Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3742509e-2411-38d0-abe6-6cdf13605db9.roa
File:                     3742509e-2411-38d0-abe6-6cdf13605db9.roa (raw, json)
Hash identifier:          Au8ruKhVSo5dOGYyVzsRVSgv1PzqT3pdYNfK4dkA9kM=
Subject key identifier:   01:3C:5A:4A:25:11:4F:C9:49:BE:6F:A0:BA:2D:4E:6E:0D:2A:93:C6
Certificate issuer:       /CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0
Certificate serial:       010D0C9F4328584BB88D191CA72B3CCE63C66680
Authority key identifier: 1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3742509e-2411-38d0-abe6-6cdf13605db9.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     401502
IP address blocks:        2602:f783::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:19:1c:a7:2b:3c:ce:63:c6:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=6a306641-52f1-4fcb-8ca9-000aface71f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:71:2b:ea:a8:45:b0:5a:90:0e:42:4b:d1:2f:
                    a5:b8:40:26:6f:0f:6a:cf:9a:27:77:6b:07:5e:75:
                    21:53:f8:c6:54:2d:f8:57:5e:fe:c1:6e:b4:d2:6f:
                    7d:da:fd:2c:d8:3f:5a:62:11:a2:c3:07:35:b5:8c:
                    ec:8b:87:7b:a5:6c:55:f9:3f:0a:87:a7:b9:84:b3:
                    de:61:b7:eb:1e:99:12:02:99:ce:c0:dc:b1:2f:eb:
                    6e:3e:a3:d5:63:65:99:07:d5:21:90:dd:d8:d3:bc:
                    13:8f:49:e8:2b:3d:d4:a6:cd:33:ab:71:4f:80:82:
                    29:0c:4f:f2:ee:f9:ee:7d:67:d5:b5:2f:db:98:7d:
                    51:bd:f7:9e:8f:e7:88:35:0a:bd:2c:5c:df:fd:8b:
                    c0:c9:e9:7e:54:c6:80:a8:30:79:51:44:ad:5c:9f:
                    d3:86:4a:77:f4:80:b9:4c:62:41:81:23:1c:d3:e9:
                    e4:98:fa:0f:85:40:89:85:b0:6a:26:88:16:da:07:
                    66:ba:ec:c7:a6:f2:04:dc:83:89:9f:8b:2c:34:01:
                    c0:61:db:0e:54:ee:8b:7c:9e:ce:46:c3:e7:a3:d2:
                    65:f3:98:d1:17:dc:47:ee:c8:43:11:96:67:00:1b:
                    d5:7b:fd:bb:0b:bb:f4:45:13:72:af:c4:d5:94:89:
                    ef:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3C:5A:4A:25:11:4F:C9:49:BE:6F:A0:BA:2D:4E:6E:0D:2A:93:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3742509e-2411-38d0-abe6-6cdf13605db9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl

            X509v3 Authority Key Identifier:
                keyid:1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f783::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:93:ae:dc:3e:9f:1a:b3:86:ba:84:8e:96:20:15:df:55:67:
         37:4c:64:11:8d:91:71:0d:c2:6f:5a:87:06:62:76:b2:82:0d:
         2e:a5:14:45:d7:23:0e:fc:3c:fa:8c:a6:54:4a:8d:55:25:99:
         72:29:51:9e:73:77:04:8b:56:99:63:14:f5:55:24:ae:8c:22:
         59:8a:e3:af:de:a6:37:7d:e9:34:08:5d:b7:98:de:1b:92:09:
         19:9c:79:c7:c8:20:5f:10:40:45:9e:c0:03:bd:c8:7b:04:fc:
         54:ab:2c:8d:87:f7:d2:bb:5e:c5:ee:b5:97:d8:d3:df:9f:d1:
         8a:ff:24:fc:7a:5f:e2:7f:03:55:88:ea:4d:1e:d4:ad:fd:3f:
         3f:c5:78:2d:94:ea:7a:ff:6b:b4:35:42:83:9b:5e:25:2f:08:
         b3:6c:26:91:60:1e:44:16:92:7c:ac:87:ca:67:2c:a2:57:d6:
         66:de:0f:6a:bb:44:e1:7f:91:2e:fc:99:26:b3:c4:3a:78:6d:
         28:49:fd:5b:36:c2:7e:46:18:65:fc:19:a0:09:40:8a:a6:a3:
         af:1a:fe:66:d2:8c:46:56:eb:c2:ca:eb:42:99:00:33:9c:82:
         2d:a6:cd:17:78:84:02:50:aa:ea:16:cf:1d:2c:1a:2b:1f:1b:
         ca:96:1b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:46:14 2025 by rpki-client