Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/cfb364cd-df84-3bd4-942c-077ee7ca99a9.roa
File:                     cfb364cd-df84-3bd4-942c-077ee7ca99a9.roa (raw, json)
Hash identifier:          o+plwAr3/swrCg4K7eXo/5/ACH+RcbiF9zo/eDtwZiM=
Subject key identifier:   56:AE:BF:13:49:8C:DC:49:E5:1E:53:6B:BD:50:E3:B0:05:24:78:04
Certificate issuer:       /CN=553f7a6d-a8af-4a8d-94c5-858b0b23ab9a
Certificate serial:       010D0C9F4328584B62020F2526B7BA2E97361320
Authority key identifier: 2E:15:F5:D4:69:C6:E2:78:C0:E1:5D:15:43:02:AF:9C:83:71:BA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/cfb364cd-df84-3bd4-942c-077ee7ca99a9.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     8796
IP address blocks:        2602:f7c2::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:0f:25:26:b7:ba:2e:97:36:13:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553f7a6d-a8af-4a8d-94c5-858b0b23ab9a
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=dbd110ea-7ce8-44c3-83d9-f7cbd00d647c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c3:d8:8e:91:05:fa:46:6e:9b:3a:b2:38:a9:
                    5d:98:31:48:88:f0:16:1b:f8:87:67:84:67:21:32:
                    89:2f:21:80:b5:81:e9:37:73:c8:83:94:8a:cf:1d:
                    c9:f6:7a:84:7a:ea:1b:39:ef:4f:5f:2b:c2:7d:22:
                    8b:48:4a:07:ad:6e:66:33:b0:24:5e:f2:38:1c:d1:
                    5c:2e:7b:b7:8c:d6:d6:f4:d1:66:1c:4b:43:93:c8:
                    28:f1:23:ba:81:ed:f3:3e:7b:48:0d:a8:68:ec:1f:
                    8a:2d:b5:30:8c:ac:63:9d:65:80:7b:a8:3a:a8:02:
                    72:d3:0c:44:aa:0a:98:8a:77:54:3a:78:87:f5:a0:
                    a1:cc:dd:86:76:a4:9b:c4:2b:49:29:85:46:90:36:
                    ac:5c:12:dd:04:ef:0c:2d:5c:27:1d:33:a3:3b:e4:
                    95:34:6b:93:f5:ac:ec:fc:7e:98:bf:af:0d:b9:6f:
                    6c:90:cd:86:a2:3b:59:c4:12:45:85:56:d0:91:8a:
                    86:ed:b4:0c:c7:3d:e7:c0:90:8c:15:e8:e6:12:fc:
                    98:32:b3:cc:24:bf:b1:08:19:d6:3c:fc:b5:89:b3:
                    fd:3b:c7:f8:44:1c:80:1f:1d:ef:c9:50:94:73:18:
                    92:dd:71:64:db:ca:fa:41:37:3f:cc:d7:44:b6:12:
                    a7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AE:BF:13:49:8C:DC:49:E5:1E:53:6B:BD:50:E3:B0:05:24:78:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/cfb364cd-df84-3bd4-942c-077ee7ca99a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:15:F5:D4:69:C6:E2:78:C0:E1:5D:15:43:02:AF:9C:83:71:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7c2::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:5a:61:05:67:6e:33:1c:72:27:36:08:06:d9:ee:f1:91:ed:
         6d:81:23:0f:5b:b9:3f:09:56:15:fe:e4:4f:83:ff:6e:e8:0f:
         de:25:ba:50:93:be:6e:44:d6:84:3f:eb:d0:0a:7d:d7:45:6b:
         84:4b:8b:2b:5b:96:2f:4c:c2:7b:52:43:c2:99:7c:67:bd:f1:
         0d:c7:15:31:5b:7f:b6:21:0e:b5:2d:33:ef:d4:05:6a:84:36:
         01:00:02:16:71:0a:db:62:6f:c4:6d:16:b0:29:6f:80:02:73:
         d8:24:cb:03:17:c9:1f:47:eb:30:dd:51:c4:86:7c:e8:37:a3:
         ac:0b:80:45:d1:37:46:16:56:b2:9b:69:0e:21:1e:c6:89:6e:
         58:62:bb:10:42:d0:f9:3c:b8:4a:eb:9c:ad:32:a2:5e:dc:20:
         64:47:50:8b:9f:ed:1a:f9:b5:43:f8:99:9f:2e:35:9b:ba:16:
         ed:ee:fc:58:c3:4b:64:00:7c:42:6a:a8:a9:a5:f5:51:6d:b0:
         02:55:67:69:3b:04:43:e1:ad:bc:b9:f9:20:2f:b0:57:4b:09:
         ed:d9:28:e7:fb:21:d2:b5:4d:a2:73:5b:6c:41:a1:ca:e9:f6:
         b1:87:22:c3:66:e0:84:ed:6d:9b:a6:73:52:f4:04:be:06:91:
         c3:a0:8b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:50:22 2025 by rpki-client