Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/08ee47d2-b37e-3af6-8b02-286bce4dae50.roa
File:                     08ee47d2-b37e-3af6-8b02-286bce4dae50.roa (raw, json)
Hash identifier:          q5BqKBpOykOd2U4prHVf0QPd4qp4t2pQP/R/1+PPGjQ=
Subject key identifier:   25:EA:A7:8A:08:F1:0D:BA:22:F0:8B:02:0E:FF:30:FC:CE:16:DF:26
Certificate issuer:       /CN=960472d8-4288-45f7-a19c-aaf7b143c8b6
Certificate serial:       010D0C9F4328584B9E07985E82B8D5B4F6C6D400
Authority key identifier: 46:94:09:DA:5D:F6:BF:1C:AE:7D:1B:91:A2:A4:29:F3:4A:FB:9F:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/08ee47d2-b37e-3af6-8b02-286bce4dae50.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     397095
IP address blocks:        2602:fe34::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/960472d8-4288-45f7-a19c-aaf7b143c8b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/960472d8-4288-45f7-a19c-aaf7b143c8b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:98:5e:82:b8:d5:b4:f6:c6:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960472d8-4288-45f7-a19c-aaf7b143c8b6
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=ea69606a-aa9b-492f-a028-c6fcb6b4279e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:21:9a:08:32:7c:c3:27:d5:1b:c2:eb:cf:c7:
                    c7:ec:6f:ca:ce:88:f6:29:1a:aa:e5:59:ef:0b:ad:
                    f3:fb:ec:b5:ad:8b:c6:30:58:25:ab:f8:a4:a6:a2:
                    7d:76:7f:9c:e1:13:36:e3:56:26:27:ad:43:05:6f:
                    33:0e:a4:fb:26:5d:e9:86:a2:79:89:c7:f9:e1:79:
                    88:38:4e:c7:09:02:f5:45:1f:74:6c:6c:48:86:5a:
                    92:0e:71:1e:f2:cd:de:5e:6a:0e:40:7d:95:cb:eb:
                    c8:a6:d3:9a:4f:84:4f:44:f7:7a:de:ba:86:c6:c8:
                    3b:29:3c:88:14:02:84:b0:43:92:bf:08:f3:be:2a:
                    28:1a:46:15:10:10:05:14:3a:49:ee:17:15:4d:fb:
                    e0:55:73:4a:05:c4:9d:ca:a5:33:14:2b:42:a2:ff:
                    4f:04:81:c0:f7:25:70:81:9e:15:25:2b:59:cc:4b:
                    fd:8f:6a:55:b4:22:14:08:ec:99:aa:ff:0b:35:25:
                    2d:e4:b2:fa:2b:b8:0f:3b:1e:8e:17:af:69:2b:c3:
                    36:e1:f1:82:7a:de:e4:0d:85:71:af:b0:c8:9d:3c:
                    3e:68:5e:fa:e7:ee:e6:de:2c:bb:03:9d:4a:72:28:
                    9c:fa:4c:bb:fe:65:89:b3:67:e0:3c:1b:77:22:15:
                    ac:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EA:A7:8A:08:F1:0D:BA:22:F0:8B:02:0E:FF:30:FC:CE:16:DF:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/08ee47d2-b37e-3af6-8b02-286bce4dae50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6/960472d8-4288-45f7-a19c-aaf7b143c8b6.crl

            X509v3 Authority Key Identifier:
                keyid:46:94:09:DA:5D:F6:BF:1C:AE:7D:1B:91:A2:A4:29:F3:4A:FB:9F:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/960472d8-4288-45f7-a19c-aaf7b143c8b6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe34::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:6b:7b:ed:25:33:59:25:98:0d:8c:b8:30:84:91:5c:4d:45:
         ee:d2:9c:11:90:b2:8c:bd:9a:b0:68:96:ab:df:02:69:68:72:
         21:c3:fe:05:99:83:73:a9:76:de:2e:a6:72:1f:84:24:c6:49:
         ee:0a:35:d5:f8:03:35:d4:f8:fd:d7:ca:e4:85:33:ad:d4:3b:
         f9:8d:43:f8:94:d1:9b:5f:59:5f:e5:b2:34:6f:c7:f8:5e:33:
         0e:db:c1:45:e8:bc:bd:f7:b8:68:95:b9:55:65:2e:2e:5b:43:
         af:75:46:00:d4:05:b5:fc:53:40:69:5f:5a:07:88:96:40:59:
         0d:62:4f:47:36:f6:6c:60:4c:4c:0e:e8:39:1a:05:d2:50:d2:
         c0:99:a5:be:97:08:ab:28:da:5a:ea:6c:f5:1f:a8:d8:c6:4f:
         dc:9f:d9:d7:e4:53:20:ce:77:a1:03:e4:d2:ac:14:a1:e6:ab:
         e4:75:e7:e5:8e:08:3d:74:5f:02:76:ba:4b:20:b6:0d:4f:71:
         c3:7c:e9:73:03:36:cb:b6:ca:b2:e6:dd:16:a8:d7:1f:13:ea:
         3c:1a:06:6d:fc:86:aa:91:ff:71:27:bf:74:71:f8:29:87:ba:
         4e:ff:08:5e:cf:7e:1c:5c:bb:b9:e4:a0:cb:93:d8:e9:1f:9e:
         ff:c2:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:39:10 2025 by rpki-client