Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/f57ff3b7-ed91-3c21-a948-06eea118c8d3.roa
File:                     f57ff3b7-ed91-3c21-a948-06eea118c8d3.roa (raw, json)
Hash identifier:          0R6uUl3jgptUog5+6s2+k7BlL5TtFdzR8OQd4cleKQQ=
Subject key identifier:   5B:C7:12:0C:E6:FB:3E:2F:6D:3D:7E:C4:B6:68:4B:CA:9B:BA:C2:D0
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584B7F52100733E9332933A67A40
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/f57ff3b7-ed91-3c21-a948-06eea118c8d3.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     39618
IP address blocks:        2602:fd92:120::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:10:07:33:e9:33:29:33:a6:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=3d25aadb-fa10-4bf4-bcc9-29644c7a8cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:57:40:64:b9:e5:c1:1a:3b:01:87:cb:18:
                    6a:1d:90:72:d2:22:29:ea:a0:d9:3a:fe:22:42:f8:
                    ce:cf:09:34:9e:85:f2:5b:71:28:dc:50:71:08:7f:
                    7a:a8:e4:cb:5d:cc:4b:3d:d5:50:c0:4d:d6:1c:27:
                    03:9a:96:41:8e:3f:b5:f0:6a:00:56:51:d5:34:62:
                    b8:12:b3:8e:c7:b9:69:9b:8c:41:ea:84:97:66:bc:
                    c6:4f:2b:87:32:c8:a3:96:4d:dd:aa:80:ff:66:f1:
                    d2:3a:da:45:e7:36:57:5c:fc:8d:f0:04:9f:27:1e:
                    6e:a0:28:3c:7a:c5:fe:a0:ab:de:da:57:52:89:24:
                    03:d6:f3:32:6d:1e:0b:16:66:7c:2b:71:23:71:06:
                    51:8d:72:30:5a:05:32:44:9f:bd:d4:e4:51:5e:c5:
                    38:a4:a7:1e:e7:61:97:b6:ad:fc:24:cf:c8:4b:2d:
                    fe:93:f5:f6:6b:a3:33:3c:cf:fa:29:61:3b:09:2f:
                    f7:d5:ef:7e:d4:f9:4f:75:45:a9:4b:5b:d6:0f:42:
                    c4:62:08:c5:ca:10:f9:bf:d8:ed:44:73:a7:b1:7c:
                    05:a8:91:74:fa:7f:3f:e5:1c:8a:35:81:62:ad:f6:
                    6a:90:c9:1f:12:6d:ad:a7:ba:6e:2d:50:c3:41:d0:
                    a8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C7:12:0C:E6:FB:3E:2F:6D:3D:7E:C4:B6:68:4B:CA:9B:BA:C2:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/f57ff3b7-ed91-3c21-a948-06eea118c8d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:120::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:01:dd:10:d8:d2:9f:66:05:a6:3a:cc:c2:ef:f8:1f:6c:aa:
         1e:ce:88:f3:5e:b4:3b:91:78:b4:95:69:29:58:7a:de:0f:55:
         6b:39:7e:0f:37:0c:99:ca:e7:8c:32:df:dd:d6:55:22:2d:ae:
         a1:9d:75:c9:c0:1b:e8:8b:dd:70:21:34:f9:ad:5e:10:c8:a2:
         93:7e:5d:5c:f9:c4:2f:74:99:92:98:db:24:dd:11:63:20:9b:
         c3:48:9d:07:fb:b8:fd:91:76:d5:1c:65:c6:28:19:12:78:c8:
         d1:5a:cd:3d:82:2c:23:5b:88:6c:76:b3:b7:50:fa:d2:bf:32:
         13:15:20:30:a2:65:31:e7:57:21:31:3d:79:4d:c0:02:4b:35:
         76:68:55:00:f0:32:4d:09:aa:03:2d:5b:99:b7:9b:67:20:2c:
         9a:a3:c4:72:60:dd:6f:59:50:47:d8:24:af:c0:e2:64:9f:92:
         ea:e7:42:7f:74:1b:b0:ae:e2:0a:82:ee:db:37:61:81:48:f4:
         84:7d:8c:20:c0:fd:e3:80:05:c2:5c:1c:79:59:37:e4:76:02:
         1c:3b:56:9b:66:3c:63:fe:b0:8c:bb:f8:e9:1b:fe:89:3a:d0:
         de:61:01:4b:51:d6:08:a0:e6:38:16:61:c1:4f:58:c1:51:b8:
         2b:7d:a0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:01:57 2025 by rpki-client