Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/83539657-34fe-3040-831c-e175c292b43f.roa
File:                     83539657-34fe-3040-831c-e175c292b43f.roa (raw, json)
Hash identifier:          6dycLCD5DQ4cKLEzQh4EDBDbmlb+CBU9k+XnoHgemGY=
Subject key identifier:   A4:4E:E5:91:F7:12:B2:BC:5E:D5:B9:F0:75:73:88:2F:BE:A7:A5:AC
Certificate issuer:       /CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
Certificate serial:       010D0C9F4328584BB19264881E0AD3EEF7133F00
Authority key identifier: 1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/83539657-34fe-3040-831c-e175c292b43f.roa
Signing time:             Thu 30 Oct 2025 13:00:38 +0000
ROA not before:           Thu 30 Oct 2025 13:00:38 +0000
ROA not after:            Wed 28 Jan 2026 14:00:38 +0000
asID:                     18956
IP address blocks:        2602:f775::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:92:64:88:1e:0a:d3:ee:f7:13:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
        Validity
            Not Before: Oct 30 13:00:38 2025 GMT
            Not After : Jan 28 14:00:38 2026 GMT
        Subject: CN=2334b8f0-1031-46d6-b0e3-daa7abe23efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:25:2d:e6:de:66:08:43:42:aa:aa:78:73:c0:
                    f3:1c:26:2f:5d:f1:53:b5:1d:ee:d9:5c:69:a7:6e:
                    1e:99:87:26:c9:47:cb:c3:2d:0e:5a:11:07:54:96:
                    10:e9:ba:99:ad:bd:9c:68:41:d1:55:11:c7:e9:67:
                    fd:87:18:fc:53:7a:5a:c0:ba:99:1a:8a:bf:17:48:
                    d9:02:7e:a6:ca:7d:88:a1:82:3d:22:09:c1:64:94:
                    2b:35:86:24:ce:e6:a9:ab:a1:db:6a:49:9d:41:17:
                    f1:d1:9d:82:47:88:b6:ca:3b:13:44:d3:4d:c3:e6:
                    49:20:87:2b:d8:8f:9b:d3:99:dc:6f:da:32:57:76:
                    8f:8d:ce:1d:6c:28:7b:96:14:b1:fc:76:76:22:e2:
                    1e:18:83:88:3c:7b:44:69:63:bc:3e:cd:74:0e:54:
                    ea:5f:37:c9:c8:93:8b:38:c5:98:ee:53:9a:a8:fc:
                    fc:b2:10:db:22:f8:73:19:11:c1:b3:5d:ec:54:a8:
                    a8:7a:6e:4a:b4:97:d9:11:8d:43:9f:04:2f:fc:5a:
                    50:c4:ef:59:54:ff:24:67:0c:0e:97:4b:1c:86:db:
                    30:61:2a:9a:2f:89:6f:08:65:98:d2:da:f3:cc:1f:
                    18:6e:56:d8:f6:a4:45:81:1e:67:25:1f:5b:7a:0e:
                    b0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4E:E5:91:F7:12:B2:BC:5E:D5:B9:F0:75:73:88:2F:BE:A7:A5:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/83539657-34fe-3040-831c-e175c292b43f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl

            X509v3 Authority Key Identifier:
                keyid:1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f775::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:48:a4:8b:b2:ed:2a:c3:cb:ba:31:7d:08:75:ab:77:b7:a2:
         b9:c2:56:05:69:84:ba:b8:63:30:27:b3:1c:fa:d3:b7:a9:31:
         29:4b:b9:82:16:11:98:4f:b8:80:01:26:95:86:8c:7f:2a:7e:
         4b:c4:05:c3:df:7d:1c:91:6e:7e:f0:6d:7a:50:f4:c7:78:a1:
         d5:52:4e:e5:a6:64:d4:43:8d:bd:6c:b1:98:b9:a8:9e:7b:ec:
         bc:69:d8:46:f9:4d:30:69:f7:f5:89:e3:0d:6b:00:da:a8:e6:
         15:72:0d:5e:64:0e:33:ab:77:9c:16:0f:b7:e0:35:1c:71:9e:
         89:b6:d1:7a:16:41:65:e4:c0:b4:80:79:2b:eb:48:92:f7:96:
         e0:d9:83:49:e9:a3:c6:31:4e:37:09:a3:84:5a:e9:e0:cd:c6:
         52:03:3a:83:4c:3d:44:bd:b8:24:74:8b:f3:39:65:04:11:d2:
         82:bb:51:3d:aa:76:89:03:77:27:a4:11:1c:5c:8b:3b:0a:76:
         f6:4d:3d:85:ec:d2:cf:da:83:d6:0e:b0:c4:aa:07:6e:fb:6c:
         0c:c2:4d:4c:8e:8e:85:ee:e6:ac:9a:d1:8f:27:5c:ce:95:16:
         2b:a2:25:67:8e:7e:2e:d3:84:e2:2d:5e:64:97:43:45:6f:f6:
         10:dd:29:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:00:01 2025 by rpki-client