Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7072b073-0543-4df3-b189-6433ae3ac947/8d183476-c7d5-3d55-a0a8-3f0589f48522.roa
File:                     8d183476-c7d5-3d55-a0a8-3f0589f48522.roa (raw, json)
Hash identifier:          rXJY8TldaDV3edBmN0Khweu95nXDaudnWULAJbWMljE=
Subject key identifier:   0A:54:0C:7C:0F:E4:8B:55:C4:C8:D7:A0:AE:2A:92:9D:4C:DC:C0:B9
Certificate issuer:       /CN=7072b073-0543-4df3-b189-6433ae3ac947
Certificate serial:       010D0C9F4328584BB88D590F0403298CD750D580
Authority key identifier: 28:D6:6A:B6:9C:BF:67:74:51:5A:2C:70:BD:50:90:72:D5:9D:8C:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7072b073-0543-4df3-b189-6433ae3ac947.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7072b073-0543-4df3-b189-6433ae3ac947/8d183476-c7d5-3d55-a0a8-3f0589f48522.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     399594
IP address blocks:        2602:f5e4::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7072b073-0543-4df3-b189-6433ae3ac947/7072b073-0543-4df3-b189-6433ae3ac947.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7072b073-0543-4df3-b189-6433ae3ac947/7072b073-0543-4df3-b189-6433ae3ac947.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7072b073-0543-4df3-b189-6433ae3ac947.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:59:0f:04:03:29:8c:d7:50:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7072b073-0543-4df3-b189-6433ae3ac947
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=f7f25693-e187-4a90-b965-c5420af87c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2a:6f:b9:b2:38:c3:35:1e:9f:ea:13:ca:4d:
                    bf:1c:2f:09:53:ce:66:ef:3a:1c:f1:a0:8e:8e:5c:
                    97:02:e1:4b:5a:a0:16:bb:c4:16:1a:da:1c:c0:9b:
                    7e:c3:40:b5:78:e2:ca:0d:79:8d:47:00:56:24:18:
                    cf:24:04:df:d2:00:bc:78:c3:5f:2b:c8:52:e3:f2:
                    74:9e:4b:28:8c:47:f1:b3:80:6b:96:e0:73:36:62:
                    88:3e:00:c7:dd:e8:8c:39:3c:dd:7d:71:18:58:4d:
                    72:41:5a:ac:30:a5:a5:bf:43:cf:21:1a:67:46:f2:
                    07:e1:74:cf:25:71:62:82:c8:8d:f5:40:5f:83:a4:
                    c3:af:54:98:0c:d7:bf:31:67:1b:89:50:c6:26:ce:
                    82:d6:7e:0a:d1:3f:b2:25:ac:f4:51:ab:c4:2c:37:
                    b7:fb:93:05:15:6a:2e:c4:86:5e:da:96:de:96:d3:
                    f4:70:c1:fb:6b:0e:0f:ba:89:19:c8:73:96:4e:84:
                    59:b0:de:31:f1:59:5c:04:1e:96:f8:04:80:b7:ea:
                    21:e1:49:3c:a5:f8:17:1b:20:de:4c:8e:5a:8a:da:
                    88:27:20:a9:13:7f:89:53:0a:ec:75:3a:68:f5:d1:
                    35:84:4e:6f:ed:86:d7:bd:25:91:cb:16:c4:72:21:
                    cf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:54:0C:7C:0F:E4:8B:55:C4:C8:D7:A0:AE:2A:92:9D:4C:DC:C0:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7072b073-0543-4df3-b189-6433ae3ac947/8d183476-c7d5-3d55-a0a8-3f0589f48522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7072b073-0543-4df3-b189-6433ae3ac947/7072b073-0543-4df3-b189-6433ae3ac947.crl

            X509v3 Authority Key Identifier:
                keyid:28:D6:6A:B6:9C:BF:67:74:51:5A:2C:70:BD:50:90:72:D5:9D:8C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7072b073-0543-4df3-b189-6433ae3ac947.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5e4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f3:de:5e:11:57:03:08:78:10:81:49:75:5b:fb:47:cb:37:
         2f:cf:ac:04:81:90:67:cb:a5:4d:e9:c1:86:01:b9:cb:a1:27:
         3a:34:b8:32:28:dc:92:d8:3c:27:01:06:e8:cb:ff:a5:2b:4b:
         20:37:59:b5:e1:87:07:d3:0f:96:e9:36:d7:11:56:7f:31:90:
         bc:be:bc:81:fa:93:3b:c0:4b:b0:ac:b3:c1:95:69:92:f0:72:
         80:1e:21:4e:6f:95:dd:85:8c:d5:b7:69:6d:cc:23:35:8f:38:
         17:05:98:9c:6e:a6:65:b6:de:5a:6a:e1:7d:18:b7:b9:fd:28:
         f9:cf:9a:c5:f1:9f:88:fa:33:92:da:cb:ba:64:26:7b:b9:c5:
         a1:ef:ef:d8:2b:aa:1b:99:d4:aa:46:f9:17:3d:ec:dd:33:2e:
         77:6e:01:3a:bc:25:45:d6:fa:dd:8e:92:31:cc:fb:2a:87:00:
         a7:ea:5b:a4:c0:6e:64:23:5e:3f:59:5e:4a:79:8e:b0:91:f1:
         62:33:85:f1:09:31:9d:74:1b:a4:e7:1e:2e:92:29:86:8d:32:
         ff:7c:22:5e:55:83:fe:34:b7:b2:08:e9:49:ad:ff:70:c4:ed:
         a4:36:51:fd:03:a2:49:97:9c:60:44:b2:9e:36:b0:3d:a2:9a:
         e6:99:39:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:38:08 2025 by rpki-client