Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/9da916ca-7642-37e7-a574-698ca18b5d95.roa
File:                     9da916ca-7642-37e7-a574-698ca18b5d95.roa (raw, json)
Hash identifier:          SPtyp8tFAxC1zASTbpInLTC6B+bIyXGbaEMwYhxNjWg=
Subject key identifier:   C7:14:4B:F5:DC:9F:AB:26:4C:93:36:6D:6B:A6:33:2C:07:82:24:FB
Certificate issuer:       /CN=01a4b3c4-670e-4045-9d0e-a7046f352d92
Certificate serial:       010D0C9F4328584AE1966DF588CD8082DEFA0A80
Authority key identifier: 51:97:4C:3C:57:09:75:CE:02:5D:DA:91:32:8B:19:B0:C0:A9:99:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/9da916ca-7642-37e7-a574-698ca18b5d95.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     399332
IP address blocks:        2602:fcba::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/01a4b3c4-670e-4045-9d0e-a7046f352d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/01a4b3c4-670e-4045-9d0e-a7046f352d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:6d:f5:88:cd:80:82:de:fa:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01a4b3c4-670e-4045-9d0e-a7046f352d92
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=798d369f-3bfd-4d8a-b5b3-f213589aae12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:82:f2:6a:f2:33:ee:c9:53:c0:d5:10:ce:4f:
                    f3:59:37:b7:9a:d3:39:b4:68:de:5d:32:c4:e0:5f:
                    43:fc:f9:79:6b:f6:98:f1:36:9f:46:47:98:02:c0:
                    ed:01:91:4b:e0:12:29:09:09:be:bf:9a:4d:c2:f7:
                    f3:ce:39:73:cf:c0:b0:e8:84:e7:25:b2:b7:74:65:
                    4e:d8:2b:0b:78:ee:c7:88:f3:20:bb:65:67:55:6e:
                    f7:69:e7:1b:31:19:53:3e:54:55:75:c7:2e:96:6d:
                    29:7a:98:52:59:2e:c4:e0:90:84:cb:88:2f:17:85:
                    b0:b6:cd:3d:d8:4b:ae:38:a0:f1:10:0d:f3:85:a5:
                    9b:f6:97:2d:a7:57:b4:8f:3f:a6:0d:fa:a8:52:ca:
                    2d:80:d9:de:6e:77:25:54:9f:56:5d:60:24:68:c8:
                    54:f1:83:11:89:72:2c:ae:14:e0:ff:a1:a8:7c:d5:
                    c9:2a:c6:e4:69:64:ff:2f:7f:9c:f0:26:5d:cf:11:
                    80:93:62:ce:97:65:74:0d:70:d5:40:bb:2e:e6:7e:
                    aa:d8:65:8c:b7:d5:ea:72:6e:fe:34:b9:d1:d4:51:
                    6b:e0:31:11:e6:ec:a5:c0:f9:4f:0d:be:e9:35:c5:
                    77:d5:7b:3d:6c:5c:da:2c:b1:e7:c2:8d:2f:6d:64:
                    e9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:14:4B:F5:DC:9F:AB:26:4C:93:36:6D:6B:A6:33:2C:07:82:24:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/9da916ca-7642-37e7-a574-698ca18b5d95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/01a4b3c4-670e-4045-9d0e-a7046f352d92.crl

            X509v3 Authority Key Identifier:
                keyid:51:97:4C:3C:57:09:75:CE:02:5D:DA:91:32:8B:19:B0:C0:A9:99:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcba::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:5d:f5:42:51:a1:76:9a:27:e5:7e:2a:1d:72:f0:12:28:fe:
         16:04:89:3c:27:18:f8:bd:f3:8b:6e:71:72:78:f1:08:17:e9:
         35:16:41:a0:9c:ab:2d:c3:5e:38:6a:b2:7b:a5:96:d8:fc:f2:
         70:3f:a6:58:4c:f6:df:1b:29:bb:25:c6:29:dc:57:02:4b:89:
         4c:4d:93:22:55:d5:64:05:44:ec:8b:ef:16:f2:8b:16:9c:ae:
         b9:87:b3:dd:93:e6:6e:b1:5d:d4:31:9f:34:61:05:8d:69:77:
         c0:0b:b4:0a:c1:92:72:16:e8:0b:42:e6:09:64:e9:ab:f4:7a:
         0f:0e:e6:da:fc:36:1e:ec:61:b5:ac:ea:68:ec:b6:ac:5d:fb:
         c4:97:b7:e8:fa:39:79:57:55:5d:60:b8:ba:c6:84:81:bf:75:
         a3:77:9c:00:da:01:24:2e:fa:3b:38:7b:67:4f:d8:fc:b0:26:
         c5:4a:de:c0:7e:ef:de:fe:25:9b:a3:9c:fe:76:29:08:02:b9:
         8a:0e:ca:45:92:e5:d4:9d:b3:0b:06:2d:e4:28:46:1b:ea:34:
         e7:b8:ce:21:ed:20:f7:8d:1e:ab:25:d9:0c:1d:39:2c:d3:86:
         77:4f:14:3d:31:9d:78:40:89:95:be:a5:cf:d2:f4:d9:85:10:
         fc:e6:0e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:56:40 2025 by rpki-client