Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/20ae5c38-5db9-3012-8a24-81e62ff8e7ae.roa
File:                     20ae5c38-5db9-3012-8a24-81e62ff8e7ae.roa (raw, json)
Hash identifier:          qvbcmiBjEpksBIaU2OT7wa7IadIF9zDrNBUitVasv1Q=
Subject key identifier:   D7:8C:B6:F4:1C:0D:34:E0:0F:74:0D:B3:FD:D7:5F:1D:DB:D3:08:85
Certificate issuer:       /CN=1ce9c50c-e327-4243-8c1e-067bd3d4ebea
Certificate serial:       010D0C9F4328584BA7EB960960A6789246952700
Authority key identifier: 06:4A:64:E9:DF:94:C9:D6:40:7A:6E:12:55:D1:0C:5D:B1:35:A8:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/20ae5c38-5db9-3012-8a24-81e62ff8e7ae.roa
Signing time:             Mon 27 Oct 2025 02:02:22 +0000
ROA not before:           Mon 27 Oct 2025 02:02:22 +0000
ROA not after:            Sun 25 Jan 2026 03:02:22 +0000
asID:                     62468
IP address blocks:        2602:f506::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:eb:96:09:60:a6:78:92:46:95:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ce9c50c-e327-4243-8c1e-067bd3d4ebea
        Validity
            Not Before: Oct 27 02:02:22 2025 GMT
            Not After : Jan 25 03:02:22 2026 GMT
        Subject: CN=37de3904-dc70-419a-a7b0-62e10cd96364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fa:3c:f2:8a:18:5a:44:dd:03:c1:99:0c:13:
                    b5:10:ad:5f:4a:e1:55:d3:92:0f:d1:04:6e:5b:50:
                    46:7d:f3:c6:b8:28:64:cb:c2:df:7b:99:e3:8d:d9:
                    c0:70:70:9c:5f:5c:de:ab:b7:f8:52:04:36:43:fc:
                    37:0b:f2:65:e6:d1:3f:28:ef:dc:4a:78:53:2d:0c:
                    cb:2e:df:13:0b:d8:57:22:b9:40:86:cc:5d:10:e3:
                    db:89:45:29:bc:ae:76:be:10:42:36:01:38:54:46:
                    7c:ef:86:55:11:e4:56:9c:89:a8:63:a6:8c:ab:b2:
                    7b:5f:93:45:a1:ac:7b:d0:88:15:c4:9c:bd:17:0a:
                    e4:35:5a:84:1a:95:af:37:d6:d0:58:8f:7a:de:e7:
                    b0:db:17:f9:d1:08:b5:24:49:79:e1:9d:a3:89:21:
                    3d:52:40:3e:b4:dd:b9:fc:8f:04:23:a6:7c:03:9b:
                    47:d4:0b:cf:ee:84:b3:86:80:d9:72:ed:2d:91:74:
                    9c:4c:cb:72:10:b8:1b:29:42:53:20:37:98:e8:06:
                    28:e5:37:4f:30:38:8c:39:54:3b:95:8d:1a:92:89:
                    4b:78:06:69:ab:c3:4c:83:27:a7:e1:2a:8f:0c:59:
                    d5:ff:50:03:4f:c6:cd:8d:6c:69:1d:19:35:7d:66:
                    aa:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8C:B6:F4:1C:0D:34:E0:0F:74:0D:B3:FD:D7:5F:1D:DB:D3:08:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/20ae5c38-5db9-3012-8a24-81e62ff8e7ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl

            X509v3 Authority Key Identifier:
                keyid:06:4A:64:E9:DF:94:C9:D6:40:7A:6E:12:55:D1:0C:5D:B1:35:A8:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f506::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:3a:3a:7a:63:e0:fa:29:be:cf:89:e9:44:e0:29:ee:a7:db:
         43:6d:bc:7c:2e:24:ba:2e:c6:1c:77:d6:16:42:d4:0d:c0:54:
         51:28:e9:39:d7:d7:2b:35:e7:87:b8:b3:bc:d5:39:3b:d9:70:
         76:f6:8b:3d:f4:a7:b7:2c:9e:6d:95:52:b9:6f:f2:12:b7:c3:
         22:8a:8e:0e:5f:7e:92:48:fe:6d:3e:4e:5a:17:52:17:08:21:
         17:94:fc:53:62:9b:0b:9b:0d:4b:1b:ce:fb:d0:73:75:97:c5:
         59:4d:ae:c9:c1:7d:22:12:7a:49:be:ce:93:27:0d:57:f0:c7:
         17:95:3c:0b:48:b5:5f:53:bd:4e:4c:a7:c8:32:26:e3:2e:36:
         fa:bf:9d:56:15:db:a4:be:a6:39:d4:95:ed:de:ab:56:ca:94:
         53:85:e3:35:ee:40:3f:7e:e6:4d:fc:8b:ac:df:e0:a6:54:a0:
         4a:e1:ea:31:dd:e4:99:58:02:55:fc:6f:eb:16:92:d5:24:bc:
         0b:0c:80:ee:b4:43:fc:d6:9a:49:09:08:38:bd:32:f3:ee:8e:
         7a:de:82:7c:71:64:bf:e0:52:e8:76:b6:43:1f:a8:22:1e:07:
         0e:7b:35:2a:7b:99:72:d8:78:a1:73:44:78:69:95:8f:e5:69:
         c4:ce:9e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:47:18 2025 by rpki-client