Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/5fefe850-00d7-3861-8700-f8eb3f16a12b.roa
File:                     5fefe850-00d7-3861-8700-f8eb3f16a12b.roa (raw, json)
Hash identifier:          /lj3OFiGEP5dQcS+hQb+0MqLmGlLqWmkX0KqlotYsaU=
Subject key identifier:   1B:51:52:81:D5:74:8F:E4:6F:7B:70:D0:3E:B7:7F:22:6E:33:C4:B4
Certificate issuer:       /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial:       010D0C9F4328584B99D783800554FB8C35EC5B00
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/5fefe850-00d7-3861-8700-f8eb3f16a12b.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     16584
IP address blocks:        2602:fe54::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:83:80:05:54:fb:8c:35:ec:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=7fe1c0bc-f222-4d45-b80f-91a0fa57764c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:56:3e:6f:b6:75:c2:d0:0f:65:b3:75:fb:c0:
                    40:5f:24:a7:08:db:bc:35:83:25:0a:0a:a7:cd:13:
                    2d:10:8a:8e:90:da:62:36:12:62:f1:da:7e:85:64:
                    b8:ea:c1:cf:d3:4f:f8:f1:ec:43:55:59:9a:17:68:
                    ef:1a:48:81:27:db:84:bf:de:79:b8:4b:eb:2d:05:
                    25:0f:73:65:b7:e5:65:83:cf:20:5d:c9:81:f2:56:
                    cf:44:19:a7:d3:45:c0:39:a4:16:ba:19:ea:1a:34:
                    4e:61:ce:01:97:e8:fb:48:9f:06:74:31:34:ba:7c:
                    6c:80:e0:b5:dd:13:9f:c4:c6:5c:17:17:0e:03:20:
                    a6:b1:e8:7a:39:ca:f2:eb:07:e3:2e:74:ac:0f:b8:
                    4d:a6:ea:a9:5d:96:13:72:f5:bc:a7:ad:97:a4:54:
                    7d:1f:40:29:50:31:bf:e8:10:d6:b3:75:94:fc:a5:
                    2c:5a:00:5f:4e:c8:ca:d2:5e:db:09:51:5d:20:6f:
                    e2:ca:25:87:24:ae:6f:5e:da:fd:21:37:89:7d:f4:
                    7e:12:39:cc:19:27:85:2b:ff:c5:7e:de:e1:77:b5:
                    31:25:b5:d7:d8:ac:e7:ba:6b:e9:6c:99:7a:03:a9:
                    65:02:b2:a6:62:01:e1:89:71:eb:29:72:c6:b4:87:
                    5d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:51:52:81:D5:74:8F:E4:6F:7B:70:D0:3E:B7:7F:22:6E:33:C4:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/5fefe850-00d7-3861-8700-f8eb3f16a12b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl

            X509v3 Authority Key Identifier:
                keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe54::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:be:7b:8d:b9:8c:5c:53:c3:8a:86:10:a9:79:0f:67:b2:74:
         03:79:a3:24:fa:f6:e9:10:94:44:28:35:61:12:2a:b5:b1:a4:
         c3:b1:1e:fe:25:46:39:a4:19:02:ca:0d:88:1a:64:ec:fb:c1:
         1b:57:82:4f:ad:94:f9:98:db:78:cc:86:3d:b3:3d:83:4f:a9:
         c2:9a:00:5c:35:fc:c2:a3:a7:77:6e:9d:32:e9:63:b5:c4:df:
         ab:8a:6a:c7:9c:b1:c2:fb:14:a7:4d:89:cd:04:d1:36:2c:b8:
         32:11:e0:21:80:b0:c2:0d:c2:e0:53:4c:1f:37:ba:a2:15:59:
         a6:f1:0a:ae:a5:e9:84:4c:52:e7:af:95:9c:a5:81:9b:1e:72:
         d5:17:1a:ea:8a:0e:d3:bd:bd:24:58:fb:ec:03:dd:e5:6c:73:
         8e:32:c4:e0:a4:5e:b9:5b:62:94:b6:95:1e:92:b1:6f:b2:64:
         ff:13:15:d5:c5:d3:71:03:13:ff:a5:d8:0c:db:20:ae:7e:6e:
         08:aa:14:0e:aa:22:fc:90:fa:36:20:47:20:e9:55:df:d5:63:
         6d:a9:9e:ff:b7:d9:7e:ff:6e:2f:f6:64:08:dd:84:97:01:d3:
         a5:76:1d:40:85:16:ee:b5:fc:30:03:6c:74:e4:00:93:ff:39:
         ec:dd:86:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:41:55 2025 by rpki-client