Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/dfc48d9b-9e6d-3a40-a081-5504084ff21f.roa
File:                     dfc48d9b-9e6d-3a40-a081-5504084ff21f.roa (raw, json)
Hash identifier:          Lv8mMSnrTNpiu+BkOgeqS0JMiFVRyjv3oBvJo0ZAg6g=
Subject key identifier:   ED:3F:C2:32:E1:A1:25:02:1A:CF:18:63:95:3E:AD:5D:B0:8D:1F:A2
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F4328584BA7CCEECB8F34DBD5C2DFCF80
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/dfc48d9b-9e6d-3a40-a081-5504084ff21f.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     61112
IP address blocks:        2602:fa4f:900::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:ee:cb:8f:34:db:d5:c2:df:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=f155618a-b961-45c6-88ed-94fdf04572d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d6:a5:0b:aa:67:13:80:7f:78:4c:ce:b3:76:
                    8f:9b:f1:01:ed:d3:39:3c:de:55:ec:07:26:cf:27:
                    92:12:01:24:58:10:7a:7b:c8:0f:f8:b7:fd:94:fd:
                    3d:f9:37:bf:87:72:40:13:22:2c:0f:5a:02:ac:38:
                    d2:1b:08:ee:44:4f:4c:c8:4b:17:f0:41:c7:50:c5:
                    09:02:41:4c:39:c0:fd:e0:40:a8:93:3e:30:95:79:
                    7c:83:56:d8:38:df:4f:07:aa:40:d3:72:6c:5d:8f:
                    9a:a2:14:60:cf:71:e5:70:78:fa:95:1e:46:b6:7d:
                    d4:83:95:8a:b8:f3:3a:db:92:d6:72:66:ae:79:53:
                    b7:75:d7:75:b2:9a:2b:74:04:f5:5d:9d:7b:5e:31:
                    da:44:d5:de:02:54:16:19:89:54:19:41:58:84:88:
                    ac:18:0a:31:5b:38:80:9b:4a:45:32:8e:c6:98:42:
                    60:f6:0d:ab:0e:9d:dc:a8:cc:52:7f:ca:fd:bf:15:
                    5e:7b:2a:25:fc:a9:d8:f3:f0:e5:e0:8e:f9:bc:bc:
                    db:45:ce:4f:e4:59:a9:69:c4:5d:91:13:e4:b4:01:
                    36:d9:0c:85:31:3e:a0:37:09:ec:01:33:e5:1c:4f:
                    b6:03:8b:a3:6f:80:32:d3:f2:11:dd:39:80:62:78:
                    cc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3F:C2:32:E1:A1:25:02:1A:CF:18:63:95:3E:AD:5D:B0:8D:1F:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/dfc48d9b-9e6d-3a40-a081-5504084ff21f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:bd:62:17:2e:d8:8d:90:77:e9:44:f1:20:09:82:58:e9:58:
         9f:64:34:e0:d4:47:08:63:cb:98:e8:b9:f9:34:15:45:69:d9:
         62:dd:07:0d:91:7c:fe:1b:e1:9c:16:8c:6b:a0:b5:cd:8e:b9:
         29:36:e5:5e:59:c4:78:9f:ca:87:aa:68:68:70:7f:3f:2f:ee:
         9b:25:ec:f5:b7:23:f0:fe:01:31:f4:10:62:ac:d9:ad:ef:0f:
         82:40:6a:ce:75:fe:e5:e1:37:b9:60:06:9d:96:df:f6:46:f3:
         1f:a0:50:e2:38:70:93:ae:15:cb:6a:3f:c3:ac:8e:ea:fe:41:
         16:81:c3:62:e5:3b:ce:1b:b1:bc:66:a2:6f:0d:bf:ba:26:fa:
         3b:a5:91:77:1e:e4:5e:4c:95:4a:3a:23:7c:12:49:d3:68:91:
         74:a2:de:ac:05:e4:d7:a3:2f:c9:d4:a6:94:bd:a5:32:84:0a:
         f9:c5:a3:08:80:75:30:0b:b0:46:71:5a:9a:b7:79:b7:15:53:
         73:81:0f:20:bb:df:a3:be:93:05:0c:91:ee:0a:e7:39:3c:7b:
         39:fd:3f:a3:69:a7:35:4d:94:c8:3d:b8:c3:b9:fc:b6:ef:17:
         64:6b:36:d9:c0:27:d9:19:6f:0c:bc:f0:b5:c8:4c:89:93:32:
         b0:56:b2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:57:14 2025 by rpki-client