Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/33bdc14d-7c05-3e72-8bb3-9b168fb762ee.roa
File:                     33bdc14d-7c05-3e72-8bb3-9b168fb762ee.roa (raw, json)
Hash identifier:          wRP1U2tXX5dNn6Ys6kS0tFq+gXKAwuKfugY5JKxPEXw=
Subject key identifier:   83:59:92:D7:BB:04:35:8B:18:EB:81:A9:E2:C6:C7:1F:CF:99:72:7A
Certificate issuer:       /CN=da5c184e-0f46-42cb-a77d-3f3d837657a5
Certificate serial:       010D0C9F4328584BA93291FCAFC5D16EB78D3F80
Authority key identifier: D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/33bdc14d-7c05-3e72-8bb3-9b168fb762ee.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     14618
IP address blocks:        2604:f340:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:91:fc:af:c5:d1:6e:b7:8d:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da5c184e-0f46-42cb-a77d-3f3d837657a5
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=5b221828-1df1-4341-a8a6-55759ed15888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2c:01:63:5d:2c:91:58:5d:13:65:71:5a:d3:
                    05:77:6c:8c:6c:54:70:68:a3:6f:99:b0:4b:1b:39:
                    30:ac:a1:d5:96:0d:e8:12:1e:c5:39:b8:17:b6:1c:
                    88:64:df:f8:51:f9:57:8a:e3:0f:21:85:3e:d8:20:
                    92:c1:dd:de:98:12:8b:4f:ec:0d:db:3c:e5:ac:e2:
                    61:c2:a8:80:4a:f8:58:bc:04:eb:e6:76:b1:6c:6e:
                    d1:c9:ef:55:c1:f7:d6:7b:b0:12:c9:58:ac:66:1d:
                    de:ab:97:3f:48:5c:c5:a9:9e:8b:5a:a6:90:31:97:
                    0b:8b:db:85:24:d7:f2:e5:a6:79:83:40:35:3e:02:
                    77:ed:44:73:e0:c2:48:91:1f:18:6b:c1:9e:4f:37:
                    bd:c3:42:b0:6e:50:1c:b5:11:08:47:17:7a:3f:e5:
                    f0:06:08:e3:55:dd:7d:fe:66:60:13:f3:bf:a4:25:
                    a4:45:a2:02:b2:1b:96:af:47:f9:b7:77:c5:60:8f:
                    45:65:a5:01:7f:99:ce:e5:73:81:a5:44:f9:f1:74:
                    a8:91:4f:91:80:b0:83:88:d3:04:d7:5a:dc:fd:e9:
                    30:0b:a6:39:f0:de:ab:f9:4e:11:00:ba:13:8d:07:
                    27:41:7e:a7:8c:8e:cf:5e:24:99:ff:b4:3b:de:6f:
                    61:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:59:92:D7:BB:04:35:8B:18:EB:81:A9:E2:C6:C7:1F:CF:99:72:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/33bdc14d-7c05-3e72-8bb3-9b168fb762ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5/da5c184e-0f46-42cb-a77d-3f3d837657a5.crl

            X509v3 Authority Key Identifier:
                keyid:D2:81:12:89:FB:FA:14:2F:97:56:72:9D:7F:1F:02:AE:0F:29:29:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da5c184e-0f46-42cb-a77d-3f3d837657a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f340:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c3:80:a3:c7:ad:8e:b6:58:fe:58:ed:3b:af:4c:50:99:3b:
         15:f8:e2:45:46:63:cc:32:3a:69:27:7a:4b:bf:25:56:d3:32:
         46:52:e5:f8:df:fb:67:63:f2:1d:c7:31:67:b4:42:70:1d:a4:
         fa:61:e8:46:5b:f6:1d:d6:1f:45:5c:bd:41:84:f1:6f:63:ca:
         59:6c:49:36:a2:14:0b:fb:66:01:49:39:73:fd:40:29:85:ce:
         b5:b5:09:15:0c:c7:4b:b6:b7:c4:36:3e:c9:b9:78:ea:c2:06:
         2b:a9:d2:9a:05:d0:ac:e4:79:34:66:64:35:c7:ba:27:ad:6d:
         5e:0b:6a:fa:50:47:c0:1e:69:c9:1f:2b:a8:43:db:ca:2f:bd:
         0b:e7:14:e9:bd:21:ce:0b:45:b5:8e:16:5b:fa:c8:06:40:a4:
         52:d1:cf:a5:47:bc:9b:75:3b:7d:46:f3:a6:75:99:8f:06:e2:
         65:f4:84:06:82:a6:55:de:c9:60:71:af:bf:09:49:7d:66:a6:
         70:28:fb:a5:37:81:fa:d7:46:2c:f5:1a:30:e1:c9:8b:aa:ef:
         3c:33:6e:be:cf:cb:cb:db:76:dd:6e:52:9d:96:fb:c8:b1:67:
         e4:69:b7:27:f2:ef:b5:92:78:11:8f:0c:fa:eb:45:d3:26:c1:
         ba:3c:38:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:43 2025 by rpki-client