Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/bee43ea8-ebec-3914-bccf-4894cebb628f.roa
File:                     bee43ea8-ebec-3914-bccf-4894cebb628f.roa (raw, json)
Hash identifier:          K1ygd4Jq/kXCdxrk+250Qh8MsnHnQcuGaVtOGA/+dWk=
Subject key identifier:   A1:C5:14:45:2E:6B:9A:89:37:86:49:B2:2C:93:1C:61:00:3E:F3:65
Certificate issuer:       /CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
Certificate serial:       010D0C9F4328584B9E07BC4E76AC8CB36C4F5ACC
Authority key identifier: 7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/bee43ea8-ebec-3914-bccf-4894cebb628f.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     46427
IP address blocks:        2602:2c1:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:bc:4e:76:ac:8c:b3:6c:4f:5a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b82e5c10-aee7-4c19-a828-84974fcb8ac2
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=0cd478f9-bc97-4018-8f2a-91a9fbd1bfdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:c1:91:18:dd:0d:30:f5:61:d9:6a:c6:d8:
                    1f:8d:c6:b4:9b:f4:5d:79:fd:e9:f0:22:cf:9b:18:
                    e3:b6:4c:f7:b6:83:10:7d:45:82:b2:0a:4d:40:00:
                    6d:3b:9d:d3:f4:73:89:48:d3:69:7f:09:6f:ff:5d:
                    14:b9:b4:e6:ab:a7:8d:3c:49:e8:6d:cc:59:79:3d:
                    00:7c:c2:e8:91:76:a9:dd:3c:a1:2d:fa:ae:7d:af:
                    32:51:ad:9b:93:51:e9:e2:00:72:17:b6:11:28:7a:
                    ff:f4:3b:b6:55:7b:57:d2:13:30:c6:45:c4:52:51:
                    e4:bd:35:13:50:77:e8:1b:09:0f:e5:88:75:3f:cc:
                    25:e3:81:1a:f0:b0:52:72:55:44:63:96:74:9a:3f:
                    cb:22:e7:fb:69:2a:ef:cf:5f:cb:bc:74:07:1d:1c:
                    0c:eb:76:3f:cc:88:e5:55:c1:4c:bb:b0:6c:a3:88:
                    8a:34:0c:87:ac:99:a1:b0:00:9e:4e:e6:e5:c4:89:
                    fe:3a:8c:11:82:19:27:a2:55:6a:ea:cf:69:ef:17:
                    ac:51:e5:8a:1a:9f:ab:54:6d:0f:83:12:d0:fa:23:
                    92:7b:dd:d2:d0:1a:4b:d8:84:d4:e5:ce:e1:07:5b:
                    c7:5c:a0:5a:a3:44:87:ad:33:2f:14:43:0e:4b:79:
                    7d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C5:14:45:2E:6B:9A:89:37:86:49:B2:2C:93:1C:61:00:3E:F3:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/bee43ea8-ebec-3914-bccf-4894cebb628f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2/b82e5c10-aee7-4c19-a828-84974fcb8ac2.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7B:72:D5:62:73:5A:F1:21:F7:6B:56:C0:00:96:50:0D:33:CC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b82e5c10-aee7-4c19-a828-84974fcb8ac2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c1:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ad:c5:f6:c6:19:e1:bc:3d:97:b0:40:2d:8b:e5:c3:52:cf:
         1e:8c:d5:81:62:bf:26:24:20:11:58:86:4e:fb:e6:e2:37:50:
         eb:8d:7f:ea:15:da:6d:24:99:2e:b2:df:00:5f:6c:c9:80:b0:
         23:a8:7e:13:b0:ea:b2:33:14:66:b9:72:22:ec:29:ce:ba:64:
         4e:08:65:8b:cd:3e:d1:87:70:55:21:93:59:5c:62:eb:8c:b0:
         f9:55:51:c2:e1:bd:4a:b5:7f:21:62:95:b4:86:0c:9a:2e:57:
         2a:b1:7b:75:61:49:43:00:00:1e:a2:fb:de:c6:89:d7:b4:34:
         e6:85:09:f9:28:86:a2:43:fd:20:ac:aa:63:c0:e9:69:48:b0:
         99:10:03:39:b7:7c:70:c0:38:eb:18:46:cb:0f:10:98:df:b7:
         df:1c:4e:6a:e3:8a:1a:af:bd:91:4c:a4:9a:25:f2:cb:90:1e:
         17:ee:81:11:e1:52:6f:1a:66:d5:da:0a:47:1e:ef:5c:04:87:
         92:28:d2:db:58:aa:cf:38:ad:26:ba:4c:12:4a:27:47:5a:93:
         3e:15:eb:cd:c2:29:a0:8e:63:57:83:c8:7c:5e:0f:07:48:46:
         88:95:f5:c3:02:3e:f6:ba:9d:40:87:f4:4c:65:a2:b5:b8:9b:
         dc:94:5e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:36:04 2025 by rpki-client