Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/937a4b3e-3b36-321a-a449-8ce147e77f98.roa
File:                     937a4b3e-3b36-321a-a449-8ce147e77f98.roa (raw, json)
Hash identifier:          tpS4yECRT17QMZ21YKnwPbZysdlPlLau9KHy9AUF9uE=
Subject key identifier:   FD:DE:E8:19:80:37:7E:89:12:E3:6B:9F:FB:A1:82:3F:9C:59:2D:EA
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B5F37794D51EF2FA08A033580
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/937a4b3e-3b36-321a-a449-8ce147e77f98.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     62610
IP address blocks:        2602:ffe4:c8b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:79:4d:51:ef:2f:a0:8a:03:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=d0da8892-436a-4628-a6ed-35ffbd021964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:e7:48:fb:ca:e1:93:4d:0c:de:be:7e:9c:
                    9f:b2:bd:a5:d6:15:51:3f:85:df:2f:bf:e6:63:38:
                    ec:e2:ec:be:5b:95:bc:66:ae:77:e6:fa:46:a1:ac:
                    26:89:66:03:8e:a7:6b:3f:e0:22:08:a0:be:36:bd:
                    19:33:50:69:3c:ec:a9:9d:00:70:ee:d8:1c:90:fc:
                    2b:06:91:09:cf:0c:df:5f:d3:2b:fa:39:6b:46:8b:
                    93:dc:fc:e4:56:8b:ad:35:de:49:49:cd:05:78:2a:
                    b8:7b:03:f4:0a:da:3f:3a:fb:49:70:11:44:fb:ce:
                    12:53:b8:c2:23:c3:97:c7:8b:ac:2d:ab:5e:79:e5:
                    3a:d9:f6:0e:d9:61:d9:83:1b:68:95:fd:cc:ec:1f:
                    28:2c:0a:e1:13:33:b1:f9:17:2e:af:51:61:74:cb:
                    47:c8:2d:1e:d5:97:7c:d2:04:54:28:ce:9e:ff:7f:
                    cc:69:30:21:f3:6d:34:d0:e0:4e:62:3b:52:cc:2f:
                    1c:ff:97:c5:50:d6:e1:51:fa:66:59:a6:3c:92:4b:
                    3a:60:15:51:8a:48:2c:e3:b4:de:a9:c1:f2:4d:27:
                    75:c2:7e:8e:66:61:4b:d1:e0:a0:60:27:02:46:99:
                    d5:59:6b:d6:b4:5b:76:4c:f1:6a:50:98:ed:85:de:
                    89:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DE:E8:19:80:37:7E:89:12:E3:6B:9F:FB:A1:82:3F:9C:59:2D:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/937a4b3e-3b36-321a-a449-8ce147e77f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:c8b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:48:b8:0f:47:eb:b3:cd:18:53:3c:ab:95:4d:ff:dc:e8:85:
         e7:af:48:6e:fb:f1:9f:3a:2e:43:19:2b:d6:5f:5d:71:77:86:
         c2:c2:e2:64:06:90:6b:4e:2a:a0:c0:de:e8:fb:46:73:3c:20:
         4d:18:93:78:85:0b:94:ad:74:e0:b8:b8:03:94:fd:51:bc:a3:
         9e:9b:04:62:ca:18:07:08:3e:84:f0:61:b7:7f:4c:fd:9b:43:
         01:e0:54:16:22:e6:bd:5f:a7:3a:72:dc:a0:be:28:78:8b:35:
         94:29:38:17:6f:49:78:e9:48:80:d7:df:b5:2c:fd:ca:c8:8d:
         49:66:19:fa:8c:3b:d0:47:15:fe:81:74:85:6c:03:1a:41:74:
         dc:56:1f:23:ad:2e:06:b7:91:85:9b:84:93:43:bd:16:a2:45:
         cf:64:88:10:07:8e:44:a5:2f:20:0f:1e:23:71:5d:45:2e:5f:
         2a:ab:90:80:38:a8:6d:c9:c7:a7:34:4c:1f:53:2b:da:70:a2:
         50:d1:35:96:75:b0:70:72:d6:01:2a:e9:45:7c:d3:4b:db:b8:
         53:15:d0:79:09:f0:c9:8e:12:c6:cb:0f:b4:5c:1a:37:2d:32:
         46:39:c3:be:47:94:2f:0e:5d:a9:79:ee:24:86:76:0e:9d:23:
         0a:04:34:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:15 2025 by rpki-client