Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9/2143b254-1133-32fc-8bf2-b3344b960d76.roa
File:                     2143b254-1133-32fc-8bf2-b3344b960d76.roa (raw, json)
Hash identifier:          8KNsp3x0S2OqXbJ9lrSjPup/z/jb0Y6pFCt4P01vNGY=
Subject key identifier:   08:0E:57:85:57:D5:2B:E8:C0:AC:FE:34:EB:B3:26:55:D8:B7:72:D9
Certificate issuer:       /CN=203e5d2d-6782-4312-b292-20591c5140f9
Certificate serial:       010D0C9F4328584B3DBA28EF94A781336B5BC200
Authority key identifier: 05:1D:C5:7E:AF:CC:A1:41:7C:10:52:33:86:4A:47:E0:33:D3:2C:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9/2143b254-1133-32fc-8bf2-b3344b960d76.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     401780
IP address blocks:        2602:f9a3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9/203e5d2d-6782-4312-b292-20591c5140f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9/203e5d2d-6782-4312-b292-20591c5140f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:28:ef:94:a7:81:33:6b:5b:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203e5d2d-6782-4312-b292-20591c5140f9
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=26d69309-f317-4878-9106-136e7ba72861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:fb:52:ca:57:93:14:82:bf:25:a6:4e:54:
                    3c:4f:b1:4e:4f:a4:69:34:a4:2f:8b:a4:08:c2:87:
                    1b:e9:25:ef:f0:c1:4b:24:67:07:dd:83:fa:db:2d:
                    58:f3:d0:23:fb:4a:1d:06:30:dc:85:81:6e:f5:8d:
                    ce:51:5d:da:a2:6c:2f:e2:58:e7:9d:41:15:f1:70:
                    98:01:a0:03:e7:0c:e3:65:ed:3a:b7:1b:df:9c:b7:
                    29:e2:10:8b:84:cc:98:66:fb:6a:67:61:81:18:13:
                    36:43:ba:b3:18:c0:02:3b:ce:a9:d4:f2:9c:f2:84:
                    40:cd:38:b0:41:01:b7:e2:9c:e1:59:84:25:ac:7b:
                    1c:84:bb:c2:42:47:46:9a:d8:d8:51:19:fc:ae:03:
                    05:d4:b2:26:4a:f3:94:be:16:61:21:78:4c:5c:ec:
                    9f:46:0b:c0:9f:82:d4:0a:99:c6:e7:d2:ae:3b:a7:
                    cc:47:30:d7:49:c2:ff:42:95:8f:45:45:c7:b0:ef:
                    e5:c2:f3:84:02:47:07:6d:0a:bd:18:32:08:88:b8:
                    ea:33:00:9f:65:1a:29:8d:a0:84:e4:00:e5:01:48:
                    aa:73:1a:8a:7c:b6:54:ec:62:a0:ed:4f:f2:8b:11:
                    e4:12:cd:e8:41:4f:a5:e3:be:c8:01:62:b4:b8:e2:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0E:57:85:57:D5:2B:E8:C0:AC:FE:34:EB:B3:26:55:D8:B7:72:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9/2143b254-1133-32fc-8bf2-b3344b960d76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9/203e5d2d-6782-4312-b292-20591c5140f9.crl

            X509v3 Authority Key Identifier:
                keyid:05:1D:C5:7E:AF:CC:A1:41:7C:10:52:33:86:4A:47:E0:33:D3:2C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:68:30:07:ca:07:3c:25:82:27:8c:b8:85:2c:19:ce:2e:c9:
         d0:23:3a:f3:43:b5:16:4b:d4:d0:aa:ed:2d:70:b7:12:a1:c4:
         50:f5:c5:03:ec:b4:f9:d9:f8:78:5f:86:d5:9e:03:26:cf:5e:
         25:13:e0:67:21:54:d9:86:ba:d1:9f:3b:ca:55:68:17:c9:31:
         cd:2d:cd:49:ac:87:71:16:0e:31:ce:68:b5:39:38:22:bd:09:
         df:ea:83:d8:84:f0:92:96:62:44:c5:04:35:41:24:4f:a1:e4:
         f9:aa:1c:12:40:ed:47:1f:25:5a:fb:c1:2e:83:6a:ca:2e:c4:
         bf:68:e4:e1:d8:8f:1c:f9:fa:17:d7:bf:93:cc:1b:74:12:e8:
         5f:aa:ec:45:a9:7c:d8:58:8a:4e:a7:ef:ab:02:50:64:d1:76:
         d5:72:a4:b5:99:bc:b4:e1:a5:a6:08:28:1b:2a:14:05:93:1a:
         db:cd:69:90:a2:3b:1c:04:bf:f0:03:34:45:1e:53:20:be:55:
         93:a2:75:dc:7d:77:c6:ce:ef:27:b1:f2:2a:53:9c:b8:fe:b5:
         82:fc:d8:4c:08:76:f1:d4:5e:bd:90:c7:26:8e:92:cb:bf:23:
         a6:80:e1:d2:ea:19:16:de:da:2a:42:89:06:22:82:27:ff:c9:
         91:a1:3e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:50:20 2025 by rpki-client