Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/c72f7bda-9842-3eff-9d1d-50d42fca430a.roa
File:                     c72f7bda-9842-3eff-9d1d-50d42fca430a.roa (raw, json)
Hash identifier:          IgbWsFLp6V7FeLxsbMwH6gpp6brUKw+37Yw7lGXYQyU=
Subject key identifier:   AB:BA:FE:66:96:6B:AE:C3:9A:5A:BC:06:1B:DE:A1:07:63:E5:BD:2B
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584ADECBB1B13609356C2DECBC40
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/c72f7bda-9842-3eff-9d1d-50d42fca430a.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     142418
IP address blocks:        2602:fd92:800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:b1:b1:36:09:35:6c:2d:ec:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=063c4fee-b216-43c6-a913-dea875724e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:41:57:54:ee:d1:e3:b2:11:08:a6:8e:f0:6e:
                    82:90:94:84:04:29:8f:d2:d2:42:7f:2c:5c:99:05:
                    b1:db:cd:7d:88:9e:07:4e:80:b6:c7:08:bf:c9:27:
                    a0:7a:fc:98:99:8a:0d:f7:29:ac:68:99:95:05:6c:
                    e5:31:d1:58:75:6d:44:b8:45:f3:7a:ea:4f:d6:77:
                    e5:65:4b:80:61:a7:20:2b:58:8c:87:e6:7d:3a:17:
                    79:24:c4:2b:61:8d:58:16:f4:ae:07:f8:d3:75:de:
                    0c:f4:39:c1:96:7f:2f:91:5a:0b:02:b1:5a:4d:41:
                    fc:59:85:85:ce:33:90:a6:e2:9e:f6:21:e4:cc:f0:
                    42:1c:cc:d2:f8:50:6c:2e:e8:d4:10:dc:81:19:ca:
                    42:01:6f:9d:8e:aa:b7:88:a9:9e:62:72:a2:6d:6c:
                    a1:6c:d6:93:e1:d7:8b:53:6a:ec:ec:9e:59:c4:33:
                    da:60:af:84:28:10:72:ca:85:91:bf:95:d8:92:f7:
                    29:4a:2e:76:2d:95:dc:4f:4b:e0:54:71:6e:a4:46:
                    8b:6c:71:ce:07:6e:d0:3b:8c:68:e5:51:b2:1b:4d:
                    40:55:44:e2:74:52:07:09:af:e4:99:6a:30:c1:c5:
                    9f:ba:ce:3d:4e:f9:18:76:91:46:69:2a:61:3e:9f:
                    9f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BA:FE:66:96:6B:AE:C3:9A:5A:BC:06:1B:DE:A1:07:63:E5:BD:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/c72f7bda-9842-3eff-9d1d-50d42fca430a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:93:cd:bd:97:3f:bf:bf:ae:0d:a2:e2:fd:76:8e:3d:9c:f6:
         ea:2c:3f:f8:c1:2d:44:e5:22:15:22:c9:73:86:d5:c7:35:99:
         57:ad:2b:7f:3a:f3:2c:60:e6:a7:c5:e0:69:96:44:66:7d:73:
         87:61:7c:a4:fc:02:92:72:11:21:7c:a2:77:a0:c2:b1:2c:e8:
         18:c6:3a:61:24:51:ac:46:58:90:e1:cf:4d:ae:d1:15:b8:d2:
         2e:43:3c:fb:0d:c1:15:7b:f8:95:2e:6e:ec:16:26:08:41:f2:
         29:ad:40:b3:41:d2:06:2a:eb:e7:ee:db:19:db:5a:53:af:37:
         7e:45:66:1d:4e:c0:f1:e6:62:39:f3:ab:e2:24:f2:e8:82:9f:
         ba:d1:62:3f:fd:40:92:39:db:c8:56:ae:09:cb:ff:9e:c1:99:
         b1:2e:cb:e3:39:1c:17:2f:d7:8e:4e:0f:3b:9f:bd:19:43:79:
         ec:8f:4a:79:6a:21:bc:42:04:26:16:70:81:ee:7f:4c:e8:e8:
         ad:c1:bd:44:bf:dc:12:a5:5a:45:e4:a5:5a:7a:8e:dd:69:d8:
         d1:eb:8b:6d:00:f7:4b:98:ce:b0:14:d0:95:5a:ec:95:64:0f:
         c7:5d:cc:67:87:75:5f:d5:26:6d:e5:20:c2:7e:e7:c8:70:53:
         c4:e5:a8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:58:53 2025 by rpki-client