Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/929189e4-d56d-3da5-aef3-aa0bc817eb7f.roa
File:                     929189e4-d56d-3da5-aef3-aa0bc817eb7f.roa (raw, json)
Hash identifier:          hAwacTvoodRHNLX4TnOdSlpTfrVk1C/asNn6ylbY3Qc=
Subject key identifier:   7C:E3:B3:19:EB:93:5D:ED:1F:2D:14:36:0E:54:7B:D0:69:B3:96:F4
Certificate issuer:       /CN=2bf72053-6e89-4e8b-8a04-02150ff7c010
Certificate serial:       010D0C9F4328584B3DBA2BFEE05613B58B8B9A20
Authority key identifier: C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/929189e4-d56d-3da5-aef3-aa0bc817eb7f.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     398338
IP address blocks:        2602:f605:110::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:2b:fe:e0:56:13:b5:8b:8b:9a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf72053-6e89-4e8b-8a04-02150ff7c010
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=d843d39f-2378-4fca-b24b-8d2ff3ae7122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9e:42:b3:cb:54:3d:25:b8:21:0f:e2:ed:5b:
                    6c:93:90:7a:50:72:e1:63:40:50:0c:94:40:fe:49:
                    bf:9b:93:52:6a:d2:41:05:19:42:c5:cf:d1:26:b1:
                    b4:7f:f4:cd:84:b5:d4:21:d0:93:5f:72:cf:26:f4:
                    aa:37:3c:d8:db:d1:8d:27:a5:9b:b7:ef:a9:72:14:
                    be:52:a3:a1:6c:54:17:c7:58:9e:ab:f6:19:91:02:
                    2d:cf:04:32:5d:a9:2e:01:80:d0:c0:23:dd:95:e4:
                    78:b5:30:80:8a:46:89:43:52:72:ad:d3:53:75:5d:
                    60:81:83:60:6a:b4:c3:43:e9:ab:57:d0:65:89:74:
                    8e:5c:5d:8f:7c:61:90:73:a5:53:9f:06:0b:d8:ae:
                    9d:a6:27:30:e9:25:4b:a0:90:4f:4e:83:6a:57:5c:
                    ef:88:ff:61:9a:94:84:c3:5d:8d:70:8a:51:81:3e:
                    f3:08:e0:43:88:52:41:bb:be:07:b0:e8:9b:62:b8:
                    4e:c1:3b:17:d6:34:78:56:3a:06:a9:b3:bf:96:1f:
                    3b:9a:4d:4b:c0:5c:46:77:45:da:eb:58:82:df:28:
                    69:fa:09:43:28:31:c6:d2:32:17:72:d9:fc:04:e2:
                    28:08:9a:75:1b:43:2d:9b:79:d2:fd:76:19:5f:9e:
                    96:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E3:B3:19:EB:93:5D:ED:1F:2D:14:36:0E:54:7B:D0:69:B3:96:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/929189e4-d56d-3da5-aef3-aa0bc817eb7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.crl

            X509v3 Authority Key Identifier:
                keyid:C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f605:110::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:b7:53:2b:c9:7f:d6:00:c5:66:2a:4b:a7:07:e8:ce:29:4c:
         69:05:a8:a1:25:2c:d7:f8:63:1f:1b:60:34:3e:08:3d:a3:aa:
         5c:6a:18:43:7a:9b:19:a4:b3:da:cd:0f:a8:5b:b0:91:15:fe:
         f9:79:53:7a:bf:ff:dd:aa:e3:4a:84:f4:e0:7e:b8:d3:68:6f:
         23:60:c8:b5:67:07:c5:35:43:b9:68:e6:b5:7c:27:f1:cf:55:
         1f:f3:0f:72:24:1a:4c:46:07:da:94:1a:0d:27:30:c9:e9:10:
         7c:c0:4a:db:3d:6b:a4:39:12:a1:ff:18:29:fa:fc:43:d0:98:
         17:10:86:54:7d:4b:34:f0:b4:5d:4f:e0:67:3a:96:18:cd:54:
         6d:b1:7b:51:74:4b:53:f5:fe:cf:7b:d3:c6:7f:82:32:a0:dc:
         43:d8:f6:44:37:dd:22:20:60:8f:92:12:4e:e5:27:f4:49:5a:
         5f:ba:db:69:9a:04:c3:73:93:f3:86:6e:b6:97:d9:fc:99:45:
         4d:13:4d:76:c1:96:56:7f:21:8d:31:bc:f5:18:e2:8f:14:64:
         22:18:19:b7:0f:a2:38:9f:d4:94:2d:21:cb:c3:9f:95:f5:fb:
         f8:ec:94:b6:7d:17:1a:fb:53:ba:ca:83:44:36:d2:ea:2a:1e:
         96:cb:4a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:05:48 2025 by rpki-client