Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774/7557395e-0b0f-31da-ba37-734c9b3f4ee8.roa
File:                     7557395e-0b0f-31da-ba37-734c9b3f4ee8.roa (raw, json)
Hash identifier:          4b2LnH2xq6x8aC6E7Li86CXK9W6ysRG4yBhBCljGdr0=
Subject key identifier:   05:01:EC:73:C1:72:75:DD:BA:EB:E0:D0:EF:0E:87:F9:66:AB:32:9F
Certificate issuer:       /CN=7918d277-f6b6-4b59-8e89-61eac2611774
Certificate serial:       010D0C9F4328584BA0DC291A5F38CF85F0DD1600
Authority key identifier: D4:8C:D4:71:32:D8:FD:1E:CF:9A:27:A7:8F:CF:A8:48:13:62:03:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774/7557395e-0b0f-31da-ba37-734c9b3f4ee8.roa
Signing time:             Fri 24 Oct 2025 13:20:38 +0000
ROA not before:           Fri 24 Oct 2025 13:20:38 +0000
ROA not after:            Thu 22 Jan 2026 14:20:38 +0000
asID:                     16926
IP address blocks:        2602:f505:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774/7918d277-f6b6-4b59-8e89-61eac2611774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774/7918d277-f6b6-4b59-8e89-61eac2611774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:dc:29:1a:5f:38:cf:85:f0:dd:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7918d277-f6b6-4b59-8e89-61eac2611774
        Validity
            Not Before: Oct 24 13:20:38 2025 GMT
            Not After : Jan 22 14:20:38 2026 GMT
        Subject: CN=279d859f-4da8-4230-84aa-e1e9b3f02722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:16:ab:bf:dd:be:49:93:80:20:94:29:cf:75:
                    7a:6e:43:61:8a:d6:75:65:6b:95:c2:e4:5c:62:02:
                    32:dc:53:f8:19:3c:4d:12:30:48:44:df:aa:08:fc:
                    0e:02:81:8e:1a:41:15:75:b0:19:0e:74:40:0d:d2:
                    d4:1e:b7:98:ed:ac:7b:7a:e2:27:43:d4:e7:2a:20:
                    d3:4d:bf:c1:30:3b:16:9c:d6:fa:a4:53:a9:81:39:
                    b6:55:90:cd:be:ab:c2:56:04:0d:92:6d:02:26:65:
                    e2:1f:d4:e5:66:4f:70:19:c3:24:cf:39:f2:ff:5f:
                    af:8a:75:43:29:e1:89:f6:f4:5e:38:9d:8f:c2:1a:
                    ff:54:1f:98:c1:4f:e8:d7:06:58:9b:c9:64:0a:73:
                    3f:ef:14:de:c3:a2:c9:9e:a3:be:24:c1:98:90:57:
                    f0:96:ec:1f:ef:ab:7c:59:06:26:43:04:f8:1e:c1:
                    ce:1f:40:c1:41:d9:28:01:64:e2:70:bb:ae:5c:63:
                    b7:d4:0b:23:45:d4:0c:be:6f:e1:59:66:ba:db:4f:
                    f2:64:6c:e7:83:1e:0d:80:2f:29:e7:5b:d5:8a:39:
                    c2:43:3e:8d:57:8f:69:a1:e7:e5:9d:44:d6:7c:25:
                    03:53:25:53:38:b5:36:80:db:bb:0a:36:a5:3a:f2:
                    3d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:01:EC:73:C1:72:75:DD:BA:EB:E0:D0:EF:0E:87:F9:66:AB:32:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774/7557395e-0b0f-31da-ba37-734c9b3f4ee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774/7918d277-f6b6-4b59-8e89-61eac2611774.crl

            X509v3 Authority Key Identifier:
                keyid:D4:8C:D4:71:32:D8:FD:1E:CF:9A:27:A7:8F:CF:A8:48:13:62:03:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/7918d277-f6b6-4b59-8e89-61eac2611774.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f505:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:cd:15:66:dc:c7:4d:b3:65:a4:b8:f7:55:08:45:cb:e0:d6:
         f4:52:9c:1e:11:19:c0:5d:e1:25:d6:4c:18:c8:f4:00:e5:ac:
         d1:36:e2:97:69:1a:54:d2:fd:67:76:50:da:c0:4b:26:20:f0:
         16:09:df:9d:a1:53:59:6f:b5:f4:a2:79:c2:fb:e6:81:89:2d:
         38:36:ac:3f:15:ae:ab:e0:66:21:7c:78:d9:6f:fd:8b:e0:f6:
         b3:00:6e:35:42:f8:98:88:0e:30:0a:ee:19:ec:53:4a:bd:40:
         84:fa:45:fc:8e:26:6f:5b:a0:0c:2b:7a:7c:e3:a7:d4:93:9a:
         32:df:29:c7:6a:bc:d3:70:ff:1c:8c:de:f3:bb:00:d4:33:90:
         4b:e2:18:f8:67:44:f4:b5:fb:fa:1d:0e:8c:73:ad:12:75:c2:
         94:c6:ab:25:a9:fe:78:b5:31:76:6d:79:a3:45:b6:e9:6b:b4:
         8f:aa:5a:8d:8f:9e:2a:0c:37:42:03:0d:d6:9e:a3:e0:69:5f:
         4e:ae:27:0c:24:e5:37:45:73:d9:90:55:40:29:f1:05:87:f2:
         e6:94:ae:23:c5:b2:8c:03:26:15:72:65:23:78:6e:78:ea:12:
         17:ab:90:57:cd:61:30:0c:5c:4c:45:d2:49:a8:6e:82:c9:90:
         13:23:00:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:57:03 2025 by rpki-client