Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/8cd1d060-0674-38f5-a33f-7487b8949e5b.roa
File:                     8cd1d060-0674-38f5-a33f-7487b8949e5b.roa (raw, json)
Hash identifier:          4xye9EwstW2bge5o54XCVFNTyu4rPztKBMHUQ4Le4y0=
Subject key identifier:   D4:D4:8C:E9:24:24:CF:F5:9B:5E:BF:C6:E8:43:0D:32:83:C6:2F:21
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584ADA9BB5D121767F23CAF0CEA0
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/8cd1d060-0674-38f5-a33f-7487b8949e5b.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     17830
IP address blocks:        2602:fd92:300::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:b5:d1:21:76:7f:23:ca:f0:ce:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=925c603b-bcd6-4fcf-9ffc-1c39ebb577e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cf:17:89:cb:3b:7c:77:2d:05:27:b9:f5:93:
                    91:3e:61:a1:3f:e4:9b:d6:6b:32:67:dc:df:14:b8:
                    19:4d:2b:e4:4a:d6:3e:58:37:f7:80:ba:90:ab:f7:
                    97:f0:2d:08:84:b4:2d:db:f1:11:60:5d:6c:6c:29:
                    66:f3:62:d2:df:b6:5a:e4:20:31:3c:92:fd:35:a0:
                    87:db:b0:d0:0d:d7:be:ba:f4:34:7a:e3:29:8b:f7:
                    f9:d1:92:a9:46:a5:1a:50:9a:ed:3e:98:22:63:e8:
                    84:32:4d:86:2a:aa:b9:25:6c:4d:f9:65:a3:1f:df:
                    17:65:09:a7:27:b8:f1:91:bf:7e:91:e3:05:f8:dc:
                    ce:5b:25:26:a7:f3:ae:e2:b1:bb:82:42:a4:b8:ff:
                    bd:d6:53:87:8d:97:40:b9:a7:08:60:c3:50:73:15:
                    32:3b:b5:db:94:8c:f1:d4:16:5f:cb:7e:eb:3f:1e:
                    62:c2:76:4d:6c:3d:96:ec:d7:60:68:9e:de:e1:5d:
                    1c:e9:9a:58:d9:55:7e:84:e6:e3:85:af:cf:46:71:
                    9d:ae:8c:47:f1:a7:b7:7e:f8:8c:63:8d:f2:7f:09:
                    99:9c:36:e8:f5:f0:f4:77:5a:33:83:e4:d1:68:d9:
                    6d:12:fa:d5:5e:09:3a:ef:62:e2:8c:14:36:6b:a1:
                    ac:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D4:8C:E9:24:24:CF:F5:9B:5E:BF:C6:E8:43:0D:32:83:C6:2F:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/8cd1d060-0674-38f5-a33f-7487b8949e5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:fb:d0:4f:28:b9:31:a2:dd:4e:bc:3a:d4:e6:b0:07:b2:6f:
         8f:2c:73:69:8f:b4:b6:d8:a4:24:15:8d:fe:63:ec:cb:98:e5:
         20:19:e5:3f:e4:41:9a:f9:63:ab:88:f4:ad:74:3c:21:8d:62:
         6f:45:da:6c:00:45:50:5c:dc:3c:00:7a:85:fc:58:1a:27:b4:
         96:7c:49:c6:58:34:02:d8:b0:82:06:8e:43:b4:99:5e:b1:b4:
         b6:53:72:26:c8:57:1f:b5:65:06:95:57:81:e9:72:6d:27:da:
         90:27:6d:72:f5:ac:32:87:3d:83:b8:9a:ac:7e:95:ec:a6:18:
         11:96:36:03:74:4d:b4:75:b9:74:84:50:76:2a:7a:2d:11:d8:
         9c:01:0e:4a:b8:7a:f7:06:9a:b2:8d:5a:52:fb:36:07:40:8c:
         2e:02:a5:fd:89:34:cd:53:2c:97:01:b1:12:ae:21:31:5a:98:
         65:4f:93:ed:e0:ce:92:cf:01:aa:69:5c:2d:35:1e:09:38:75:
         70:db:12:ae:4b:6c:65:26:c1:9e:47:7c:4b:0f:c1:a7:48:e6:
         47:2e:4c:b2:21:5a:c4:22:96:92:97:87:ae:1f:4e:6c:6b:96:
         68:44:91:4e:6d:c3:87:c0:04:1a:91:3f:93:dc:5d:f3:39:72:
         01:06:2f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:34:45 2025 by rpki-client