Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/6055e802-b1ca-3245-9775-dd9e66bfb8bd.roa
File:                     6055e802-b1ca-3245-9775-dd9e66bfb8bd.roa (raw, json)
Hash identifier:          HqbWaN+w6vgR1jMAXtorK447cEs2gCzVD65J85YnWtE=
Subject key identifier:   BE:0E:E3:45:40:B6:0C:1E:AC:BD:47:39:FC:36:BD:EA:BF:C8:95:30
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584BAF350506D70B536CE6B00A00
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/6055e802-b1ca-3245-9775-dd9e66bfb8bd.roa
Signing time:             Wed 29 Oct 2025 16:40:59 +0000
ROA not before:           Wed 29 Oct 2025 16:40:59 +0000
ROA not after:            Tue 27 Jan 2026 17:40:59 +0000
asID:                     399275
IP address blocks:        2602:fcc0:3334::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:af:35:05:06:d7:0b:53:6c:e6:b0:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Oct 29 16:40:59 2025 GMT
            Not After : Jan 27 17:40:59 2026 GMT
        Subject: CN=fcad76ec-2ac7-4d30-86d0-b296a2d27bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:51:e8:a5:57:47:9c:9a:73:23:08:3e:08:2e:
                    de:48:36:48:f5:89:98:e4:a8:6b:d0:3f:a5:a7:73:
                    46:ac:b9:f3:2b:87:0d:c4:a9:41:15:ba:1e:91:24:
                    4f:d4:ca:59:7a:ea:aa:4d:8d:35:e5:6e:40:9f:13:
                    11:77:eb:81:b5:d6:b7:8b:8b:5a:0f:29:4b:8c:f2:
                    45:56:cd:4f:46:d0:4c:d1:40:ad:16:0c:da:d0:d8:
                    67:be:54:3a:c2:37:73:fa:d2:fb:77:cd:6b:81:70:
                    32:3b:ad:80:d4:e9:c5:0a:84:03:a9:af:2a:e4:3c:
                    27:3b:cd:92:67:51:62:de:42:58:c9:c0:2a:4a:ce:
                    cb:c0:46:98:44:f6:9d:0b:a0:e6:7a:c4:30:40:ce:
                    5d:53:f8:50:6a:dd:13:d4:a5:58:f8:ab:56:a9:32:
                    e5:63:3f:19:92:62:8a:44:8c:19:8c:d1:11:de:6c:
                    e9:57:c0:28:2d:db:9f:e1:54:f0:92:d8:13:dd:9f:
                    fb:72:83:3c:1b:97:32:8c:1e:89:5e:f3:3a:0c:8e:
                    53:89:ad:1c:94:8c:dd:32:ad:62:6b:90:0e:5c:11:
                    f2:38:7d:40:45:44:1c:62:67:ed:58:70:45:ff:e6:
                    b8:cb:c0:4b:21:74:c0:3d:21:f8:0f:28:b5:47:2c:
                    ba:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0E:E3:45:40:B6:0C:1E:AC:BD:47:39:FC:36:BD:EA:BF:C8:95:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/6055e802-b1ca-3245-9775-dd9e66bfb8bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcc0:3334::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:44:e0:20:11:ff:bc:dd:28:c5:7c:4b:43:76:63:91:0f:24:
         e3:ac:76:74:4c:dc:25:51:e5:0e:09:82:29:ae:9a:6f:05:5e:
         7c:16:da:58:37:06:ae:01:4f:07:bd:da:25:52:ca:05:7a:6d:
         94:31:e1:b2:64:1b:67:08:0d:88:8a:2c:e5:bf:64:69:06:23:
         0d:e2:99:68:05:5e:c7:2e:ff:6f:38:1c:51:c9:97:d4:4b:fc:
         a9:13:1d:7d:09:e2:ed:ef:c3:43:ce:c5:6e:36:b7:cb:74:96:
         03:95:01:cc:d2:11:a5:43:fe:7b:56:42:ae:97:a9:d7:fd:5d:
         5b:69:5f:91:61:94:c7:4f:0c:fd:ee:2a:6a:4a:df:28:82:9f:
         3f:2d:57:6d:7e:78:66:36:d7:1f:dd:36:b3:b1:c3:f4:3b:f6:
         bc:fa:a9:5c:61:6a:36:0a:ed:d2:71:65:7c:56:fd:2e:7f:c8:
         5f:a0:81:d4:3e:39:02:6d:0d:13:4d:fe:ad:e5:cc:98:43:65:
         10:c8:61:7f:3b:c6:26:52:3d:8c:5a:47:bc:6c:17:92:18:3d:
         30:85:84:75:71:63:36:98:d6:69:23:ea:47:74:20:a4:78:bd:
         eb:85:40:65:8f:a5:91:06:a7:4c:40:4b:ff:20:33:99:70:12:
         f1:5a:22:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:11:15 2025 by rpki-client