Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a6bdccaf-832b-32ef-b28e-9f312b8c59e3.roa
File:                     a6bdccaf-832b-32ef-b28e-9f312b8c59e3.roa (raw, json)
Hash identifier:          /IjGaS4b5vzOVU6MbjTwUpBmblEWNwqUb63lDiwf4Rc=
Subject key identifier:   1E:0E:D6:4F:08:E0:37:D7:86:BE:49:2A:4F:98:57:6A:09:40:14:10
Certificate issuer:       /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial:       010D0C9F4328584B99D77BBDBB43452D41976560
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a6bdccaf-832b-32ef-b28e-9f312b8c59e3.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     10126
IP address blocks:        2606:c00:35::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:7b:bd:bb:43:45:2d:41:97:65:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=e845ac3d-aee2-4bb0-b608-de093a96e5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:2d:53:39:25:9f:2b:03:d6:98:c1:bf:66:
                    4a:8e:ae:04:77:54:52:11:a4:dc:46:a7:e2:1c:0f:
                    28:b2:6b:b3:84:06:92:28:34:7a:0c:2a:35:7e:fc:
                    7a:18:c0:99:8a:7c:10:ea:bf:79:2e:ac:97:48:19:
                    4d:cf:1f:b6:63:06:be:91:d2:ae:59:d9:51:d7:8d:
                    37:d7:9b:17:72:23:7b:86:2d:e6:ea:26:26:e9:65:
                    23:16:0b:bf:79:b3:2c:52:83:20:57:f5:c1:d3:22:
                    7b:7c:e6:96:01:f5:ad:bb:42:4d:7b:36:47:9b:ce:
                    94:a9:83:ec:20:09:58:cc:48:fa:1d:fe:85:a1:6a:
                    63:a9:b8:93:e4:f6:d9:08:ab:2c:1d:e2:1c:e9:28:
                    19:12:ca:97:7f:02:29:7a:90:7e:6d:6b:d7:a3:0c:
                    99:f5:db:eb:ed:12:8a:dc:a3:9a:c7:0a:3d:3c:23:
                    3c:f4:43:ab:2c:70:35:64:19:38:20:c2:f2:3a:4b:
                    2a:8a:63:8d:e4:e5:a7:6f:dc:2f:96:1f:a8:0b:ad:
                    8c:39:6b:67:77:64:89:da:02:65:c6:13:97:73:97:
                    cc:63:53:fc:e8:41:c0:2e:16:99:97:20:b8:4d:2b:
                    5a:ad:e4:98:1d:5b:c8:e3:6e:91:6b:2d:53:4c:06:
                    79:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0E:D6:4F:08:E0:37:D7:86:BE:49:2A:4F:98:57:6A:09:40:14:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a6bdccaf-832b-32ef-b28e-9f312b8c59e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl

            X509v3 Authority Key Identifier:
                keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c00:35::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:82:e1:4e:82:61:79:b1:5b:94:60:a9:1b:d3:bb:88:d4:fd:
         a9:45:c8:b2:46:e2:72:42:ff:f5:6e:64:e8:7d:f1:73:32:7e:
         fd:a9:3e:bd:7e:ed:06:bc:05:19:fb:f6:fd:3b:48:a8:4a:10:
         a0:d4:10:76:30:2b:26:12:ca:7c:ca:fa:27:e9:05:e1:f2:60:
         4f:0e:4d:67:44:d4:4e:af:1b:c4:67:b4:62:6c:f1:8c:b7:51:
         4d:d5:76:f7:d6:3d:cc:21:cf:50:50:37:fd:93:0f:e1:02:0b:
         97:77:69:8d:ac:f7:04:4c:87:31:29:b5:da:3d:27:11:91:fd:
         e7:db:3d:f2:7e:4f:75:87:f0:c9:20:24:5f:f9:74:d0:76:e7:
         a8:ce:a2:f1:6a:70:d5:93:5f:e4:18:a6:31:92:b7:0b:01:f6:
         7c:17:fc:07:a8:9f:d4:c9:22:49:73:e7:79:ca:86:fb:7e:45:
         28:01:fc:3b:9d:2e:2c:11:db:4b:9d:44:d2:0d:b7:31:02:db:
         ac:7e:9a:51:da:6c:81:cb:bb:2e:f6:9c:40:39:10:97:13:38:
         db:c2:e8:d1:57:53:f5:fa:da:cc:a1:01:00:32:d2:b2:fa:5f:
         1d:f0:6e:e1:ca:af:ac:60:1c:73:85:b4:e3:00:bf:31:93:8c:
         2e:ca:20:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:38:29 2025 by rpki-client