Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/b8134718-5688-387c-a697-5002eba38eab.roa
File:                     b8134718-5688-387c-a697-5002eba38eab.roa (raw, json)
Hash identifier:          qgJpeZfL71UAcGGuowIX6Z9BoW2v5XF07zPaSamDKLw=
Subject key identifier:   F8:01:73:D7:5A:E9:06:2D:80:40:40:18:EE:AE:7C:9A:84:4F:F1:33
Certificate issuer:       /CN=d30c475d-8944-47ed-ba1d-63ff537595ba
Certificate serial:       010D0C9F4328584B1C36CBA747F6CCE4DBF74700
Authority key identifier: 4A:44:7A:35:AC:B8:5B:C6:35:98:E0:D3:A7:A1:14:C8:1A:DA:08:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/b8134718-5688-387c-a697-5002eba38eab.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     32872
IP address blocks:        2602:fa69::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/d30c475d-8944-47ed-ba1d-63ff537595ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/d30c475d-8944-47ed-ba1d-63ff537595ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:cb:a7:47:f6:cc:e4:db:f7:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d30c475d-8944-47ed-ba1d-63ff537595ba
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=242a681f-5678-4185-a677-7e7c0b3bb8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6d:0f:be:7a:f5:da:f0:71:c4:5b:d1:f2:61:
                    f4:bf:7c:17:41:3d:6a:10:4b:2f:e0:6c:e3:5c:33:
                    b6:29:e0:10:38:3e:16:44:c2:69:62:be:88:a5:1d:
                    cc:93:35:84:c6:2e:d2:88:28:5d:3c:e1:15:39:a6:
                    ef:bd:30:13:1c:3e:98:3f:55:d7:7c:76:59:df:8c:
                    8b:2f:11:70:52:bf:48:7b:ee:42:a0:87:44:22:a7:
                    0f:23:78:51:fb:31:ca:f6:f0:1e:03:75:43:9b:17:
                    7e:10:ff:2f:fa:91:63:62:d4:d1:b2:4c:33:64:c0:
                    d7:eb:96:bd:7d:28:52:cd:be:9a:58:a2:64:42:94:
                    0f:e5:c9:d0:8a:ce:c8:c8:f6:5e:e1:74:30:04:3d:
                    fd:a2:c9:0a:9a:7e:0d:91:a2:88:a3:af:d5:ba:e9:
                    50:bb:c5:36:54:08:67:53:db:dc:16:83:9a:16:49:
                    88:d7:9a:96:47:e2:f2:65:09:c4:1c:bd:66:bd:8e:
                    ee:eb:d1:f4:9b:7d:f4:66:44:5f:74:6a:03:57:19:
                    40:d9:8e:62:76:63:63:c5:b7:ae:50:e2:75:d9:b5:
                    5b:39:fc:a1:b3:c1:a0:c0:6d:44:d8:05:15:ed:df:
                    60:c0:68:93:1c:e9:53:dd:8f:ff:6f:5a:85:25:13:
                    91:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:01:73:D7:5A:E9:06:2D:80:40:40:18:EE:AE:7C:9A:84:4F:F1:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/b8134718-5688-387c-a697-5002eba38eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/d30c475d-8944-47ed-ba1d-63ff537595ba.crl

            X509v3 Authority Key Identifier:
                keyid:4A:44:7A:35:AC:B8:5B:C6:35:98:E0:D3:A7:A1:14:C8:1A:DA:08:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa69::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ee:1f:37:cb:7c:e5:e8:d3:bd:d9:47:85:ca:cc:d4:68:07:
         08:a9:27:95:2d:a7:93:0a:88:49:7c:29:a8:70:d6:43:6f:7a:
         a9:84:77:b1:08:20:41:08:e6:64:f1:11:e8:c4:80:f0:eb:b8:
         ba:7a:37:1f:cb:ff:ea:c0:b8:46:60:53:1a:c0:4d:58:21:52:
         04:85:1a:05:f2:fe:9d:81:a8:e1:a6:ff:24:c6:f4:a2:82:7c:
         e7:18:09:98:b2:90:5a:fb:c4:e5:1b:1a:57:0a:ad:5d:81:9d:
         19:fc:28:0b:15:92:e3:02:61:78:2a:42:f8:2f:ed:75:31:31:
         a4:42:85:5f:56:86:1d:e0:89:98:2e:d2:60:8d:d5:54:f0:a6:
         fb:32:07:23:5a:4d:f1:f6:7e:f9:e1:4f:e5:32:80:2b:58:47:
         46:bf:e9:18:49:11:a3:41:77:a8:14:f0:96:e3:b0:b6:51:ce:
         fe:13:ad:0a:64:1f:b6:13:d3:54:8c:a5:c9:b7:71:27:fd:13:
         3b:45:be:28:0c:13:dc:c7:1c:2f:a1:12:6f:a9:e8:d5:db:6b:
         00:05:c6:75:de:a7:71:66:8c:95:9e:5c:55:ff:f5:a7:a3:f9:
         03:a3:00:a8:dc:8a:7c:e0:ff:02:d1:e2:ba:aa:b7:ab:38:f5:
         e4:8b:be:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:56:20 2025 by rpki-client