Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/e38f6ec9-0bc5-3381-991e-d21407696e1e.roa
File:                     e38f6ec9-0bc5-3381-991e-d21407696e1e.roa (raw, json)
Hash identifier:          v+4pudyeZTvT96AT/oy2P1akv53ZkDfn0QsF/HbVtP0=
Subject key identifier:   36:58:FD:12:1D:72:C2:54:E6:B3:92:54:A8:46:AD:C6:6F:B8:53:3F
Certificate issuer:       /CN=a2847747-8d46-4da2-bb9e-4c72860e7bcd
Certificate serial:       010D0C9F4328584ADA9BB6300AB4C22274FD0680
Authority key identifier: CC:21:3E:58:74:F4:E7:E4:17:39:FB:8B:91:FE:79:BA:A9:33:8C:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/e38f6ec9-0bc5-3381-991e-d21407696e1e.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     203690
IP address blocks:        2602:fc42:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:b6:30:0a:b4:c2:22:74:fd:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2847747-8d46-4da2-bb9e-4c72860e7bcd
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=ca9f41d6-8e25-407a-a556-81f98154b72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1b:7e:9e:78:b3:28:4b:44:2b:27:cd:50:74:
                    40:bc:27:52:67:a7:6e:77:ea:4d:5f:e2:f3:27:c8:
                    ab:ab:ba:66:a4:9f:e3:14:e8:68:3d:42:44:25:cb:
                    61:a3:59:a5:18:e6:00:ab:cb:06:0a:0a:f7:9f:a4:
                    b0:53:de:5d:30:da:e5:af:b9:c6:35:db:ec:20:50:
                    db:07:10:ec:b3:83:42:a8:e8:00:e2:b1:b2:21:c2:
                    02:4d:90:00:2f:99:7f:f2:6e:fe:5c:8b:32:8f:8a:
                    fc:4c:d5:13:45:2c:3a:f7:32:bf:48:dc:bb:91:44:
                    d8:71:a4:0d:af:41:de:64:f8:9b:51:33:af:db:94:
                    77:1a:25:7c:ae:ba:c1:f2:f2:be:6a:19:30:ec:b1:
                    a9:ea:08:a9:d0:e2:13:77:1f:2d:39:2b:fa:54:3c:
                    ff:59:71:4f:1c:b3:dd:0a:a5:91:13:06:78:e4:b3:
                    76:49:f0:94:56:b9:16:c3:d3:65:62:0a:85:da:0c:
                    de:44:5e:55:00:4e:2b:b3:1b:cc:b8:85:4b:d4:fa:
                    a0:a0:45:a8:be:5f:9f:79:32:79:9d:08:82:aa:ad:
                    25:79:45:d2:91:4f:a8:55:68:3e:0f:48:27:49:ff:
                    c5:d4:46:50:73:86:c2:34:3a:38:cc:82:ee:13:42:
                    77:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:58:FD:12:1D:72:C2:54:E6:B3:92:54:A8:46:AD:C6:6F:B8:53:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/e38f6ec9-0bc5-3381-991e-d21407696e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.crl

            X509v3 Authority Key Identifier:
                keyid:CC:21:3E:58:74:F4:E7:E4:17:39:FB:8B:91:FE:79:BA:A9:33:8C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc42:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:52:5c:9d:c7:50:8a:66:83:4b:1e:e1:07:c6:d1:89:e2:56:
         91:be:f9:b6:b8:9b:23:00:74:9d:ac:f0:a6:61:5d:c2:32:78:
         8f:a0:59:d9:93:4c:35:de:74:68:e0:fa:e7:9d:dc:49:df:68:
         d1:02:f4:1d:d3:99:d2:b5:6b:c5:bc:01:89:0f:13:58:42:24:
         99:7a:3d:31:82:e4:c2:e4:24:53:0a:e4:5d:b9:28:f2:e2:60:
         89:13:7e:db:9c:54:2e:7b:7c:87:e6:0b:6f:96:e7:9a:95:32:
         db:5c:79:72:54:19:7b:2a:97:ee:7c:08:8c:58:45:eb:55:f4:
         e5:cd:a8:cb:50:4f:d6:17:14:1c:a5:da:48:7e:d3:4e:6d:0e:
         36:b9:98:54:9a:2e:77:a4:2a:8e:f9:fb:38:07:1b:89:8a:69:
         08:cb:9b:3c:d2:42:ea:a2:cf:e0:90:2e:75:57:c1:06:5b:62:
         9c:09:e8:07:cb:80:69:7d:98:04:bc:9b:51:10:dc:a8:cf:06:
         a2:fa:bb:a7:7f:9e:20:6e:75:97:07:ca:34:a4:3d:09:17:00:
         05:e6:fa:c7:d8:63:48:32:91:03:eb:3d:f0:69:59:ba:6a:a3:
         a9:eb:36:ce:64:45:13:e4:d2:1d:5a:d5:83:93:8e:e6:ea:31:
         c4:1e:ae:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:14:31 2025 by rpki-client