Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/a8a7b368-d581-32bf-98ab-f43fc17a31c0.roa
File:                     a8a7b368-d581-32bf-98ab-f43fc17a31c0.roa (raw, json)
Hash identifier:          3AYezZ0+EAwvPIXLqjl1GlelRhcT9fgnB/9f0/hRptk=
Subject key identifier:   DC:E7:91:EF:92:E3:EF:1C:29:03:4B:E1:5D:14:28:BD:C4:6D:AD:DB
Certificate issuer:       /CN=1ce9c50c-e327-4243-8c1e-067bd3d4ebea
Certificate serial:       010D0C9F4328584BA7EBC757A4B994D138DBE200
Authority key identifier: 06:4A:64:E9:DF:94:C9:D6:40:7A:6E:12:55:D1:0C:5D:B1:35:A8:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/a8a7b368-d581-32bf-98ab-f43fc17a31c0.roa
Signing time:             Mon 27 Oct 2025 02:02:46 +0000
ROA not before:           Mon 27 Oct 2025 02:02:46 +0000
ROA not after:            Sun 25 Jan 2026 03:02:46 +0000
asID:                     11761
IP address blocks:        2602:f506::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:eb:c7:57:a4:b9:94:d1:38:db:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ce9c50c-e327-4243-8c1e-067bd3d4ebea
        Validity
            Not Before: Oct 27 02:02:46 2025 GMT
            Not After : Jan 25 03:02:46 2026 GMT
        Subject: CN=6c7dd002-bc1c-4efa-a56d-89dabd18a5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ed:96:f7:6f:11:35:68:ef:18:ba:43:4d:1a:
                    54:42:4e:99:75:8e:08:28:b0:41:b6:41:82:b2:e5:
                    68:db:3d:6f:de:e9:89:d3:9d:7e:bf:e6:09:87:52:
                    79:c5:a2:07:aa:ff:df:26:a2:e0:9a:36:cd:78:4f:
                    9e:8b:04:e0:b3:4b:3f:41:9c:74:5c:f2:5c:79:c3:
                    3f:d8:e0:d8:2e:69:37:ed:66:83:60:cc:f9:99:ae:
                    e6:48:71:52:eb:2a:24:b1:b5:8d:c5:b2:f2:a6:3f:
                    f3:9b:d3:65:e2:2d:d4:f8:d0:b7:f5:75:99:3d:dd:
                    ec:73:38:07:05:aa:9a:27:24:37:a4:fc:6e:5f:1b:
                    1b:ed:28:e2:4d:56:6f:85:74:73:d3:27:df:8c:68:
                    d1:ee:11:81:ca:b7:93:50:d1:32:60:0b:0f:19:3f:
                    42:3b:60:01:0c:c1:ee:fe:ba:00:3d:d3:25:b2:e1:
                    9c:e9:4a:1b:de:48:3f:7a:b8:de:22:b0:06:04:d8:
                    60:aa:37:31:f7:99:ec:d3:ee:05:15:d1:5e:26:5b:
                    cd:53:c1:04:3e:47:18:66:1a:db:4e:d4:e5:11:73:
                    fd:bc:3d:b0:06:8a:66:9b:1e:99:c5:52:16:f9:f3:
                    8e:4b:90:96:af:a0:5a:13:86:d6:f2:36:f7:99:d6:
                    cb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E7:91:EF:92:E3:EF:1C:29:03:4B:E1:5D:14:28:BD:C4:6D:AD:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/a8a7b368-d581-32bf-98ab-f43fc17a31c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl

            X509v3 Authority Key Identifier:
                keyid:06:4A:64:E9:DF:94:C9:D6:40:7A:6E:12:55:D1:0C:5D:B1:35:A8:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f506::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:17:0c:42:cb:59:3e:87:c8:00:d0:0a:b5:b3:6e:90:cb:56:
         57:40:fa:04:5f:6e:f4:7e:ab:cf:74:71:8c:31:f2:8a:8f:8d:
         12:3b:3d:f7:5a:27:37:af:69:88:14:3c:1c:73:37:3b:be:8c:
         54:a8:76:83:9d:44:a4:e8:4d:b8:56:c3:02:41:05:56:8b:df:
         38:fe:1a:ae:a5:70:df:d7:46:dd:96:c3:a0:67:08:bb:9a:ea:
         20:79:5e:04:5a:5b:c3:80:53:95:1c:0f:9c:70:eb:1a:11:70:
         3c:14:5a:80:78:2d:d0:45:40:53:f7:d9:33:ca:2b:6b:0f:20:
         5c:57:6e:48:be:03:7e:2c:33:b0:16:a5:a6:c7:41:87:72:6b:
         cd:be:d1:5a:b4:ab:5c:aa:7d:bb:ef:b4:7e:48:00:20:2d:cd:
         a9:30:48:f9:fd:b4:e2:6e:8f:bf:cd:b5:04:45:43:a1:9b:1f:
         a8:15:3c:a0:ea:0f:cf:4b:12:10:1c:fd:79:7c:b7:b4:8f:19:
         ce:2e:ee:c2:b1:bb:e4:a4:da:1b:0d:7f:a6:82:3d:ae:88:81:
         8b:85:cd:05:71:fc:bc:9b:1f:25:9b:f4:4d:0b:e4:42:08:4a:
         c3:fb:ee:87:bf:33:ba:92:30:f7:81:58:6e:fc:90:31:5c:99:
         dd:e8:51:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:59:26 2025 by rpki-client