Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b/017d582d-8846-32f5-8e73-65f88d0bc85a.roa
File:                     017d582d-8846-32f5-8e73-65f88d0bc85a.roa (raw, json)
Hash identifier:          Kf5AHX8Oc+DsNHO/733CsXbSeoJ/3DHAE+Tpic4pOXs=
Subject key identifier:   F7:00:F9:66:FB:55:EE:FB:CB:AD:7C:3C:B8:87:91:B5:67:94:53:7B
Certificate issuer:       /CN=ebbeaf16-b802-46ab-b69d-b00bed66688b
Certificate serial:       010D0C9F4328584BA0D26C7C76EEEF336F7E2BC0
Authority key identifier: B4:AD:F0:68:70:19:60:3C:35:4E:81:8B:F8:72:66:F8:FD:B6:CB:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b/017d582d-8846-32f5-8e73-65f88d0bc85a.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     401703
IP address blocks:        2602:81b:9000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b/ebbeaf16-b802-46ab-b69d-b00bed66688b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b/ebbeaf16-b802-46ab-b69d-b00bed66688b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:6c:7c:76:ee:ef:33:6f:7e:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebbeaf16-b802-46ab-b69d-b00bed66688b
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=9ca1a862-a0ae-43ad-832f-500cc6b8f18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:36:14:3c:e5:0d:66:77:79:05:25:cb:eb:9f:
                    f1:80:61:fc:21:f5:34:04:13:bd:d4:ee:8e:33:0f:
                    6e:df:36:fb:c7:7e:91:57:4d:45:a3:9b:8d:ef:71:
                    f0:b2:97:c9:9d:3a:9e:0b:31:bc:c0:14:cb:ba:8c:
                    cc:1c:53:bb:d0:8d:af:a4:f2:4e:5e:28:0f:ea:31:
                    49:58:2a:6a:ab:95:c0:be:33:14:dd:e5:cf:33:5e:
                    02:e2:40:88:8b:fe:64:4c:ff:21:ad:d9:32:71:87:
                    03:c8:12:87:54:da:71:6d:bc:95:4b:84:b0:fe:c0:
                    14:9a:4f:64:79:c6:97:ab:ab:8a:a1:94:ee:2b:cc:
                    f2:ad:de:4b:c8:9a:fe:52:4f:86:0c:92:a7:0a:46:
                    46:2c:0f:87:5a:1d:80:64:d8:3c:47:8b:8e:2e:fd:
                    5a:71:dc:81:f7:43:44:0d:cb:b5:34:de:3b:d9:35:
                    f8:47:82:98:2d:ab:cb:95:fc:64:08:b0:44:cd:cf:
                    29:0a:5c:91:e7:8c:c9:a4:b6:9d:21:6e:54:d8:24:
                    f6:73:23:73:f0:15:3d:fe:3f:29:eb:83:f2:0c:60:
                    e3:cb:da:68:60:da:f5:aa:01:95:a5:1d:6d:e9:c7:
                    36:ee:10:4d:d2:0a:5e:8f:63:82:52:7c:6b:b3:ca:
                    50:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:00:F9:66:FB:55:EE:FB:CB:AD:7C:3C:B8:87:91:B5:67:94:53:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b/017d582d-8846-32f5-8e73-65f88d0bc85a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b/ebbeaf16-b802-46ab-b69d-b00bed66688b.crl

            X509v3 Authority Key Identifier:
                keyid:B4:AD:F0:68:70:19:60:3C:35:4E:81:8B:F8:72:66:F8:FD:B6:CB:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ebbeaf16-b802-46ab-b69d-b00bed66688b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:81b:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a6:f4:dd:2d:0c:1d:fe:81:24:a0:3d:51:77:fd:99:e8:ca:
         7e:f5:88:85:3d:9c:26:c0:85:f2:61:cc:e7:9c:3f:1e:97:df:
         8b:9d:03:d2:0c:29:85:67:b0:77:37:16:3f:d5:ec:35:d0:ca:
         b5:9c:56:75:2a:98:7f:f1:2e:e5:b4:00:18:3d:d7:39:18:26:
         a2:b2:03:96:80:1b:22:79:d7:46:71:05:04:ea:fa:6e:dd:0b:
         b1:32:93:2f:8e:11:89:54:f7:04:f9:5f:12:2f:6f:f7:77:c5:
         62:c9:ad:d4:48:cf:6a:4c:47:e3:32:31:8f:33:de:e9:0a:15:
         38:96:57:98:b8:23:98:6c:a6:c4:3e:61:d8:f2:fa:2f:0d:34:
         54:3e:30:44:2a:cc:02:0c:ec:45:e5:b1:2e:74:9f:60:ff:72:
         12:f0:15:93:cf:26:90:fb:f2:6a:5a:7b:a4:c3:7c:77:a6:43:
         8a:d2:2b:cd:0c:ce:5e:9f:39:93:3b:4f:74:95:e0:6f:f5:23:
         39:a6:63:b8:9e:f2:01:28:09:26:cc:c6:f2:fd:47:1c:53:78:
         f1:f1:41:81:ef:ea:ed:80:30:c5:66:19:24:48:18:3b:a3:74:
         af:e2:cf:6f:ad:10:43:ef:83:41:34:6c:6d:5b:66:f1:38:89:
         b8:dc:53:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:12:24 2025 by rpki-client