Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/2aad301a-fb8f-39e6-9c9b-9f96f0e577fd.roa
File:                     2aad301a-fb8f-39e6-9c9b-9f96f0e577fd.roa (raw, json)
Hash identifier:          0LOktClNq/ezAPm5VTpssGiBKQ1dDHIIFB1m66neY7E=
Subject key identifier:   B1:E0:B6:FA:66:29:06:0A:32:6F:E5:1B:4C:62:2C:4A:FD:A0:95:74
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584B6367422B35CCB7D6F98E4BC0
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/2aad301a-fb8f-39e6-9c9b-9f96f0e577fd.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     63150
IP address blocks:        2602:f988:c0::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:42:2b:35:cc:b7:d6:f9:8e:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=3fcc3200-849c-4551-95fa-e33b192e6198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a6:28:3e:74:2f:c9:36:00:0c:5c:09:b9:bb:
                    6f:f4:38:c2:b5:5d:7a:fc:7f:04:6d:de:19:3a:78:
                    ae:9a:05:bc:66:0b:82:1a:0e:ea:4a:0d:dc:d6:ce:
                    b8:eb:6d:72:3f:83:ba:03:68:74:c7:d8:d5:20:62:
                    08:7e:fb:9c:99:27:6e:75:68:1b:01:1d:ff:8e:4c:
                    04:f6:25:69:01:a1:0f:6e:93:e8:27:b9:a0:a9:9b:
                    c8:e1:d9:7e:5d:11:16:1b:69:e2:b9:d4:83:7b:49:
                    0f:15:9a:3c:6c:19:e4:64:9a:4b:7f:cd:ea:ca:38:
                    71:d5:d1:47:34:30:0f:f3:3a:be:a6:7b:b2:5d:3d:
                    58:d5:a4:1f:37:c1:af:73:ff:c8:0e:06:a9:f2:bc:
                    36:83:67:a6:d2:4f:82:05:be:ab:ed:8f:e7:e3:8c:
                    73:98:f8:20:fb:83:a5:56:21:55:1a:fe:b4:3f:67:
                    49:f9:e5:35:0f:e1:f6:cf:8d:59:3e:ac:d3:9c:de:
                    ba:44:99:d9:91:b4:64:05:f1:08:a4:cd:eb:3a:4a:
                    f7:a3:67:1e:80:00:23:9e:87:3a:df:e4:1b:90:34:
                    fe:ea:1f:f2:1b:bc:30:11:db:eb:7b:10:c4:3e:a7:
                    a9:7f:78:c9:db:25:73:f3:90:19:92:be:6d:96:de:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E0:B6:FA:66:29:06:0A:32:6F:E5:1B:4C:62:2C:4A:FD:A0:95:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/2aad301a-fb8f-39e6-9c9b-9f96f0e577fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:c0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:3b:8b:9f:9c:96:f4:84:e7:23:58:fc:a6:00:60:b4:10:1e:
         e7:8c:4b:8b:52:0d:80:19:c1:de:2c:d7:f3:3f:c3:58:2b:5c:
         10:45:99:aa:56:f7:95:94:6c:ff:14:aa:c8:7e:1e:a9:83:42:
         74:37:5b:3e:fb:6b:ca:6e:8a:5f:86:75:3c:f3:d6:50:c8:02:
         b0:a4:31:e0:0e:06:1b:f3:10:f2:37:92:86:3f:b9:fa:86:1d:
         da:53:1b:9b:76:d4:fc:d5:33:c5:16:0f:ce:fc:78:70:c9:b9:
         85:d2:25:ae:a8:6c:21:7f:7a:ac:7b:50:33:0f:55:d1:1d:82:
         43:c0:aa:c4:13:82:d5:05:ec:ca:92:83:03:b9:2a:55:7e:74:
         e3:cd:66:91:fc:31:ed:f5:05:1e:31:5f:b1:a0:2f:de:d0:26:
         8c:b1:ba:ce:b7:8a:a1:1b:c4:d2:8d:21:07:b0:9d:a2:24:85:
         85:cb:19:22:02:1b:77:f9:e2:63:74:52:93:ff:80:cf:4e:00:
         5e:a3:ee:30:1e:cf:a3:67:5e:18:eb:26:74:86:a5:57:4a:16:
         3d:31:42:4e:ba:8f:9f:f2:fe:86:77:e4:b3:ee:5b:88:de:14:
         ff:7b:60:8b:d3:b4:66:33:64:33:8a:89:e0:85:53:31:de:91:
         e1:cc:0f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:01 2025 by rpki-client