b:21:4d:09:b8:79:72:60:4b:
         0d:c7:50:bb:72:c4:8e:e7:15:63:cf:7f:bb:04:49:9d:84:7e:
         45:f2:d9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:59:20 2025 by rpki-client