Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/b4d941c7-94be-35d4-9a43-4e671333d3fb.roa
File:                     b4d941c7-94be-35d4-9a43-4e671333d3fb.roa (raw, json)
Hash identifier:          7pLYZsqXsaC/CIRm/I/K2EKjsojE1zNWfoB00bMdluI=
Subject key identifier:   08:B2:2D:0D:BB:FA:66:D4:6B:F3:04:08:74:9C:EA:53:0A:EA:E4:9C
Certificate issuer:       /CN=2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2
Certificate serial:       010D0C9F4328584B13D6AC7793E5B21EA57CAD20
Authority key identifier: DB:4C:BE:6E:B3:E7:74:A6:66:DB:BF:8D:07:AD:66:A3:D3:67:D4:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/b4d941c7-94be-35d4-9a43-4e671333d3fb.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     213151
IP address blocks:        2602:fb2a::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:ac:77:93:e5:b2:1e:a5:7c:ad:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=4f6f797b-c350-418f-84f3-4e1ce4980917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f2:bd:5c:6b:b1:e2:c1:79:34:76:ad:0a:c0:
                    57:fd:52:7b:30:59:24:96:32:e1:bb:e0:72:21:95:
                    55:90:86:23:76:17:fc:35:a3:ce:98:b7:22:da:97:
                    e2:56:ab:71:4e:a3:b3:e1:eb:1d:31:02:b8:23:b9:
                    e6:72:f3:26:b3:bd:ad:22:76:3d:54:88:c4:1f:cd:
                    39:5b:8a:d8:09:c7:fa:79:ab:80:99:d2:9b:ef:41:
                    5b:95:c7:ea:29:ae:8e:35:a4:84:a0:86:4d:bc:d8:
                    a9:79:53:df:62:91:8a:54:90:1a:dd:b0:3e:e3:16:
                    43:b2:60:fd:42:34:8f:79:97:99:dc:a4:3b:98:b3:
                    a5:29:1c:1d:d3:e9:78:94:00:83:de:72:8e:9f:d3:
                    30:86:43:d7:f4:96:d6:ff:d5:72:69:e5:14:af:72:
                    f6:cd:03:27:51:14:1e:06:ad:96:3e:b3:33:17:e9:
                    75:c6:10:ee:85:1d:cf:28:fb:ac:fc:17:cc:00:53:
                    56:08:f7:a4:5b:44:4e:e6:d9:fd:4d:8e:85:79:85:
                    2c:93:ee:7a:b8:18:54:19:8a:c2:3c:b0:7c:59:b6:
                    11:92:ee:4c:e1:46:dd:3e:1b:4e:f8:c3:e2:25:72:
                    1b:db:18:3a:ff:7e:cd:dd:28:04:56:33:a4:3c:72:
                    b5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B2:2D:0D:BB:FA:66:D4:6B:F3:04:08:74:9C:EA:53:0A:EA:E4:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/b4d941c7-94be-35d4-9a43-4e671333d3fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.crl

            X509v3 Authority Key Identifier:
                keyid:DB:4C:BE:6E:B3:E7:74:A6:66:DB:BF:8D:07:AD:66:A3:D3:67:D4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb2a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c9:3a:b5:c3:c7:98:4f:47:f5:16:c9:0d:06:8e:01:eb:84:
         b2:28:26:91:59:e7:11:d7:02:90:ea:65:6c:80:c9:4f:c0:79:
         15:4d:3a:74:94:3a:dd:8c:9c:e2:f2:56:10:d1:36:fe:a4:d2:
         59:08:d3:49:75:d9:5b:e2:65:cf:82:5c:96:51:b4:1c:76:c0:
         83:b8:cb:9a:51:b9:fa:5f:0f:6c:3a:d9:01:b2:7e:0c:73:e7:
         21:fe:ce:cc:34:f0:54:53:cf:7b:7b:8c:82:f5:a6:8d:82:9e:
         43:c8:04:4b:be:8a:42:d6:18:04:76:e8:04:65:0f:2e:89:a7:
         36:0e:d1:1c:09:f9:c4:22:f9:bb:0d:f6:d3:cd:c7:a6:ee:93:
         b4:e0:9b:9d:56:9a:19:16:f1:da:5a:37:20:5e:fe:73:8e:da:
         2d:3c:a7:7a:49:19:57:73:23:08:25:f6:94:64:77:3c:3e:23:
         8d:8d:f1:0d:b2:71:ac:f5:1b:15:2f:1d:77:4d:ed:32:e1:cf:
         1a:db:72:1f:db:ca:73:be:63:6b:72:46:a7:f0:fa:b9:1b:6f:
         ca:14:e4:46:a1:0d:7c:2a:43:8b:0c:30:de:8c:13:9d:ed:d9:
         7b:cd:92:56:ed:dc:17:b6:51:0a:37:21:52:ce:00:c1:38:fd:
         f0:77:b9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:16:50 2025 by rpki-client