Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/c5d32d77-d677-379f-b3c0-7e143933b8fb.roa
File:                     c5d32d77-d677-379f-b3c0-7e143933b8fb.roa (raw, json)
Hash identifier:          DlhdRfitFZOWCvm+tNW8INDMmamYyif4K5YhvcoT++w=
Subject key identifier:   49:FA:60:1D:00:6A:B0:C8:3A:27:B6:68:ED:DB:CF:A3:C0:E8:8F:BF
Certificate issuer:       /CN=8309265c-1311-43ce-adf7-732012b108fd
Certificate serial:       010D0C9F4328584AC2E0DF4B86994806CAEA7F80
Authority key identifier: 65:2E:14:B7:F5:C4:AD:CA:C2:6E:F6:9F:9F:60:EA:FA:23:26:CC:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/c5d32d77-d677-379f-b3c0-7e143933b8fb.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     397720
IP address blocks:        2602:fdc2:55::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:df:4b:86:99:48:06:ca:ea:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8309265c-1311-43ce-adf7-732012b108fd
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=878f4c3c-2620-463b-a5d2-6fece64425a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ba:a2:ac:3d:a7:bf:53:44:eb:17:ce:70:ec:
                    97:be:97:d3:15:18:13:60:48:40:7e:be:69:2e:88:
                    60:9f:42:fd:8d:c4:81:9b:cd:05:0c:8f:6c:3c:a6:
                    e3:0b:2e:96:94:91:e2:89:50:40:6c:2b:6d:77:a3:
                    c3:96:9d:64:e3:67:6f:03:19:a6:1e:de:bd:c6:95:
                    a0:61:5a:8b:a2:95:1a:dc:fc:6c:b9:08:1d:50:de:
                    ec:63:b8:62:14:38:1f:16:81:ef:7f:e5:5a:76:f9:
                    0e:7f:2b:2c:b7:07:38:53:6b:e0:06:ff:46:b8:79:
                    11:9d:aa:33:68:46:d7:69:e0:f2:c0:ee:12:46:53:
                    5f:5d:93:3d:45:62:6d:30:bf:45:9b:b0:3b:3d:5f:
                    7f:0d:aa:21:b7:fc:98:33:9b:a0:a6:22:e2:94:ec:
                    89:47:81:02:2c:0f:b1:60:7c:3f:b7:5e:fb:92:04:
                    61:33:61:73:20:da:64:9c:5a:10:43:0d:0e:d9:5c:
                    7e:01:ec:79:c0:ff:d5:fb:f5:f6:ac:1f:cb:22:39:
                    ca:24:e1:61:af:b8:eb:fd:1f:c7:3c:90:e5:f6:0d:
                    9d:ec:37:87:cb:e8:0a:66:cb:1b:98:4b:c2:eb:01:
                    5f:55:6a:8a:f9:9e:4c:ce:c2:d5:13:5e:de:27:8d:
                    40:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FA:60:1D:00:6A:B0:C8:3A:27:B6:68:ED:DB:CF:A3:C0:E8:8F:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/c5d32d77-d677-379f-b3c0-7e143933b8fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd/8309265c-1311-43ce-adf7-732012b108fd.crl

            X509v3 Authority Key Identifier:
                keyid:65:2E:14:B7:F5:C4:AD:CA:C2:6E:F6:9F:9F:60:EA:FA:23:26:CC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8309265c-1311-43ce-adf7-732012b108fd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdc2:55::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a3:77:b3:c3:f6:bc:c7:d7:63:6f:45:33:40:f3:c4:b4:d6:
         40:45:48:d1:90:fb:95:12:a4:84:d8:ff:0e:3b:88:50:5a:20:
         ed:b8:a9:60:13:c2:9f:30:f0:d5:7f:de:8b:01:3b:04:24:b1:
         8a:f3:9a:0f:61:2f:4b:93:86:67:5f:ca:14:89:df:33:88:b1:
         76:0f:21:0d:ea:f4:53:f1:37:cf:5d:80:b0:9e:9f:c8:3b:da:
         0a:ee:ef:22:fb:82:f1:4e:d1:03:d2:f6:be:06:e7:54:ed:74:
         7a:d0:4d:2b:42:c5:77:1f:9c:85:dd:bf:86:65:ff:15:2d:4f:
         1f:0c:b3:bd:34:d8:f6:19:a3:c0:f1:b2:2d:00:fc:c3:51:56:
         03:57:b1:72:c4:de:87:15:c8:d2:75:b0:b4:40:82:f2:0d:c3:
         82:26:82:e2:cb:4e:a0:2f:c7:c0:10:61:21:17:85:6c:a9:a0:
         f0:08:70:15:ca:bc:f5:58:0c:47:ea:bd:03:51:af:b6:af:0d:
         5b:8e:fd:9f:87:d4:b9:86:dd:70:4b:41:37:13:c0:b0:7a:df:
         f0:9f:1d:2d:13:25:a6:61:9d:83:d9:10:e9:05:0c:8f:63:ca:
         6d:37:fc:d3:d5:77:1b:f5:0d:d9:94:c7:4f:ff:f5:a6:b4:a4:
         f5:08:93:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:43:17 2025 by rpki-client