Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/b32ffd1f-6711-3e8a-ba4f-1a7e3b0d04ea.roa
File:                     b32ffd1f-6711-3e8a-ba4f-1a7e3b0d04ea.roa (raw, json)
Hash identifier:          vZPDwR/RwQpR0ElBoXyqdDdq8KF6LTKW48OYG/UaIsw=
Subject key identifier:   7E:D6:17:0B:EA:F0:F4:08:4F:3B:B3:E2:2E:55:32:78:43:C8:88:34
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F4328584B76F22B169209033AD76D4180
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/b32ffd1f-6711-3e8a-ba4f-1a7e3b0d04ea.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     399122
IP address blocks:        2602:fcd5:c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:2b:16:92:09:03:3a:d7:6d:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=b73c06ae-7a41-4d67-be85-71c6e3a42dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3d:4e:bd:9e:75:c8:49:e1:2a:a0:75:9b:d1:
                    27:93:46:ee:e6:17:bf:16:f9:54:0b:75:9b:ac:4f:
                    72:72:a8:95:69:17:a6:09:0e:45:b6:50:f7:36:aa:
                    e8:5d:7c:b9:8a:4d:3d:c3:94:f9:e5:f0:2c:80:08:
                    b4:9f:fc:c3:24:3d:63:77:c0:77:bb:e3:62:a1:4c:
                    27:47:a1:5d:b2:17:8c:cb:e2:14:09:15:03:d0:5c:
                    ca:c4:31:a6:da:6d:cf:03:51:73:4f:c1:70:fc:2e:
                    d6:eb:ef:e8:df:af:75:cc:4e:96:56:7d:04:66:69:
                    82:d3:75:b7:b1:88:7f:d6:e2:61:c6:a2:7a:31:97:
                    47:6c:f8:5c:73:50:d7:2a:6e:71:10:88:87:f2:ef:
                    1e:e9:2d:03:dd:80:5f:9e:79:1e:e5:4e:2a:37:ff:
                    f7:ca:44:4b:6e:41:18:fc:5d:4b:53:85:13:42:f1:
                    d0:b5:78:c9:0d:ff:23:92:55:90:27:9d:0e:bd:57:
                    8e:80:cd:01:44:3f:e0:29:7e:7c:c8:2e:d4:68:54:
                    c7:97:d9:16:4d:12:fe:0f:5f:b3:5b:23:54:f8:97:
                    f6:42:39:60:18:df:a7:38:f6:9b:19:8e:72:52:64:
                    8d:d5:85:fd:5f:0d:0c:c6:33:11:23:e8:fe:2d:eb:
                    c9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D6:17:0B:EA:F0:F4:08:4F:3B:B3:E2:2E:55:32:78:43:C8:88:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/b32ffd1f-6711-3e8a-ba4f-1a7e3b0d04ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd5:c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:73:35:db:ea:bc:22:b0:49:71:9e:10:82:d3:85:fa:f2:ea:
         95:8a:77:ca:30:77:fe:12:5e:d8:86:97:98:0a:dc:b7:2f:d5:
         a3:c7:ba:79:18:1a:b6:27:8e:ed:aa:04:97:11:c9:22:ad:66:
         29:ac:e4:18:84:33:a3:82:48:fd:bf:b4:82:89:14:4d:70:34:
         8a:a4:af:91:3f:2a:fc:df:18:c9:5b:1c:f0:d7:73:b1:3c:5e:
         a1:b1:d5:90:44:08:37:b1:b2:ee:ab:19:13:53:db:4b:2d:cd:
         5d:c7:b1:93:c6:9a:1b:b5:29:2b:d1:bb:33:22:58:9c:98:10:
         72:e8:f5:7d:44:1d:c3:47:56:97:60:9e:c3:01:28:16:21:34:
         93:b9:83:46:5c:c0:9f:08:15:14:72:a4:91:96:28:5b:ad:65:
         fa:59:d3:37:92:53:54:12:6a:83:72:78:c1:b0:fd:63:74:96:
         b2:96:39:bd:94:38:b9:95:9a:cb:19:52:9e:96:26:83:78:10:
         9d:66:fe:1c:63:f0:b3:17:04:9c:28:50:9b:ea:e2:48:f8:70:
         76:9c:e2:e7:c8:c3:68:e8:71:a2:9e:e4:ed:39:00:99:b2:8b:
         72:d8:bf:fa:ea:0e:46:1c:4c:44:eb:eb:a9:b9:ef:03:60:3e:
         8d:35:24:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:50:56 2025 by rpki-client