Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/30ceb0d6-909a-396b-9517-48e7b2b06a13.roa
File:                     30ceb0d6-909a-396b-9517-48e7b2b06a13.roa (raw, json)
Hash identifier:          01KzPIstCFOrrWopP3VXxkbvW1Et4lxO8w2v25nA+Sk=
Subject key identifier:   FC:01:CA:1B:15:57:00:F2:72:CC:E3:A0:17:44:90:5F:10:27:12:33
Certificate issuer:       /CN=dd3e6032-a6af-4662-8b07-848eeecc3995
Certificate serial:       010D0C9F4328584B583C8FF427513EAE715A4A00
Authority key identifier: 67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/30ceb0d6-909a-396b-9517-48e7b2b06a13.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     965
IP address blocks:        2602:faa9::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:8f:f4:27:51:3e:ae:71:5a:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd3e6032-a6af-4662-8b07-848eeecc3995
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=f2794719-45e0-4219-9d31-b105b100ed85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:0e:bb:f3:0b:36:13:30:87:1f:0b:07:a3:
                    61:58:c0:d2:99:df:ed:6e:17:9a:8e:6d:48:ac:34:
                    d0:b6:2c:cb:3c:b5:11:6e:27:e6:4e:74:df:b0:78:
                    39:a9:f9:e3:09:20:52:f5:2b:ea:22:31:5a:ef:ad:
                    cd:c8:19:4c:64:f1:d4:1e:7e:ef:4e:4e:e4:d2:5b:
                    cc:65:62:9a:d8:cf:e0:50:d9:39:f8:63:bd:38:33:
                    cf:6a:1c:34:55:8f:bd:f5:83:93:29:c6:9c:d7:1c:
                    e1:1d:99:80:71:6c:2a:1f:83:65:51:4d:d5:54:de:
                    68:f6:e8:39:d8:b0:de:0e:b3:e3:b6:bd:cb:67:60:
                    cd:1c:63:cd:9f:a5:42:b9:2e:90:fd:8c:6c:48:d0:
                    8b:ad:07:da:64:3c:3d:d1:ba:15:de:80:8a:b6:de:
                    d7:8e:3e:ca:9c:98:49:d9:c8:a6:da:8e:24:01:58:
                    91:85:f5:df:a3:5c:08:c1:5e:52:a2:33:f3:9b:85:
                    68:e9:ab:94:7a:a7:93:c8:29:d8:59:a0:b8:d9:3c:
                    db:a1:0e:c7:ed:46:79:de:60:4a:a5:2f:06:7d:0a:
                    d6:c8:4a:7a:0b:ba:2a:54:fe:6a:56:b5:a1:71:83:
                    0a:8e:1c:9a:19:46:a6:56:23:5c:dc:da:b2:0f:10:
                    fc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:01:CA:1B:15:57:00:F2:72:CC:E3:A0:17:44:90:5F:10:27:12:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/30ceb0d6-909a-396b-9517-48e7b2b06a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl

            X509v3 Authority Key Identifier:
                keyid:67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa9::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a3:40:d0:a9:fa:b3:cc:9b:96:bb:fe:6e:a3:96:f1:f7:b8:
         ff:07:bd:70:95:1e:4d:87:99:29:54:c5:25:c1:28:22:b5:24:
         45:27:0c:ec:09:1b:9a:b4:ae:1f:00:ea:a7:1b:aa:5d:a4:d9:
         d6:c1:39:3d:a0:14:f8:1c:5a:dc:89:5b:07:ff:8c:5f:d3:49:
         d9:96:40:79:35:42:e5:76:df:9b:89:89:67:39:0a:f9:11:b8:
         b5:df:24:47:1b:1e:48:89:bc:8e:8d:e2:1e:2e:01:90:6c:95:
         e0:c3:ea:4f:fa:f3:40:7c:33:db:ba:29:39:86:e5:78:34:a2:
         91:e8:08:9b:c5:32:4e:7a:14:bd:53:60:23:5a:d2:9b:85:9d:
         4c:70:da:ff:e1:77:75:fc:94:f9:93:d4:97:f4:56:44:76:cc:
         fb:ed:c0:eb:f9:38:de:9f:43:bc:11:fe:bd:4a:6c:e2:4f:41:
         fa:ca:49:64:1f:e7:18:1c:78:5f:e1:ff:21:72:2f:0f:ce:c8:
         70:f1:c8:b8:3e:ce:83:35:85:a2:f8:4d:50:f0:b5:ec:46:fa:
         eb:71:c0:20:3c:91:6b:68:16:04:5f:df:76:09:be:05:cd:34:
         ea:d2:63:b4:f8:9b:5a:1c:5a:60:2a:d3:09:53:a2:b4:32:85:
         72:65:50:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:37 2025 by rpki-client