Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/ec88d902-d3a1-3ed7-9130-68217185c2d8.roa
File:                     ec88d902-d3a1-3ed7-9130-68217185c2d8.roa (raw, json)
Hash identifier:          IOoJOTBO26oBPFyX/Z2ZY//27CqacvMLf8bk78R1ZVg=
Subject key identifier:   11:B5:A0:7A:E3:BA:3E:74:8A:D7:B4:AA:A9:00:13:38:9E:59:94:2D
Certificate issuer:       /CN=138368b0-1eac-4feb-81cd-f0e4e71fcdc0
Certificate serial:       010D0C9F4328584BBB7588E9F6415061832A53C0
Authority key identifier: 65:AE:F3:DF:8E:27:31:37:B7:57:A2:0D:54:BD:52:BA:EE:72:80:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/ec88d902-d3a1-3ed7-9130-68217185c2d8.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        2602:f6dc:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:88:e9:f6:41:50:61:83:2a:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=138368b0-1eac-4feb-81cd-f0e4e71fcdc0
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=795ded5f-64fc-4b28-821b-40d55e1416e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ba:1c:f2:2f:7a:95:fe:e7:10:43:91:81:fb:
                    25:aa:72:27:19:d1:21:17:7c:66:ea:30:5b:6e:4a:
                    46:ea:4e:9a:a6:d2:ee:ee:2f:15:b7:33:9e:1a:8f:
                    5d:a2:d0:b0:a5:b6:4f:32:eb:60:57:99:55:62:8c:
                    a2:89:25:7c:18:85:d7:ae:a0:3d:db:c9:26:44:1c:
                    62:93:18:f3:63:53:b9:7e:bc:e6:3d:f7:1c:b3:0b:
                    9c:10:7e:eb:0c:aa:99:c7:1d:45:ff:ce:d0:2a:37:
                    b8:e4:b7:3e:02:7d:b8:8d:c0:1d:1c:60:58:2f:7c:
                    0f:f4:0f:5e:47:ad:df:5a:d4:39:cb:c8:a1:cf:d5:
                    58:2f:ce:74:38:12:c4:85:3c:7c:9a:2b:22:3e:72:
                    d3:b3:ad:28:87:d9:30:8b:1e:6b:6c:07:96:b0:98:
                    61:e8:d1:ce:48:79:87:2b:fe:8a:91:52:db:8f:b5:
                    ee:60:71:b0:04:4b:78:d7:ef:38:11:51:0a:a8:5f:
                    7b:1b:10:8b:f2:5c:c6:e6:2a:95:4a:a0:43:05:54:
                    06:ac:ca:77:d4:d4:8e:ed:23:c0:9a:87:bb:ca:14:
                    2b:71:23:01:30:d9:2b:2a:01:64:46:a2:2a:dc:b7:
                    8b:18:3a:02:fd:35:91:42:a0:b0:16:28:39:b1:08:
                    75:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B5:A0:7A:E3:BA:3E:74:8A:D7:B4:AA:A9:00:13:38:9E:59:94:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/ec88d902-d3a1-3ed7-9130-68217185c2d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.crl

            X509v3 Authority Key Identifier:
                keyid:65:AE:F3:DF:8E:27:31:37:B7:57:A2:0D:54:BD:52:BA:EE:72:80:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6dc:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:2d:c5:d7:25:0f:6e:1c:7f:50:43:91:ca:10:98:18:73:ba:
         de:55:79:67:47:9c:48:35:16:5a:11:a6:11:4a:a9:fa:1a:6a:
         ce:c8:90:46:c9:20:b8:92:4a:72:2f:e6:83:e0:3e:44:23:1e:
         13:a1:bb:fb:95:2b:6f:2a:33:1e:b5:ed:c0:1c:49:5e:cd:91:
         4d:91:91:5f:53:4a:c9:07:32:d8:b1:ec:20:24:09:50:49:33:
         c8:55:df:78:0b:1b:f7:d6:a5:ec:2c:db:1a:0a:4b:0a:ee:f8:
         3d:48:18:65:55:d2:f7:5d:0c:63:2f:76:31:bd:22:1e:62:2b:
         7c:e7:f2:c2:b0:46:d7:ba:68:00:89:eb:b0:43:5f:e8:45:47:
         bd:97:af:de:25:9e:47:08:a1:f8:dc:2d:97:e1:9d:ce:fc:21:
         c4:98:f9:4a:d7:09:fe:b5:ee:a4:3c:fe:9e:db:e4:bd:0c:91:
         de:7f:0c:a6:50:d4:61:28:7b:fb:b8:5b:f6:b8:a3:07:77:40:
         cf:57:31:f6:4b:8a:52:2e:30:69:72:39:a8:be:e5:dd:1c:68:
         1c:00:88:4c:2c:63:d2:1e:8f:c5:8c:f9:ed:28:b3:a6:2b:6f:
         e2:27:b7:7e:fc:1a:78:13:0c:82:32:77:bb:ff:32:e1:5f:7a:
         79:d8:09:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:09 2025 by rpki-client