Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/11d48bea-de6c-3fd6-9849-dfce2adf03b7.roa
File:                     11d48bea-de6c-3fd6-9849-dfce2adf03b7.roa (raw, json)
Hash identifier:          KlASS82TNZBeDU71hwAdEx7nxhXMzH9N1GQYJXnbKmM=
Subject key identifier:   91:BB:F9:94:87:5A:22:FB:C8:DC:F2:61:37:D1:E9:1B:D4:58:2D:EE
Certificate issuer:       /CN=5742dde3-84a3-4488-a01c-525734c4d81b
Certificate serial:       010D0C9F4328584B742752662CCA1DDD858E20C0
Authority key identifier: 80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/11d48bea-de6c-3fd6-9849-dfce2adf03b7.roa
Signing time:             Wed 08 Oct 2025 13:00:37 +0000
ROA not before:           Wed 08 Oct 2025 13:00:37 +0000
ROA not after:            Tue 06 Jan 2026 14:00:37 +0000
asID:                     397384
IP address blocks:        2602:fc53:35::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:27:52:66:2c:ca:1d:dd:85:8e:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5742dde3-84a3-4488-a01c-525734c4d81b
        Validity
            Not Before: Oct  8 13:00:37 2025 GMT
            Not After : Jan  6 14:00:37 2026 GMT
        Subject: CN=c059679c-3273-4919-be5e-b9b54516db11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e1:93:a2:0f:20:db:ef:3d:b4:b8:8f:2f:4c:
                    85:f0:04:87:8d:03:65:75:ce:e0:9e:9e:c6:69:d1:
                    e2:b8:7f:f3:c2:45:b9:56:41:fb:ab:df:08:c8:79:
                    f1:22:7c:61:88:da:8e:1f:6c:64:90:ed:ac:99:7c:
                    1f:76:7b:71:67:8c:41:4a:b5:f5:bc:3f:ca:5a:5f:
                    b9:6d:8a:aa:58:34:7c:8c:5e:f1:5a:64:62:0d:ee:
                    11:76:dc:b3:83:1e:8d:29:01:f7:2a:3c:9a:f4:18:
                    ce:4c:46:c5:00:8c:14:e8:6d:90:60:8c:96:f3:ec:
                    23:42:81:e2:53:90:ff:1a:63:97:8a:34:44:02:65:
                    95:1b:f2:57:d6:fa:aa:bb:fb:88:90:e8:9c:1f:52:
                    bd:39:88:2e:70:2a:43:9b:b0:d7:55:a8:01:82:da:
                    b5:52:2b:7b:36:33:48:d2:db:3a:81:d8:4c:7a:01:
                    12:20:73:d4:d7:68:f7:87:f1:f0:9e:dc:11:68:64:
                    ad:60:fe:13:65:aa:38:6a:ca:21:a8:05:59:e8:cc:
                    78:af:ed:32:df:e5:b4:5a:af:cd:a9:0b:72:ba:bf:
                    ee:80:34:37:b3:fc:6a:c4:ce:d6:b5:76:a5:ce:cc:
                    7f:74:ca:87:75:f2:bf:50:c9:68:8f:9e:42:e4:05:
                    3c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BB:F9:94:87:5A:22:FB:C8:DC:F2:61:37:D1:E9:1B:D4:58:2D:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/11d48bea-de6c-3fd6-9849-dfce2adf03b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl

            X509v3 Authority Key Identifier:
                keyid:80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc53:35::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:f9:68:83:7d:cf:0a:7b:89:ca:d7:a9:fe:c4:5b:43:87:3e:
         ff:24:2a:41:25:0e:5a:2e:49:27:50:c4:6e:94:b6:c4:67:e0:
         69:8b:8a:a3:9f:a9:e1:7c:bc:60:d6:12:ba:54:b7:c6:0c:ed:
         23:28:f9:96:bf:df:96:a4:4d:27:93:44:9c:dc:c3:f9:07:d0:
         dc:81:6a:c4:7f:44:a1:e4:29:a1:3f:1b:f0:c0:d6:56:9d:d3:
         2e:6e:07:97:75:90:28:7c:cc:31:97:bb:2d:14:52:fa:ce:43:
         07:a6:89:4a:82:a3:0f:45:01:2e:fd:b6:fd:e0:2e:24:74:02:
         53:18:ac:6a:df:98:94:e2:81:2a:a5:96:1c:b2:24:96:11:61:
         be:64:15:0a:34:64:2f:0a:89:56:57:f2:5a:25:3b:3b:f2:c8:
         e5:48:9e:a3:bd:6a:77:61:16:bd:a4:9f:7f:8f:81:d2:02:57:
         65:44:a5:5f:96:04:d6:0c:4c:75:b7:27:d5:70:88:f4:b1:34:
         2d:07:f9:02:9d:6c:f0:92:b6:0f:89:e7:8c:53:99:d6:fe:8f:
         05:e5:42:b3:6b:ab:1d:5c:f0:dd:7f:f9:ea:8f:8b:2a:f9:3c:
         43:d8:52:dd:a0:70:80:3b:b8:2a:c2:8c:d2:e4:16:7c:36:4c:
         f6:02:e5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:57:20 2025 by rpki-client