Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/b3acb821-2c67-31af-a81d-96ce285db895.roa
File:                     b3acb821-2c67-31af-a81d-96ce285db895.roa (raw, json)
Hash identifier:          Bl2LTdUqEK+9ubNghZtIfxL1A1Gf1m3byOF2q9B34a8=
Subject key identifier:   9A:A3:4E:61:FD:75:BF:38:24:0F:3D:09:8A:80:58:4A:D4:2A:EF:3F
Certificate issuer:       /CN=579fe1a7-1d04-4f71-b411-613b966124fb
Certificate serial:       010D0C9F4328584B6631FD691FAEB5BA362E47A8
Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/b3acb821-2c67-31af-a81d-96ce285db895.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     212854
IP address blocks:        2602:fa92:300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:fd:69:1f:ae:b5:ba:36:2e:47:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=3b138318-50c7-4c27-b00b-7bfe387f8150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3b:71:3c:05:8f:4d:54:28:40:13:52:69:b5:
                    d0:98:db:26:52:1e:e9:bd:9b:f9:bc:df:75:ad:86:
                    44:81:c0:d3:77:0e:9d:d1:75:b7:2b:96:46:c3:28:
                    50:bb:43:de:d5:69:17:ed:e6:8c:bb:92:ed:ee:ca:
                    e3:c0:2c:c4:1e:c4:5d:3c:b8:2e:a8:80:f6:6e:37:
                    c8:a0:46:68:7b:e4:5a:cf:0a:62:5b:c5:70:e6:56:
                    ad:fc:64:dc:d6:04:4b:ed:bf:f5:1f:d0:69:be:49:
                    dd:b3:36:75:3c:8c:18:e2:24:c4:70:5f:d9:61:8b:
                    80:01:de:97:ed:23:80:6e:f7:95:fb:12:35:38:a7:
                    55:3e:70:c1:5e:07:f4:52:9a:50:b4:56:14:47:fa:
                    a7:31:d2:4f:4d:33:7f:cd:aa:e9:5f:8a:6b:f7:4e:
                    f0:2d:cf:74:bf:b5:36:c5:b4:71:95:1e:0d:72:de:
                    0c:9e:42:8a:2f:58:a3:76:e5:22:e9:a2:f1:ac:86:
                    b3:9c:60:3a:1c:41:64:45:fc:2e:f6:50:66:ad:ce:
                    f3:72:6c:22:94:85:08:27:18:75:83:81:f8:46:39:
                    a6:d6:66:b7:95:0c:b0:4a:db:75:eb:29:68:09:88:
                    29:dd:44:c4:4f:75:9a:e5:81:aa:9b:52:f8:b1:55:
                    e3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A3:4E:61:FD:75:BF:38:24:0F:3D:09:8A:80:58:4A:D4:2A:EF:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/b3acb821-2c67-31af-a81d-96ce285db895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl

            X509v3 Authority Key Identifier:
                keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa92:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:02:2c:81:6b:db:97:8a:b9:48:79:ba:11:43:d2:d3:a1:bb:
         64:9d:ed:5f:82:ec:9d:97:ca:ce:c5:75:88:4a:09:10:a8:d7:
         eb:71:eb:7d:15:fb:5b:85:47:6a:aa:27:6e:67:11:c6:3f:4c:
         5c:f0:8e:1c:8d:fc:2a:6d:9a:66:e6:93:20:fa:dd:3e:8b:9c:
         6d:12:35:e6:9c:01:da:da:c2:4f:8e:09:d2:5a:b7:82:06:44:
         1e:13:12:eb:1b:fe:c8:ad:f6:39:d4:15:a4:b5:de:f6:04:9e:
         33:dc:ef:d6:2a:0f:22:09:0a:14:c3:9d:91:7d:d3:a0:72:ca:
         3c:2d:3b:ee:48:23:f4:97:6a:dd:55:e0:f2:f0:9d:11:62:65:
         34:35:df:3a:f1:ff:07:0d:79:ba:23:62:d7:7c:7f:73:bd:c6:
         bb:b8:5d:91:df:1e:bc:54:93:5a:4b:85:ef:a6:7e:99:c5:03:
         44:da:ad:b1:47:7b:38:ec:d7:a3:13:e7:d9:f6:d7:35:ae:8e:
         23:a2:0a:4e:1a:d7:e0:a3:7d:6c:53:cb:6c:9a:77:66:c3:b5:
         24:68:84:33:a5:87:ac:5e:d5:6a:d6:f0:e7:8b:9e:48:02:4e:
         09:a4:ae:05:43:31:c8:c3:0d:8c:2a:d1:20:9a:e0:8f:68:e6:
         ef:d7:2b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:10 2025 by rpki-client