Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d32ad531-224a-3d26-aaf7-f82478922d6e.roa
File:                     d32ad531-224a-3d26-aaf7-f82478922d6e.roa (raw, json)
Hash identifier:          L/9gDRod0oBGtOsV3mHjG5OJQaVt4+Ua9p2wSLk2JKw=
Subject key identifier:   06:B6:C1:D6:B8:5C:A1:B3:89:23:2E:A8:12:F7:0F:F1:B9:2B:7E:5B
Certificate issuer:       /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial:       010D0C9F4328584B99D79F579499CE475B474A00
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d32ad531-224a-3d26-aaf7-f82478922d6e.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     54613
IP address blocks:        2602:fd9a:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:9f:57:94:99:ce:47:5b:47:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=8f097263-85cb-4e3c-8bd8-cbebf0da0be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:83:4c:00:64:e1:a4:e5:30:dd:39:17:75:df:
                    f7:22:37:6e:dc:b9:ef:3c:57:7c:1f:e3:04:35:02:
                    c6:0e:68:dc:88:6e:5b:56:53:ad:2b:2a:30:eb:76:
                    ec:4d:f5:eb:10:f8:9b:b9:8e:1a:f5:b3:35:ff:a8:
                    aa:7e:97:26:3a:7b:27:92:4a:f5:a5:67:a2:90:37:
                    d4:d5:cf:60:77:dd:46:61:60:2c:98:bb:4a:dd:20:
                    e3:59:67:c7:d3:fa:29:9f:8f:43:ea:fe:c9:a1:71:
                    67:30:b0:11:c4:30:bb:38:3c:0f:52:e9:59:b2:2d:
                    39:a4:9b:17:9b:50:5a:99:44:32:93:3e:a1:76:ee:
                    1b:84:cb:32:19:d2:8b:27:65:2d:fe:4a:15:8a:14:
                    a6:b5:51:f7:2d:47:ee:d4:66:08:e5:1d:ea:24:04:
                    84:5c:c6:3c:85:71:d5:78:bd:3e:a9:62:9a:5c:61:
                    5e:23:31:75:9d:90:a9:a3:c3:26:f8:6f:63:9b:db:
                    ee:c4:71:94:ff:58:69:79:88:b4:25:ba:61:e7:6e:
                    75:fc:81:9b:a8:e8:72:df:07:f1:e4:1d:ac:e3:ef:
                    a3:3a:26:87:28:ff:f4:5b:0a:57:ee:a9:e8:e7:b7:
                    69:b3:1b:09:ae:97:fb:2a:74:5b:47:bf:32:a0:e9:
                    77:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B6:C1:D6:B8:5C:A1:B3:89:23:2E:A8:12:F7:0F:F1:B9:2B:7E:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/d32ad531-224a-3d26-aaf7-f82478922d6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl

            X509v3 Authority Key Identifier:
                keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd9a:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:35:b4:65:4b:ff:28:27:9f:29:7c:7e:e5:ac:de:32:06:2d:
         89:ff:cc:c9:ab:4c:9b:18:3d:99:0a:fc:f6:8c:3c:c9:2d:89:
         0d:1b:4d:60:e7:84:46:a0:3d:32:74:48:55:17:85:17:98:cf:
         95:eb:fc:5d:f6:a7:aa:70:cd:d0:db:0c:b8:bb:e8:8e:15:e8:
         a7:91:5d:26:db:ee:a3:96:5d:25:6c:22:b1:d0:8e:a9:64:24:
         ff:e3:c1:cd:df:df:5f:8d:35:db:1b:56:36:32:43:94:a4:a6:
         2d:99:00:e4:eb:f3:e2:84:68:17:aa:2e:37:67:c7:4d:da:13:
         16:94:f0:ed:34:d1:67:a4:d2:bb:21:e9:b8:43:76:ef:4f:66:
         fc:2a:4b:0d:0a:12:38:f1:75:c4:52:ba:ee:1d:94:57:00:aa:
         57:19:1c:9b:e3:73:4a:25:65:eb:a5:4a:d6:3f:52:bd:ba:81:
         9a:4a:e3:8d:95:e0:90:a1:fc:74:21:66:a6:72:62:43:6d:50:
         06:75:01:d5:0d:90:fb:c2:bc:a4:1a:a0:c2:ea:c6:23:f1:c0:
         00:d4:f7:13:fa:b3:6a:bf:6a:41:ec:c9:1e:20:a0:02:69:ba:
         a0:1b:6e:a0:a1:ba:e8:4b:da:e9:f4:5f:25:c8:8d:4b:42:3c:
         82:32:b6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:46:05 2025 by rpki-client