Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3fa3109f-9542-3991-a9da-fea12f42beb3.roa
File:                     3fa3109f-9542-3991-a9da-fea12f42beb3.roa (raw, json)
Hash identifier:          WB0o9Sv/NAjlBIRypXKmqBFVXRMcqu4OoIP8WM8sjGA=
Subject key identifier:   76:44:B4:A8:95:B2:15:42:08:71:A1:02:48:3E:D2:B5:FB:B6:B1:81
Certificate issuer:       /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial:       010D0C9F4328584BBE403DAF3AFA6912C46B2740
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3fa3109f-9542-3991-a9da-fea12f42beb3.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     26904
IP address blocks:        2602:fc15:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:3d:af:3a:fa:69:12:c4:6b:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=2d089d63-877b-4784-a40d-ad22b880075e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bb:62:40:ac:b1:a9:66:0d:dd:18:a1:68:56:
                    4f:70:39:1c:b1:8d:28:1c:3b:c5:86:46:c3:8b:b4:
                    19:7f:47:7a:e5:d5:0c:0b:05:e5:c1:00:35:9c:d7:
                    64:7e:ad:7a:37:98:c0:3b:d1:88:05:7d:c3:19:51:
                    9a:00:cf:70:97:3b:f9:53:90:8a:44:4a:8e:c8:44:
                    a4:56:56:47:1a:5a:64:20:a3:85:83:e2:4d:9e:1d:
                    2b:38:c1:18:d4:79:2b:c0:05:e1:75:c0:12:f3:15:
                    e3:cd:d0:53:84:89:3d:a4:db:b1:e3:f0:33:9a:d5:
                    aa:8f:21:2c:b0:be:00:5e:c6:10:c7:4f:10:aa:be:
                    07:74:b2:5d:25:5d:7a:b0:41:6a:22:5a:ae:a1:9a:
                    88:04:c1:ac:45:87:ed:30:ad:dd:21:d2:b1:41:76:
                    77:18:f2:84:df:4b:f5:b5:3d:24:a6:fa:2f:7f:e5:
                    b3:2d:f6:28:17:90:7b:25:eb:49:d0:85:07:04:69:
                    f5:bb:f7:6d:8e:40:21:95:df:71:13:a5:74:c8:97:
                    fe:d2:7d:0a:76:7a:34:f1:ce:6b:5e:1c:16:b4:c9:
                    6b:bc:64:81:c8:26:3d:59:1a:71:46:87:43:28:79:
                    1e:3e:60:09:f2:37:12:b3:3d:7f:2d:d4:c9:57:fc:
                    4d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:44:B4:A8:95:B2:15:42:08:71:A1:02:48:3E:D2:B5:FB:B6:B1:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3fa3109f-9542-3991-a9da-fea12f42beb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl

            X509v3 Authority Key Identifier:
                keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc15:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:1d:e0:8b:5c:03:a1:ec:fc:30:62:80:99:34:15:7d:bd:b2:
         1f:74:e9:58:0a:9f:18:f5:c6:d1:7a:d8:b7:58:43:f5:57:14:
         05:09:ab:f2:1a:e9:b3:16:bb:03:b4:c7:04:08:8a:c2:f8:d3:
         6a:70:6f:53:38:95:53:f8:5f:9a:31:0c:d7:a7:48:99:d0:bc:
         ad:30:55:c7:6f:2c:36:16:c8:07:d1:6d:86:fd:3b:c3:76:cf:
         d9:ee:11:ab:63:6d:21:af:89:eb:56:8b:a0:46:57:e4:42:69:
         0c:ec:81:7d:36:9c:b8:6a:71:6c:6b:3d:12:c6:27:fe:8e:c0:
         ca:d7:b7:af:62:96:ff:b7:10:65:f3:fa:f5:48:b5:4e:38:59:
         d0:e3:da:e3:07:d1:ba:0e:12:cc:2e:57:9e:e6:a5:1e:c7:c0:
         4f:79:10:ea:bd:ea:2c:02:f6:91:b9:be:bf:bc:a9:ed:88:7c:
         a8:cc:84:3b:b3:ef:f1:f8:41:04:5a:22:f8:e0:dc:0b:4c:69:
         6a:18:ed:4c:69:df:4c:56:6b:a5:f8:97:4b:6a:57:6f:c7:f3:
         ba:62:4a:5e:83:d3:40:09:58:80:b4:63:b3:44:7d:55:03:f3:
         7b:05:30:bd:bb:bd:fa:65:ff:a5:99:15:91:c2:3f:f1:28:55:
         e6:7a:1d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:13:30 2025 by rpki-client