Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/1c665ba1-5ff6-38d7-b9bd-ecf95ff8c6ad.roa
File:                     1c665ba1-5ff6-38d7-b9bd-ecf95ff8c6ad.roa (raw, json)
Hash identifier:          Eydv4N4oeippLMcL3Xui18KKo9QvX+UApCHuiDVnDzA=
Subject key identifier:   74:4A:69:15:41:F7:C9:0D:7E:3C:67:C2:A5:36:C8:59:0D:42:AA:F6
Certificate issuer:       /CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
Certificate serial:       010D0C9F4328584BAD6241C4DE31A3A19A8BB578
Authority key identifier: C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/1c665ba1-5ff6-38d7-b9bd-ecf95ff8c6ad.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     399765
IP address blocks:        2602:f75c:fc0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:41:c4:de:31:a3:a1:9a:8b:b5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=284a1baf-96b0-4000-9807-f61c8a0f41d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:18:c7:ac:06:a7:33:4e:bc:11:e3:50:2e:33:
                    b0:46:cf:41:75:96:b7:cb:c1:db:76:9e:1e:de:42:
                    71:b7:af:29:32:ed:5a:76:9f:57:bc:ff:38:5b:c5:
                    1c:f2:fe:cc:0d:43:c6:07:a4:ab:3a:27:15:2c:c9:
                    08:17:f5:cd:22:3b:c7:ed:63:ff:7c:8a:56:b7:82:
                    58:a1:21:1f:9c:52:5d:31:07:d2:f9:b1:bb:57:2d:
                    aa:c7:ae:3e:0c:37:b8:0f:c8:fe:df:61:22:d8:37:
                    3b:ec:fd:de:79:9e:70:02:15:0a:2e:d5:4a:cf:19:
                    20:23:b5:47:fc:a1:f8:d1:d9:3e:69:d0:89:84:75:
                    ea:e4:a2:ec:b5:95:75:9a:df:13:f5:62:29:5d:a0:
                    78:15:68:0e:b5:e1:ef:a5:0c:87:24:dd:1e:99:d4:
                    83:05:06:45:8d:75:7e:19:55:6f:10:b6:6d:22:6f:
                    c1:8b:cf:99:ac:cd:d1:ac:6e:f3:8a:78:a4:29:57:
                    a8:4f:fb:20:08:57:e2:4e:a3:ad:81:3b:ab:58:e6:
                    6e:ce:14:d8:c5:be:e5:e4:b4:ab:a1:c7:d4:69:89:
                    5e:ac:a0:91:98:07:12:04:24:51:b2:4c:cd:8d:29:
                    ce:ae:73:fa:79:bf:d9:46:f1:db:75:f2:62:e8:ce:
                    72:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4A:69:15:41:F7:C9:0D:7E:3C:67:C2:A5:36:C8:59:0D:42:AA:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/1c665ba1-5ff6-38d7-b9bd-ecf95ff8c6ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl

            X509v3 Authority Key Identifier:
                keyid:C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f75c:fc0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:88:dd:f4:32:73:cb:19:ae:ee:96:ec:9d:e2:e5:09:3c:f0:
         6c:d7:fe:53:36:c6:a3:82:89:54:3f:f9:97:c1:c1:43:18:83:
         4e:6e:c2:98:25:ef:c8:9e:fd:3e:b9:ec:60:34:51:1b:91:f8:
         6b:ed:02:ab:da:ce:72:2f:4a:90:59:c1:10:5c:6b:a7:8a:34:
         40:e4:79:43:f9:7b:eb:27:33:4f:34:bd:f6:d1:79:ed:2a:f0:
         69:d0:75:6d:b0:75:0a:90:22:11:c4:ed:bf:3b:29:df:f9:68:
         86:5b:fe:cf:3f:98:fa:e3:01:e1:b7:5a:72:3f:73:0d:b5:b8:
         b9:ba:01:dc:5e:5f:77:be:e7:ea:33:98:d8:ba:07:27:82:99:
         fc:47:b7:00:ff:41:58:fd:c8:24:0a:8b:09:81:71:65:e9:29:
         a9:ad:03:9f:00:22:91:6c:e5:78:97:e0:6c:6a:e9:ad:a4:84:
         90:b7:a2:35:53:1b:26:4c:62:11:73:a7:f2:be:43:35:29:94:
         ff:ec:f1:9d:af:f2:f4:2d:1b:60:24:6a:64:de:7a:69:74:86:
         e9:54:cb:44:2e:50:12:6b:e8:d3:3a:4b:fd:e1:ca:0c:94:2b:
         9a:3e:3d:90:af:6a:e5:24:39:c7:4e:8c:9f:25:14:04:00:d2:
         86:02:8f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:08:02 2025 by rpki-client