Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/bdd25144-8f18-361a-81ee-33720e2febd6.roa
File:                     bdd25144-8f18-361a-81ee-33720e2febd6.roa (raw, json)
Hash identifier:          HRVUZcpjksrP5YOs1foksAolfLO6iysx9UZYTUIwQfU=
Subject key identifier:   A4:15:8B:BB:B1:41:97:14:BA:29:62:35:3E:7C:D7:CD:EA:D9:B9:05
Certificate issuer:       /CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
Certificate serial:       010D0C9F4328584BB2F7D77DD0AA5F2CE48099C0
Authority key identifier: 1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/bdd25144-8f18-361a-81ee-33720e2febd6.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        2602:f775:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:d7:7d:d0:aa:5f:2c:e4:80:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=27b013fb-56d4-4242-bfaf-18d43e5349d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:33:17:ae:92:13:c3:df:4f:80:fa:db:c1:39:
                    a3:2b:27:2c:fd:e1:09:e3:e4:09:60:96:46:3f:d0:
                    fd:3b:6d:25:b5:f4:d1:05:94:a2:53:30:6a:21:e1:
                    fb:e8:03:a5:68:d7:93:a8:5d:24:f8:22:0a:6f:e2:
                    8a:7b:33:46:fd:d7:cb:0e:04:80:d9:71:12:9b:23:
                    64:4b:17:e3:63:14:2c:b0:0c:de:a4:37:6e:b0:ca:
                    0b:62:d4:21:1a:a7:c9:06:0d:d5:35:df:5c:e5:94:
                    be:6d:2e:b9:c7:31:2f:6e:09:33:ea:1d:1d:1d:6a:
                    6d:db:d4:39:ae:cf:65:93:be:c7:da:99:14:37:9e:
                    4a:80:cd:e7:ce:a3:5a:05:06:d4:54:20:21:40:81:
                    82:d3:00:c1:25:58:c4:f1:b3:fe:ae:6d:37:68:b9:
                    fb:ea:34:a2:10:6e:29:9f:68:69:7f:d6:87:51:7b:
                    f2:44:14:d9:5d:3f:11:4b:20:23:29:1c:10:48:ac:
                    ac:d2:42:33:a1:44:1f:2e:d0:2c:0f:99:ab:a6:af:
                    32:bd:8a:07:2a:7d:50:ce:83:e1:d3:c7:0b:22:b3:
                    0e:05:b6:aa:76:1f:3c:44:9f:12:67:7d:f9:4f:29:
                    dd:61:11:f9:99:ea:1c:64:71:f9:c5:80:9f:46:d5:
                    3e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:15:8B:BB:B1:41:97:14:BA:29:62:35:3E:7C:D7:CD:EA:D9:B9:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/bdd25144-8f18-361a-81ee-33720e2febd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl

            X509v3 Authority Key Identifier:
                keyid:1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f775:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:11:03:ce:c2:6b:53:21:b8:9b:78:93:b2:22:b8:45:37:1f:
         c5:ac:54:40:ea:d3:d5:af:13:26:93:c8:11:89:d5:67:0f:65:
         40:ab:a2:0a:47:72:43:3a:a5:dc:53:9f:b3:bc:26:9a:6c:c9:
         1a:95:50:81:33:e7:71:4b:82:7a:f7:24:2c:92:d6:a6:ce:ae:
         a8:be:f3:3f:a6:aa:f5:2b:35:37:cc:4c:57:9f:ef:2c:6c:10:
         24:fd:f7:22:34:44:c8:3e:b7:61:da:71:98:24:12:14:da:e7:
         d0:2f:93:c7:cb:1a:7a:94:30:68:74:f8:8d:42:d9:b9:28:cc:
         a2:d7:9b:f3:d4:dd:e4:4b:29:fc:ea:8d:ba:9d:7c:60:7d:53:
         f4:80:ee:eb:da:31:cd:1d:14:fd:fb:a4:88:61:b9:64:ae:72:
         8e:81:41:e8:45:15:01:45:83:cb:40:01:14:a7:dd:90:df:49:
         20:87:bc:58:11:ba:1b:66:62:ba:0a:15:1d:d3:09:5b:76:8a:
         91:c4:da:3e:52:47:fa:21:34:42:e7:a4:dc:4d:13:19:b2:26:
         42:f9:d7:9c:27:59:8b:f6:00:1e:4a:e1:7e:a2:c6:28:73:43:
         24:fe:84:6a:49:e3:ae:bb:9c:98:ff:88:53:2b:5a:39:6a:1c:
         c5:a9:78:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:00:42 2025 by rpki-client