Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/f3e32230-1f40-31fa-a8a9-1e2a26d33cab.roa
File:                     f3e32230-1f40-31fa-a8a9-1e2a26d33cab.roa (raw, json)
Hash identifier:          qVf1Z45WaKvn6MnE/A9yas1GGZQcDMpB/BxD1av3glE=
Subject key identifier:   93:67:97:5A:EC:96:20:93:C9:D9:D8:C8:7A:E3:6A:CF:88:95:F0:B0
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584AF0F14836280BE6CB28CD0525
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/f3e32230-1f40-31fa-a8a9-1e2a26d33cab.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     18526
IP address blocks:        2602:fd6f:40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:48:36:28:0b:e6:cb:28:cd:05:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=9d1895c7-66a9-46ab-9feb-5cbc59220329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:58:b5:1e:1d:63:77:12:9e:ae:a5:db:17:
                    d2:ca:16:0d:b2:12:b7:23:8d:22:78:06:c0:4d:54:
                    78:64:06:bd:cc:47:79:8f:f1:b2:32:1e:9e:dc:66:
                    7d:cb:b6:c5:12:01:a6:a1:22:a3:5d:33:9a:9e:d1:
                    61:69:dc:1b:6e:81:45:13:16:74:32:ea:4d:8c:c6:
                    b1:cd:b0:89:ef:eb:e2:d0:86:51:8b:44:ee:5d:5c:
                    9f:79:79:c8:dd:d6:a3:a0:41:f7:82:e6:40:af:47:
                    59:e0:04:a1:06:91:67:6c:67:f0:a4:d3:a0:d2:2c:
                    04:8b:f6:25:1f:2f:40:eb:cf:63:4c:2a:07:42:8c:
                    e1:b5:a1:b1:5e:0f:a3:de:f9:b3:fb:1a:ff:bf:38:
                    74:24:27:82:3a:ed:4c:cd:8a:e7:26:a7:70:8d:37:
                    87:1c:c8:c9:6f:d9:c1:b3:3a:d6:57:aa:7b:ec:25:
                    f4:8d:2b:37:0b:34:0e:5a:45:59:53:07:c1:dd:14:
                    ce:2a:a8:26:60:82:f0:08:ea:fe:f4:90:46:6a:b1:
                    7c:86:88:29:c9:5b:4e:d3:40:f0:9f:f9:39:ee:f4:
                    1a:a5:3c:ce:36:92:25:fa:e4:d5:cc:13:ae:0f:6b:
                    3e:b1:50:4b:4e:67:ad:b4:7a:d5:4f:48:22:0b:8f:
                    5d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:67:97:5A:EC:96:20:93:C9:D9:D8:C8:7A:E3:6A:CF:88:95:F0:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/f3e32230-1f40-31fa-a8a9-1e2a26d33cab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c7:e8:5b:f6:1b:9e:d8:10:27:1d:80:b2:22:1d:fa:a7:0c:
         60:b3:a9:d0:2e:b1:a6:38:92:d7:d0:88:3d:c0:52:3f:10:1e:
         b4:a5:f7:04:c0:3a:99:fc:4a:31:24:b3:ce:98:8d:ae:69:a0:
         b3:b9:4c:9e:b5:74:aa:87:c5:2c:50:3a:46:ff:90:51:02:1b:
         89:ed:11:d4:2f:0b:36:f0:54:14:e5:4b:ab:4e:8c:53:45:f1:
         b9:0e:77:0d:13:dd:7e:5d:ab:70:6c:22:41:76:26:55:7a:10:
         e5:92:28:49:73:c2:84:53:fa:e3:60:35:a9:86:64:2b:69:31:
         28:eb:db:b8:95:da:85:c9:b1:c6:70:88:e0:01:d6:f0:ab:db:
         e4:64:35:60:fe:b2:7a:74:99:d4:33:93:70:17:90:63:40:21:
         9b:74:25:63:f3:30:71:98:da:17:6e:ad:a5:66:8d:88:e3:86:
         73:39:22:60:e6:4f:44:ab:fa:ff:a2:1f:1f:41:39:e8:04:ff:
         2a:e0:2e:1e:d2:aa:96:97:27:75:5e:c5:07:d7:48:fb:9b:21:
         71:87:d2:0d:53:ba:57:7a:5d:61:4e:4f:12:69:3b:ee:b1:2c:
         5c:40:03:75:0e:49:55:de:17:0f:ad:f2:46:a3:84:cf:29:a5:
         b8:4d:9c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:07:12 2025 by rpki-client