Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/31c5535a-d910-38d7-af0b-7c40d7a9ad49.roa
File:                     31c5535a-d910-38d7-af0b-7c40d7a9ad49.roa (raw, json)
Hash identifier:          f/SaFvVKP+TXgZEksGF3sBKNnSOkp/goEqfjo2rlN1g=
Subject key identifier:   4D:4E:AB:5B:75:11:FD:FE:29:3E:40:CD:30:4C:AF:9C:EE:AB:24:7F
Certificate issuer:       /CN=03cb17c9-7597-4c95-a127-009654391416
Certificate serial:       010D0C9F4328584B56EDBA40958F418CE5A1FC00
Authority key identifier: 2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/31c5535a-d910-38d7-af0b-7c40d7a9ad49.roa
Signing time:             Sun 28 Sep 2025 01:46:13 +0000
ROA not before:           Sun 28 Sep 2025 01:46:13 +0000
ROA not after:            Sat 27 Dec 2025 02:46:13 +0000
asID:                     40776
IP address blocks:        2602:f8ab:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:ed:ba:40:95:8f:41:8c:e5:a1:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03cb17c9-7597-4c95-a127-009654391416
        Validity
            Not Before: Sep 28 01:46:13 2025 GMT
            Not After : Dec 27 02:46:13 2025 GMT
        Subject: CN=0cf46902-bb09-4416-a5c3-3027f411f6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3c:a4:c5:13:a8:6d:e3:b6:bb:97:d1:3a:ac:
                    dd:b0:ad:06:8e:4b:c3:bb:f9:13:fa:0c:0a:b3:dd:
                    23:a8:0a:95:e9:5e:7f:6d:8b:21:88:a5:03:1b:04:
                    a7:32:d9:b0:5d:0b:b5:ca:7a:66:5a:05:c6:6e:2c:
                    c9:0b:98:9b:29:63:df:e9:e2:ca:c4:14:da:b9:9d:
                    7b:10:84:56:bb:1c:a3:ff:ae:51:79:0f:ae:ee:2a:
                    3b:dc:42:55:f5:fe:dd:2a:65:ca:8e:21:55:51:7f:
                    40:9b:f2:d8:6b:23:35:91:4e:fe:9d:a2:32:48:18:
                    aa:a8:0b:14:8e:b8:2e:01:0c:8c:7b:67:0b:ed:12:
                    a1:5f:07:fa:85:ef:0d:08:a5:ce:89:bf:12:07:16:
                    e7:23:af:77:1e:64:10:59:1f:fc:48:01:a5:41:75:
                    02:63:d5:fe:70:92:da:88:c1:ac:09:ef:b8:8d:85:
                    1c:66:bf:44:35:26:9a:67:1c:e2:45:7a:08:e3:cc:
                    b4:6f:35:99:fd:53:72:76:54:5c:6d:e8:c1:18:7c:
                    56:44:1c:df:b9:b6:d8:58:89:9f:87:31:64:66:ef:
                    24:c9:dc:f8:bc:11:14:fc:94:c1:66:d9:ae:50:f4:
                    bb:ba:1f:b4:c7:0b:d3:23:70:18:cf:b5:36:2a:13:
                    39:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4E:AB:5B:75:11:FD:FE:29:3E:40:CD:30:4C:AF:9C:EE:AB:24:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/31c5535a-d910-38d7-af0b-7c40d7a9ad49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.crl

            X509v3 Authority Key Identifier:
                keyid:2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ab:8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:88:12:5d:38:1b:84:ec:64:cb:4c:01:41:1b:9e:ff:a0:7e:
         8d:aa:3a:37:98:24:fe:f5:d2:79:84:1b:e5:55:ee:36:15:84:
         b0:38:c3:ed:b8:98:a1:3d:b3:fa:84:0e:ec:df:a5:e0:98:19:
         bf:e3:e5:51:56:72:7b:49:c9:99:52:fb:b7:f0:39:f5:3d:30:
         a0:0b:db:6f:fb:57:21:c8:fd:0e:b3:f4:35:0d:bb:b4:ba:99:
         ab:3f:12:3e:a8:12:a0:77:a5:c2:43:92:e0:b0:ed:c1:4f:8c:
         d7:d3:01:99:66:47:8c:55:3c:74:19:8d:7e:01:c9:f8:b3:05:
         33:fd:75:90:ec:5b:8d:0e:09:20:ea:8d:7d:52:60:64:29:94:
         5d:16:57:06:e3:6b:8d:c3:5b:94:a6:a4:c0:e9:ca:49:99:08:
         27:c8:5a:1e:fc:ca:31:72:cc:dd:12:4f:8b:c2:5d:81:5b:f9:
         ac:58:18:ab:3a:78:17:a5:a9:2b:60:5b:f1:b1:47:64:8c:23:
         39:2b:4a:75:ca:ec:d1:2a:5b:58:7d:f4:e4:f3:52:e6:2d:b0:
         50:ab:d1:10:8a:e1:ba:2d:cf:53:c7:05:64:7f:b6:ef:1f:41:
         20:06:04:08:c1:67:67:b8:97:de:3a:73:2f:9f:07:a8:b6:5f:
         c4:ba:b1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:00:37 2025 by rpki-client