Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/71d5a34d-6b2f-3384-bb1f-fa60a3850a5a.roa
File:                     71d5a34d-6b2f-3384-bb1f-fa60a3850a5a.roa (raw, json)
Hash identifier:          wTjLFLOdFzBxz8TCHL5GpX9heO7Xp95vJnF51alfmpU=
Subject key identifier:   6B:9A:EB:FB:B2:C0:E3:DD:06:AE:57:63:EB:3A:61:5B:42:84:A5:C2
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584AF0F13872C8D8D88D52BA0F40
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/71d5a34d-6b2f-3384-bb1f-fa60a3850a5a.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     36829
IP address blocks:        2602:fc64:a000::/48 maxlen: 48
                          2602:fc64:a001::/48 maxlen: 48
                          2602:fc64:ca00::/48 maxlen: 48
                          2602:fc64:ce00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:38:72:c8:d8:d8:8d:52:ba:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=10309b6a-fec4-4739-bc54-57bb2d0b26d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7e:40:89:11:d1:e9:05:75:a0:8f:82:98:8b:
                    bb:c9:c5:b3:c7:3f:f4:48:39:08:c6:cb:93:7e:a5:
                    04:c5:31:df:7b:f6:43:b0:12:40:f3:ae:be:64:99:
                    ec:fc:56:bc:a9:6c:cd:8e:a8:e6:b4:19:d2:57:c7:
                    eb:c0:1c:d4:6d:5a:b0:fe:51:f4:cb:60:ff:cf:82:
                    8e:00:9f:f1:c2:75:45:e8:25:96:9b:44:59:91:19:
                    98:d3:2a:e2:aa:39:ab:dd:4c:dd:e3:f8:30:21:66:
                    34:c7:9f:a2:9e:af:ad:97:99:11:4e:fb:4a:6c:8d:
                    6c:20:86:48:a0:1e:81:f4:f5:6d:16:e6:0e:5d:4e:
                    e3:2e:a8:f0:83:7a:3a:bb:6b:62:f4:51:07:fe:b8:
                    13:d5:10:b2:56:eb:2c:0c:6d:6f:c8:6f:30:4b:c9:
                    b2:dd:35:96:90:70:e9:2b:dd:aa:3c:60:d4:c0:56:
                    ce:ed:3f:f9:30:c3:70:4f:1c:ac:21:9f:44:4a:62:
                    72:24:51:e2:63:18:dd:65:d7:d2:63:3f:9e:e3:97:
                    a5:5b:c6:f6:26:be:55:66:b5:14:e3:e4:65:6a:b3:
                    76:d5:80:52:84:fa:a1:5a:f1:97:23:f7:06:df:33:
                    ef:0a:8f:83:9b:ad:6f:a6:10:75:d8:be:76:70:bf:
                    9d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9A:EB:FB:B2:C0:E3:DD:06:AE:57:63:EB:3A:61:5B:42:84:A5:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/71d5a34d-6b2f-3384-bb1f-fa60a3850a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc64:a000::/47
                  2602:fc64:ca00::/48
                  2602:fc64:ce00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c1:ce:59:1c:a8:02:1e:7d:9b:62:b9:e7:24:be:6a:0f:4d:
         3a:b5:ed:9f:bf:4d:78:17:5d:e1:3e:77:05:d8:ea:32:a9:b1:
         22:18:79:35:e7:b7:19:e1:8e:8c:84:c2:52:a5:ef:81:26:a6:
         86:a7:07:2d:f1:36:d3:c5:27:79:ce:1d:b6:89:57:9e:d2:c0:
         8c:e5:5a:b0:f4:95:0f:5a:aa:fa:d5:42:94:19:ea:8f:30:d3:
         c5:c1:ab:83:24:b0:e0:00:31:95:21:c7:02:f4:20:3e:83:d3:
         5f:e6:28:ce:79:35:6f:4a:52:74:be:60:40:a4:54:23:71:e0:
         b3:be:97:ad:7b:ff:aa:57:2d:18:ba:68:09:b4:82:69:69:b0:
         b2:ab:fc:45:94:1d:d8:00:20:4f:c6:01:57:6f:2c:85:88:99:
         e0:89:71:7b:b4:f0:92:c0:86:58:c0:d3:e4:86:62:9e:6f:7f:
         cd:82:39:bb:ae:3b:34:69:0d:5a:ab:f8:8d:f1:11:44:8a:99:
         1e:87:df:a4:6e:22:72:35:e2:fa:d4:1a:f9:75:ee:fa:4a:16:
         64:fd:ca:f4:72:6e:e4:ad:85:09:17:2b:1a:03:f2:26:a8:97:
         85:18:b9:a8:41:74:e1:e7:9d:87:78:05:7f:b1:4a:a5:6b:5d:
         84:50:52:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:49:11 2025 by rpki-client