Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/99072b6c-3150-3cc4-8cca-40f9b7524062.roa
File:                     99072b6c-3150-3cc4-8cca-40f9b7524062.roa (raw, json)
Hash identifier:          03U2PRCZEzvgg0539U2zEUGcCskWvZW9m6GTXHb4oDg=
Subject key identifier:   77:B3:68:2B:62:8B:F0:D2:AB:FF:39:D4:7E:E1:95:F1:52:92:16:EA
Certificate issuer:       /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial:       010D0C9F4328584B38218EBADD1E4835EBF2BD00
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/99072b6c-3150-3cc4-8cca-40f9b7524062.roa
Signing time:             Wed 17 Sep 2025 01:00:33 +0000
ROA not before:           Wed 17 Sep 2025 01:00:33 +0000
ROA not after:            Tue 16 Dec 2025 02:00:33 +0000
asID:                     51999
IP address blocks:        2602:fbe9::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:38:21:8e:ba:dd:1e:48:35:eb:f2:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
        Validity
            Not Before: Sep 17 01:00:33 2025 GMT
            Not After : Dec 16 02:00:33 2025 GMT
        Subject: CN=5a29f0bf-4538-4142-88fb-c05e2a94379a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f3:7b:30:1b:45:6c:29:13:95:c3:74:6d:34:
                    de:c5:a6:2b:4a:5a:14:98:45:a2:77:9b:51:4f:93:
                    36:f3:0c:43:32:27:99:db:1c:35:1c:2c:bc:8a:3a:
                    5b:f7:8e:70:28:92:73:aa:47:ae:01:97:e9:8e:35:
                    f9:8a:03:b2:6e:2d:5a:92:8f:11:7d:51:92:29:eb:
                    20:67:39:51:b4:44:67:9e:50:43:62:48:8d:e7:fd:
                    a9:76:b8:bc:dd:c6:92:f9:1e:3a:d4:52:de:b8:3e:
                    3a:33:7e:41:be:48:1d:b4:c6:7c:69:5b:45:92:1e:
                    c3:ce:2c:c9:37:74:0e:37:a0:99:bc:66:7b:de:ae:
                    42:35:1e:3d:60:36:10:44:cf:40:08:1d:82:31:f2:
                    bd:1f:24:ad:d5:43:c5:36:9f:31:83:cb:35:d1:01:
                    44:70:43:3c:dd:b0:7b:d2:a2:59:18:88:03:c8:04:
                    18:bd:b9:ab:01:bd:b7:df:7a:1e:04:20:cc:6e:a1:
                    43:0b:fd:43:0c:c9:9f:35:c1:0a:51:f2:b4:cc:cf:
                    94:a9:b6:d4:16:22:d6:81:09:0c:de:83:c3:3e:23:
                    72:c7:52:0d:0d:51:fb:a2:4e:5e:1e:27:95:86:69:
                    a2:44:89:2f:a2:84:22:00:36:26:d4:11:85:39:c1:
                    1b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B3:68:2B:62:8B:F0:D2:AB:FF:39:D4:7E:E1:95:F1:52:92:16:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/99072b6c-3150-3cc4-8cca-40f9b7524062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl

            X509v3 Authority Key Identifier:
                keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbe9::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b8:64:68:85:42:56:2d:d4:0f:6d:00:bd:9c:da:2f:77:33:
         4e:63:7a:a6:e9:c1:31:c0:27:c2:11:23:00:f7:52:cd:09:98:
         f4:8e:e3:0d:35:c1:14:86:7d:71:e3:82:4c:5a:08:2b:34:bc:
         50:34:19:ad:c6:04:64:0d:82:f0:b0:00:3e:d4:c9:b4:ff:42:
         cf:6a:90:69:4b:7e:29:38:b1:46:fa:a7:18:25:51:96:93:17:
         aa:c9:ce:eb:4d:7f:ed:a1:50:c0:9f:f6:de:f0:93:4b:75:23:
         bf:1b:d7:16:88:ca:63:29:e1:04:c7:ef:ed:27:b2:01:91:80:
         97:59:a0:e6:c9:e2:59:54:ff:a2:83:8f:01:f9:9f:6a:90:49:
         d2:43:98:51:23:7a:69:65:c0:06:c8:5e:5b:4e:a1:2c:28:7b:
         62:9d:0d:61:c7:85:b3:6e:7c:6c:e9:f6:2e:43:5b:49:ef:a9:
         d4:f6:2e:18:55:34:c2:3f:77:ce:e8:64:85:9c:4d:ec:8c:34:
         55:7b:1f:81:b5:8a:14:27:de:e3:4e:0c:36:89:db:23:06:cf:
         1b:7e:b6:72:96:af:09:34:a7:a1:5b:3e:f2:72:a6:20:a2:3f:
         4c:6f:97:88:db:db:a1:c1:ea:fe:4b:c6:ca:b2:02:72:4d:d2:
         32:8b:9d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:49:14 2025 by rpki-client