Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/30d67eb1-78ed-3728-b94d-b57f6e6df245.roa
File:                     30d67eb1-78ed-3728-b94d-b57f6e6df245.roa (raw, json)
Hash identifier:          VCQSq2Q0JwWzGrcQacQK80vus6AkuwUsuplimboEd4o=
Subject key identifier:   83:78:0F:B8:24:DC:E3:CA:59:4E:D2:01:AF:B1:78:76:2E:64:C3:3B
Certificate issuer:       /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Certificate serial:       010D0C9F4328584B9E07CEA2EAD72F01CD97A540
Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/30d67eb1-78ed-3728-b94d-b57f6e6df245.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     216123
IP address blocks:        2602:f7a7:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:ce:a2:ea:d7:2f:01:cd:97:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=4fe1e913-4fc0-4d68-92a2-af16a2efe935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e6:a2:be:20:f7:b8:a9:b7:f1:5f:d8:f4:a3:
                    ea:98:90:43:62:3f:64:fc:a8:90:07:44:2e:56:a1:
                    01:74:b0:bf:b9:71:6b:86:d3:1d:d7:fd:43:8a:21:
                    f1:01:82:a1:3c:36:77:76:7c:8b:ab:8d:62:bf:fd:
                    60:01:99:18:c0:a9:8c:5c:e1:27:d5:db:fb:1d:c6:
                    ba:72:25:8d:db:6b:bc:fd:b6:85:8a:c9:1b:92:82:
                    e8:91:27:d6:2a:42:64:1b:84:f6:94:45:72:27:a2:
                    a4:3b:13:a3:33:2a:95:55:e2:ff:32:ba:ec:ae:72:
                    61:12:78:93:32:13:51:7b:65:3a:2a:a0:5d:29:d4:
                    46:38:87:94:8c:c5:3f:9f:6f:3a:96:36:6d:d7:61:
                    7b:3b:b1:4f:df:d6:df:ef:e9:cd:76:b0:d3:e6:22:
                    e9:59:3e:89:7f:f4:4b:30:2a:d3:a3:c4:e0:1a:65:
                    98:da:a4:1f:e0:ba:5c:81:49:85:18:e1:23:04:7d:
                    da:4f:1d:f2:c1:e2:bc:ca:33:7a:43:24:f1:cf:1b:
                    eb:fa:87:f8:ba:e7:4e:77:e8:1e:10:7d:74:2c:f0:
                    6c:b9:fb:91:52:c6:c1:cc:1e:a0:be:16:30:5d:5a:
                    c8:de:91:f5:05:5c:14:16:32:bb:3d:16:f0:04:7d:
                    b4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:78:0F:B8:24:DC:E3:CA:59:4E:D2:01:AF:B1:78:76:2E:64:C3:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/30d67eb1-78ed-3728-b94d-b57f6e6df245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl

            X509v3 Authority Key Identifier:
                keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a7:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:5d:df:48:a5:38:c3:b3:4e:94:8c:b9:f7:a9:c5:86:f4:a1:
         5e:dd:d1:d2:eb:99:db:e4:38:9f:b3:08:38:f5:2a:85:75:1e:
         a5:7f:c1:30:a3:1c:14:41:86:e2:9e:9f:ae:92:2b:27:77:24:
         25:b4:80:0b:b5:c5:4a:1b:05:86:65:f8:da:ff:51:16:9a:93:
         f6:48:4a:96:a1:92:2f:a7:08:db:4d:7a:83:ca:ea:6f:7c:21:
         10:25:00:30:ca:cc:4e:fd:79:e2:78:1c:7b:d9:df:de:7c:d4:
         e9:29:7a:05:58:26:68:9f:f1:5f:18:83:d6:37:ab:c8:fd:b8:
         ea:ca:8f:c7:2f:f1:8b:a5:d4:20:05:19:ea:ce:70:18:eb:6d:
         75:e6:5a:c4:eb:c5:12:e4:0f:e6:3e:fe:94:18:7d:31:f3:b0:
         c4:89:30:d7:dc:1a:84:fb:94:03:46:59:34:16:e9:a4:a0:ae:
         7f:34:56:cd:29:fa:d6:6e:88:ef:86:3e:25:ba:34:57:6f:a9:
         ba:be:92:09:17:0a:40:24:f3:b1:be:77:f0:af:2d:ad:05:ce:
         6d:79:ed:ac:f8:9b:5d:53:3d:64:37:ef:54:15:92:ef:e3:94:
         16:88:35:0a:e4:25:1a:89:59:8a:05:cc:f8:7b:0f:47:bb:26:
         60:65:7f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:29:26 2025 by rpki-client