Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/9be113fd-a906-3adc-abd9-41ca44625fae.roa
File:                     9be113fd-a906-3adc-abd9-41ca44625fae.roa (raw, json)
Hash identifier:          hssw5sBiNMpq7xX6KCECnKKnNL+UryYY1LLa7nZBSiY=
Subject key identifier:   B5:D7:E1:7C:07:94:1F:A6:35:CA:49:70:B3:8C:C6:56:76:35:96:62
Certificate issuer:       /CN=fca4862e-7314-4415-a264-4e5dc31b73d8
Certificate serial:       010D0C9F4328584BC10ADF2628BA0FEB69BF5480
Authority key identifier: F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/9be113fd-a906-3adc-abd9-41ca44625fae.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     4185
IP address blocks:        2620:0:610::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0a:df:26:28:ba:0f:eb:69:bf:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca4862e-7314-4415-a264-4e5dc31b73d8
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=9dc7a5ba-4e23-4ac2-a902-5ed150bc2f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5d:7f:7e:5b:c2:72:24:9a:6d:c0:03:4b:51:
                    ae:3d:e4:17:55:80:ae:ac:bc:ff:49:e0:1c:f9:12:
                    02:0d:c3:00:10:3e:95:37:22:19:f0:99:6c:b9:ef:
                    19:50:16:79:f0:db:ab:d5:bd:c6:3b:7e:06:15:83:
                    9f:c5:be:64:0b:e5:de:e0:f8:fb:ae:6b:31:ee:10:
                    b5:41:d7:ae:28:24:2d:1f:95:a2:93:5f:27:27:7f:
                    93:23:a2:ff:ff:fc:27:bb:21:cc:ec:6a:37:85:2b:
                    73:98:5a:84:b3:18:f8:81:22:ba:db:bf:4c:1e:12:
                    4e:fa:4b:ab:4b:68:1d:6a:48:a0:0e:1e:07:6f:6d:
                    12:87:36:e1:fe:f7:dc:44:73:ad:4e:0e:bc:eb:d6:
                    07:32:47:41:29:43:d7:43:8b:6d:02:0d:e6:80:c2:
                    60:41:f6:db:8b:f4:a0:1a:37:e2:ab:a8:b0:85:e7:
                    34:7c:ee:3a:04:a9:4e:73:07:ae:c6:e3:c1:1e:9a:
                    c9:7e:7a:a5:6b:e7:1b:a5:ce:3e:f1:62:bf:aa:f1:
                    92:17:2e:92:ed:6c:90:ae:36:9d:6c:dc:e2:00:ef:
                    a1:11:20:e9:45:76:e0:25:5e:4d:c3:49:83:90:a0:
                    ec:5d:cd:11:94:be:a2:7e:5d:37:93:17:70:ee:91:
                    c4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D7:E1:7C:07:94:1F:A6:35:CA:49:70:B3:8C:C6:56:76:35:96:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/9be113fd-a906-3adc-abd9-41ca44625fae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8/fca4862e-7314-4415-a264-4e5dc31b73d8.crl

            X509v3 Authority Key Identifier:
                keyid:F3:2A:FE:F1:7D:67:12:DA:6A:50:D2:98:1F:3E:31:47:61:82:95:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fca4862e-7314-4415-a264-4e5dc31b73d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:610::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:5b:ea:0e:bc:66:cb:a6:fd:dd:e6:df:1f:6f:b0:0b:7a:ef:
         bf:4d:fd:e3:44:96:e5:cd:48:40:2e:61:95:14:7c:30:c5:43:
         ac:89:59:3f:a5:5c:e5:66:3f:a4:45:f4:67:6d:46:a2:d5:6d:
         d2:07:a7:29:ef:5b:7d:31:4a:de:9f:a9:2f:20:0a:86:ba:37:
         76:13:bb:12:56:73:62:37:27:25:d1:fa:fc:29:cf:97:c0:fe:
         a1:b8:07:9f:57:1e:8a:d6:7d:33:9b:60:32:eb:12:cf:8e:db:
         38:ee:57:91:fb:e5:43:21:47:71:0d:94:44:e9:81:96:9d:f0:
         53:65:e8:85:ad:b6:84:08:94:af:fa:fb:bc:57:c5:fb:fb:8c:
         dc:09:68:2c:57:cc:27:75:54:3d:d1:9f:f8:d1:55:cb:8c:93:
         de:f3:bb:39:72:cb:80:b9:6b:26:42:26:3b:97:03:9e:98:9f:
         d8:bb:20:12:45:43:38:0f:b9:6b:48:c6:23:03:06:12:22:48:
         03:3f:b9:47:84:85:fc:94:5e:4c:8a:5d:1b:04:3a:53:08:dc:
         0d:91:c0:cb:ad:b7:48:ad:b0:ce:d2:9e:ae:e4:2c:ec:6d:2d:
         6b:31:53:43:77:83:30:e1:73:8e:41:4b:2f:a2:a6:bc:0a:59:
         a8:05:c9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:57:49 2025 by rpki-client