Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/244759fc-1226-3aff-bfda-56910d5709ee.roa
File:                     244759fc-1226-3aff-bfda-56910d5709ee.roa (raw, json)
Hash identifier:          JkIsiwgvSydFfosYNisdvpyycx/OujFMwKhGl6w2Cm4=
Subject key identifier:   5A:95:EF:CF:D9:2A:87:54:E4:84:DA:B8:B8:91:E1:7A:BB:BD:41:B8
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F4328584BB45D17153C9708400A1278C0
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/244759fc-1226-3aff-bfda-56910d5709ee.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     399139
IP address blocks:        2602:fea7:d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:17:15:3c:97:08:40:0a:12:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=f3bdb297-4597-4a57-9356-81c2f6f557b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:d3:f5:4b:c1:df:40:64:2c:3a:d8:ac:3c:
                    a3:33:2e:27:1c:11:7b:24:fa:07:5d:0b:b1:c1:be:
                    e9:91:44:51:a3:25:fe:42:91:06:d3:3b:76:5b:90:
                    29:d1:ba:f7:72:bd:f3:1f:7d:94:9a:cf:aa:be:f7:
                    18:24:e5:36:7f:8b:9a:4c:2b:40:d2:17:6e:d1:f2:
                    f4:82:b1:76:f8:77:23:95:84:26:c6:55:6d:be:11:
                    66:b2:96:1d:1a:23:26:cd:6c:b1:e0:19:a7:28:36:
                    0f:66:6e:c9:0f:e4:9b:d4:92:47:3b:32:84:7f:7a:
                    9f:96:9f:47:f1:cc:3b:29:a0:14:54:75:87:67:46:
                    ed:38:dc:71:be:8f:83:9b:6d:d5:6f:2d:69:50:a1:
                    df:4b:15:d6:3e:bf:82:af:76:2e:86:17:10:52:7b:
                    48:6a:af:85:3b:8e:a0:a2:13:06:64:8d:09:84:10:
                    b2:38:8e:80:d2:53:29:6b:14:5a:63:d6:91:ca:10:
                    59:ba:57:0f:e1:bf:b7:ac:1a:50:86:9b:6c:18:b2:
                    c2:f6:5c:95:e5:b1:c5:50:15:a7:ae:84:25:1d:e4:
                    8b:18:27:37:d0:5e:db:b8:ca:d3:bf:0c:fa:ba:39:
                    73:b2:07:94:f8:da:d8:ba:51:12:e6:8d:09:56:b2:
                    89:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:95:EF:CF:D9:2A:87:54:E4:84:DA:B8:B8:91:E1:7A:BB:BD:41:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/244759fc-1226-3aff-bfda-56910d5709ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fea7:d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:db:9a:31:13:fc:1d:5c:f3:fd:27:3c:77:bf:f6:2b:d0:52:
         60:72:76:23:dc:cb:12:6b:65:fb:55:70:80:4e:81:98:7b:4f:
         28:70:53:2b:f7:ff:c6:9e:2c:31:3d:d9:e4:00:bb:1f:ac:fc:
         cb:08:46:64:1b:1e:ac:41:9f:dc:6b:38:41:d2:ab:e4:19:fd:
         15:77:d7:75:69:ac:90:dd:2b:7b:94:69:72:02:f4:ca:33:b5:
         22:7c:c0:09:c5:16:73:e9:0a:bb:75:d0:03:17:f9:b5:db:a9:
         ff:96:4f:56:e3:a9:e2:8c:ff:3b:33:23:a9:6c:a6:b7:3f:eb:
         fa:4c:80:06:d7:ea:14:37:54:bc:62:0e:e0:91:f0:80:1c:4a:
         4e:31:8e:f7:47:90:bb:dd:66:f1:08:17:02:08:4d:c6:c2:20:
         53:cf:64:28:47:18:3d:cf:72:86:ac:f3:f2:30:24:a1:bc:31:
         5a:76:8d:45:ce:57:41:2f:3d:d3:39:5a:0d:d5:72:61:0a:39:
         ab:21:c6:b8:f6:ae:f5:e0:5a:1b:8e:22:2c:6d:bd:96:f1:6e:
         a0:de:68:61:39:d6:53:3b:7e:b1:2a:14:1e:d1:78:fe:2b:c0:
         89:ab:36:8a:3a:41:20:48:e3:99:01:16:0d:70:8a:ac:d0:d4:
         7a:71:0c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:31:20 2025 by rpki-client