Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa
File:                     f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa (raw, json)
Hash identifier:          f8COy5qfFhjaHmIxgUqamly0i+Wayw/2YqMkdsGj0Io=
Subject key identifier:   74:6C:18:9A:7C:D8:A5:34:B1:C7:75:C8:F5:03:C7:48:9F:5C:D6:13
Certificate issuer:       /CN=da62f168-0c26-4931-a3e3-4abaa31177f0
Certificate serial:       010D0C9F4328584BABFD0D342C256F26B4C72420
Authority key identifier: 7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     16509
IP address blocks:        2620:c3:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fd:0d:34:2c:25:6f:26:b4:c7:24:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da62f168-0c26-4931-a3e3-4abaa31177f0
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=7cde77ea-e34d-4a66-81a1-0a6495f85e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:61:06:4c:d6:de:3a:57:09:4b:69:73:0d:a2:
                    82:11:02:d0:fb:2b:a3:da:4b:f2:3a:e2:36:d4:e7:
                    7f:b1:08:55:c2:7f:22:a8:f8:ca:08:42:a7:36:17:
                    74:d9:0c:40:3d:84:77:8c:44:2e:4d:76:72:ef:40:
                    ca:e6:2f:c9:18:a5:56:ce:a3:1e:b5:13:b0:0a:ea:
                    47:0a:19:3e:2a:56:38:60:b2:97:d5:15:04:11:27:
                    4f:23:e7:b8:57:10:48:bf:08:aa:6c:89:b4:c7:a5:
                    07:a8:06:dc:9f:16:72:78:a3:6b:1d:27:b0:34:3c:
                    f4:87:5a:15:30:a9:48:98:f3:19:6d:d4:f4:38:4e:
                    19:04:15:18:15:1e:29:be:4a:9c:81:ae:70:c0:c2:
                    ca:87:b8:c9:63:6b:de:f4:0d:7a:1c:0f:fc:7b:7c:
                    fa:12:81:64:6b:ba:6b:c9:26:8b:22:55:a7:99:db:
                    3d:3a:4f:6a:c2:c7:34:ee:cd:74:0e:c7:c9:28:38:
                    7b:6f:0a:14:6f:2a:fc:3a:7b:bc:41:f6:10:ed:88:
                    ab:c9:c4:4a:a2:aa:23:9a:80:15:47:64:15:5f:ca:
                    99:0e:a2:ac:c5:9d:17:0c:37:07:8a:6a:18:06:c8:
                    4b:7a:fd:67:76:88:f0:3c:ba:77:07:f6:50:95:fe:
                    7d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6C:18:9A:7C:D8:A5:34:B1:C7:75:C8:F5:03:C7:48:9F:5C:D6:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/f533d16e-f0b0-3b36-8aab-32ed5b10781e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0/da62f168-0c26-4931-a3e3-4abaa31177f0.crl

            X509v3 Authority Key Identifier:
                keyid:7D:13:A9:4B:75:4C:67:24:6D:B2:FA:E5:E5:74:22:EC:B3:1C:C6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da62f168-0c26-4931-a3e3-4abaa31177f0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c3:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:6e:2f:f3:a3:f9:e5:2c:70:32:77:9d:c7:bb:b9:73:08:0e:
         a0:f6:d8:a6:7d:8a:01:9a:f8:3c:c6:fc:ee:ab:59:37:a2:8c:
         ee:66:d8:22:94:d8:f0:95:9b:e2:82:36:51:8f:a2:01:d1:3c:
         87:d8:5c:9b:de:0f:f7:d0:47:2e:bb:c9:f1:33:dc:fe:bb:2f:
         cc:ec:77:6a:f7:38:b3:15:55:d0:90:56:ad:3e:00:82:1b:c9:
         61:8f:c7:45:b1:83:8e:48:15:36:5e:5e:40:8c:e5:06:e3:04:
         be:2d:41:12:0f:b6:cf:15:9e:a8:95:ab:f8:13:d4:3c:ae:c1:
         5d:13:0e:7c:6f:f7:ea:9e:2d:fc:01:5d:a6:63:ea:21:2f:12:
         03:d1:5a:83:25:cd:76:3c:ca:71:1d:11:28:83:7f:17:a2:7b:
         08:20:16:f4:34:be:0b:7f:9e:3b:47:ed:9c:e0:88:43:0f:37:
         a1:17:50:45:4c:4a:4b:b4:c7:ee:e8:5c:31:be:79:41:4c:24:
         d8:78:c3:a5:bb:4c:25:85:06:48:28:94:19:fb:3b:a5:05:11:
         f7:8c:b7:44:cc:0b:c4:d1:27:a0:a7:df:b2:eb:ca:f4:68:36:
         9d:06:85:ef:06:1c:82:5d:32:cb:a1:ef:0a:ec:63:78:3d:03:
         ee:1f:6e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:37 2025 by rpki-client