Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa
File:                     30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa (raw, json)
Hash identifier:          jfyNg6qaQQlgzhX/wm1aNqT0ZuJikN/d4+K7PTfv6Ag=
Subject key identifier:   A3:22:AF:AF:0E:8B:06:74:04:B4:F6:C5:CD:60:B1:EA:9B:A8:2D:79
Certificate issuer:       /CN=643914aa-5306-4352-8a01-3ac381827191
Certificate serial:       010D0C9F4328584B5DD1E299FEF20EFC85557340
Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     400442
IP address blocks:        2602:fbc7:1::/48 maxlen: 48
                          2602:fbc7:2::/48 maxlen: 48
                          2602:fbc7:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:e2:99:fe:f2:0e:fc:85:55:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643914aa-5306-4352-8a01-3ac381827191
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=77c7a94e-da80-4ad2-a16b-1c8fa9683992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4a:01:e6:53:9f:9d:d9:9a:d6:5b:88:41:fb:
                    3b:9f:f7:22:b5:0f:9a:fd:b7:ec:62:35:24:e9:8a:
                    cc:ee:41:5f:48:4f:46:f2:3d:78:1c:95:fa:03:56:
                    bf:34:a6:8e:c1:9d:78:88:0c:7f:ca:af:b8:91:fa:
                    16:27:5d:59:de:d4:59:39:3c:75:b1:d2:58:f0:a9:
                    f1:35:98:52:1d:fd:b1:65:d8:86:15:e6:56:43:1f:
                    9d:66:eb:04:8b:f3:ae:56:b0:ca:06:03:b9:3d:7c:
                    c5:f4:f6:b3:85:25:9c:48:dd:eb:d9:32:b6:13:be:
                    17:3f:a0:af:3b:8b:55:15:a1:83:78:f7:7d:bb:0d:
                    0f:7f:80:ab:22:8c:77:f1:c8:c4:95:c5:7e:7f:3e:
                    dc:94:50:9c:01:e7:7f:d4:9a:e8:f9:59:32:9e:4a:
                    aa:41:bb:69:30:3b:69:c9:a1:ac:0c:aa:f3:7c:36:
                    c3:11:d9:98:09:1d:77:b2:ab:6a:0b:7e:93:f0:a7:
                    cf:c2:38:96:83:1f:70:64:f8:25:cb:ce:6a:82:cc:
                    4f:d3:3d:ea:51:6b:4c:27:d5:b0:4f:21:ff:e3:6d:
                    e3:e6:bd:ee:f6:4e:73:13:a0:c3:9e:c2:a8:60:f7:
                    87:81:77:77:0a:97:35:59:0a:ed:09:1b:9e:02:a3:
                    22:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:22:AF:AF:0E:8B:06:74:04:B4:F6:C5:CD:60:B1:EA:9B:A8:2D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/30b7c806-6a96-33a0-bafa-ab6449b34a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl

            X509v3 Authority Key Identifier:
                keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbc7:1::-2602:fbc7:3:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:d2:fa:b3:89:6c:64:05:47:e8:c0:81:9f:06:88:18:f2:41:
         d5:25:93:a1:8f:cb:f8:5e:42:6e:3b:09:93:cd:7b:5e:15:6e:
         e9:a3:83:ea:7d:40:ae:11:7a:5a:40:04:88:f1:e7:ec:28:ba:
         43:6e:d4:07:b4:3a:ec:8e:a1:05:49:e4:9a:9f:dc:8a:a5:44:
         18:a4:d9:f7:b7:ba:96:3d:67:3b:6f:92:37:66:02:28:a3:90:
         43:c2:5d:74:4a:14:59:bd:25:ab:d8:cc:6b:78:e1:ff:79:17:
         17:b1:5a:ec:4f:a8:91:8a:a0:67:41:59:82:df:9b:3c:18:27:
         25:80:e4:15:58:30:f9:25:42:d8:04:79:a1:bf:ab:0b:df:7b:
         8f:4b:be:41:d7:8e:6c:ec:54:bc:2a:05:a1:fe:a5:c0:16:1a:
         8b:16:91:06:a3:f6:01:f4:f7:00:f5:9a:cc:9d:d3:90:e8:a1:
         1e:ab:da:75:6c:4f:27:6b:b0:89:0d:b6:c9:27:4e:88:c6:a9:
         a2:54:38:8c:bd:91:c6:9d:b3:6c:d2:70:64:5c:d3:f5:b5:45:
         7b:0b:91:f1:f9:6f:28:1b:33:40:5a:d3:d0:0c:5f:ad:a1:a9:
         5b:bf:24:b9:ff:b1:7d:c1:70:d4:47:d7:64:6c:20:05:91:9f:
         38:9f:cb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:55:58 2025 by rpki-client