Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/ccb58894-bfb2-3e10-9b03-f8056d836ddd.roa
File:                     ccb58894-bfb2-3e10-9b03-f8056d836ddd.roa (raw, json)
Hash identifier:          sYZbDmQFY5UF02Vwf2o2ZkfFn9OReARf9x6Nf7xo2cI=
Subject key identifier:   FA:C9:96:5C:C7:10:9E:27:43:0F:FA:95:D6:FF:C3:8F:04:99:39:6B
Certificate issuer:       /CN=679b1148-0358-4232-b827-4a6006838da6
Certificate serial:       010D0C9F4328584BBE4034661D1C5A9BD3435AC0
Authority key identifier: 85:88:97:A4:88:EB:ED:BE:CF:9F:1A:CD:C7:0D:21:B8:50:37:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/ccb58894-bfb2-3e10-9b03-f8056d836ddd.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     8075
IP address blocks:        2602:801:600a::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:34:66:1d:1c:5a:9b:d3:43:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679b1148-0358-4232-b827-4a6006838da6
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=3ea9a9ae-e19f-4ae8-949e-666c0d8aec77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:eb:de:16:18:cd:c2:02:5b:06:52:f4:26:97:
                    dd:53:b3:b0:e6:fb:1e:c2:8d:7c:34:72:72:24:1d:
                    19:17:8a:b8:81:18:a4:9e:89:c8:b4:2b:5f:6d:c6:
                    2e:25:58:4f:79:f2:26:1d:66:ce:06:a3:4d:d7:51:
                    fc:da:31:e8:89:0b:f8:a0:bf:b7:fe:07:c5:6b:8c:
                    76:b1:ba:bf:0b:51:e1:bd:de:8e:75:36:b8:c1:a2:
                    3e:5c:5a:3f:5e:c0:32:df:00:58:de:75:b7:9b:9f:
                    f1:32:22:96:06:dd:35:ec:ca:0c:ee:42:89:96:c7:
                    5a:42:e2:e9:e6:32:a6:a6:d5:79:f3:31:c2:57:a3:
                    e6:df:72:47:c9:20:b8:7c:65:e2:c9:72:0a:0e:8b:
                    e2:e9:21:a2:05:99:61:3b:0c:65:3a:85:ed:e5:14:
                    61:81:de:00:32:e9:19:a7:8b:9a:ca:25:dc:80:ca:
                    34:40:04:9f:1e:2d:da:ff:ce:52:c9:4a:02:04:a4:
                    78:2a:8b:8e:39:a9:a9:57:21:b6:14:a8:5e:42:08:
                    4a:96:30:34:f9:f4:e7:5d:e3:a3:f8:ff:08:9d:24:
                    76:d0:7f:37:ae:25:59:d0:64:d6:1c:6e:54:df:58:
                    ab:f9:ea:eb:b8:81:a6:a0:db:cb:6c:52:0f:48:80:
                    c5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C9:96:5C:C7:10:9E:27:43:0F:FA:95:D6:FF:C3:8F:04:99:39:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/ccb58894-bfb2-3e10-9b03-f8056d836ddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.crl

            X509v3 Authority Key Identifier:
                keyid:85:88:97:A4:88:EB:ED:BE:CF:9F:1A:CD:C7:0D:21:B8:50:37:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:801:600a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:0a:21:5b:77:31:23:10:c0:68:5e:d5:d1:f1:f4:d7:df:4b:
         7f:fc:c3:c9:95:49:ed:3c:20:06:e6:d5:c1:54:76:7e:15:06:
         d0:88:dc:58:17:51:4a:61:bb:91:df:7c:9f:8a:c0:55:c6:7c:
         31:7f:33:f4:54:34:58:03:6d:bb:26:a1:8a:86:75:08:d0:a5:
         28:f4:76:f3:5e:5b:09:3f:d2:c7:ce:fb:e2:1a:b7:27:6b:33:
         19:7f:92:1a:71:5f:8f:ca:1d:82:4d:41:aa:0b:59:8c:6d:c0:
         58:9e:f3:51:4c:5a:a5:01:b7:7c:25:9a:f9:a2:3a:33:71:b8:
         69:9e:2d:e5:e1:26:82:f3:71:f4:18:8e:72:e1:df:75:46:20:
         ef:05:67:ce:9a:38:1d:b4:7b:22:7b:07:f3:f2:5e:8f:4e:11:
         0d:83:22:83:e7:17:2c:12:d9:c1:d6:de:7a:7d:4f:88:00:97:
         05:15:61:40:10:f6:05:f3:0c:06:11:b4:96:26:e1:51:c8:ef:
         72:d6:8a:18:3f:04:42:6c:5a:bd:8a:08:30:24:67:9a:3d:57:
         81:02:23:b0:17:5d:d3:fc:58:4c:3e:1f:82:b4:94:cd:35:48:
         c5:5d:32:78:e6:bd:cd:20:7d:50:dd:52:a3:4a:a8:68:5a:51:
         32:58:f3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:49:30 2025 by rpki-client