Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa
File:                     cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa (raw, json)
Hash identifier:          +TKDU5Lr8raL/QI9lHfS9mHHC2v0boNNy/jsxca/0UQ=
Subject key identifier:   26:60:1D:53:53:D8:57:90:DC:41:84:DA:9B:10:49:B4:16:86:3E:8B
Certificate issuer:       /CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
Certificate serial:       010D0C9F4328584B3556E6A9AFC87E6FE0605380
Authority key identifier: 62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     32604
IP address blocks:        2602:fa9c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:e6:a9:af:c8:7e:6f:e0:60:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49381a3-9c6f-47d6-9c52-9fa07d2bf188
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=45486c13-af90-4a39-829c-53dca3905d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3e:f6:c0:6c:91:7c:3e:58:f3:d1:a4:44:46:
                    ed:b2:1a:b7:5e:24:71:63:6b:d6:dc:41:87:f0:c7:
                    78:24:b8:e1:51:64:44:10:64:8a:bd:b7:ca:be:ce:
                    20:cf:1a:8a:27:60:9a:e0:45:18:94:95:d2:c1:3d:
                    b6:54:51:24:a6:cd:b3:d8:a3:ab:d1:2d:94:3e:06:
                    60:06:6c:8a:86:dc:d3:06:21:e3:02:cb:6c:c7:c8:
                    1c:f4:e0:a3:e6:c8:24:6e:22:b4:a9:1c:17:a2:29:
                    61:38:c1:90:20:24:55:3a:07:c7:68:55:78:16:d9:
                    80:6f:b3:f1:10:96:5a:70:e0:69:31:1c:06:0a:5c:
                    6e:34:77:c9:1f:ca:a4:28:77:85:a7:00:4e:ac:db:
                    cf:0f:09:85:5a:a5:e8:26:18:ba:c3:1f:b6:58:ca:
                    af:80:67:9e:f5:b7:87:ff:f6:4a:ee:44:f5:90:e2:
                    df:c9:cd:a7:a5:64:06:87:bc:40:cb:1e:49:87:70:
                    88:7b:37:dc:b6:97:f6:10:b8:1b:d2:ec:6d:84:89:
                    d1:c0:a6:36:4b:26:b8:f2:22:26:02:a2:45:dc:df:
                    32:6e:33:b4:3b:84:62:14:6f:5d:75:b7:e6:53:99:
                    10:e8:ce:14:6c:8e:38:b5:3d:10:15:92:e7:72:c9:
                    c2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:60:1D:53:53:D8:57:90:DC:41:84:DA:9B:10:49:B4:16:86:3E:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/cb2abf69-1de4-34f0-9bda-4f662350dc0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.crl

            X509v3 Authority Key Identifier:
                keyid:62:52:61:E7:73:FA:00:DB:15:7A:A8:D5:BC:7A:72:B2:D4:80:7C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a49381a3-9c6f-47d6-9c52-9fa07d2bf188.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:81:6d:d6:a7:7a:31:2b:19:e8:df:d7:6e:c0:4e:13:d5:7e:
         5a:d5:6a:28:e5:24:7a:3d:d2:40:b6:34:4a:0a:22:4f:49:54:
         20:db:7c:3c:8a:be:81:f2:7f:5c:a5:28:e5:93:21:58:84:ce:
         de:04:d6:f1:1f:8c:68:97:53:ba:62:f0:dc:c1:fe:f1:67:37:
         c8:93:1d:9d:4c:1c:8a:1f:e4:73:f6:8e:e5:16:8e:44:3e:1a:
         18:12:85:28:e4:39:52:69:a5:dd:5c:67:aa:59:2a:cc:40:55:
         44:a0:a2:57:87:a7:21:39:da:d5:67:2d:4a:d7:72:d0:a3:18:
         0d:ce:24:1e:a5:b0:c5:26:58:e2:33:33:3a:9c:42:67:44:0f:
         ef:95:24:ea:21:0a:76:65:d4:6a:13:81:4c:87:27:36:38:ed:
         4a:43:44:0b:93:8b:70:73:43:0f:5f:a2:a3:d8:96:5e:b1:9c:
         49:58:d7:90:e4:cb:40:58:44:f1:a2:b7:57:76:5b:08:94:e1:
         79:80:25:05:26:ba:c4:31:4e:08:b9:91:32:44:12:2d:f8:34:
         b5:5f:4b:18:2c:f3:28:e4:20:0a:f7:b1:af:97:c3:53:bc:78:
         8e:fd:4e:44:04:66:ed:7a:19:db:c0:85:c2:9a:18:56:bb:e7:
         f0:77:69:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:53:26 2025 by rpki-client