Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b/9f4d9bcc-1e91-3cc0-977c-7f77b1874b09.roa
File:                     9f4d9bcc-1e91-3cc0-977c-7f77b1874b09.roa (raw, json)
Hash identifier:          BglgosV065ywiX8LF+wVcN88ztID5PVX2UllEhJetpI=
Subject key identifier:   2A:87:72:3D:5F:CF:31:7E:92:9C:90:87:CD:9B:17:DF:8E:B9:B5:9B
Certificate issuer:       /CN=2dd62bbc-ac6b-44a9-9097-0de386a3ef8b
Certificate serial:       010D0C9F4328584B0B769EE03BB09F6289365E40
Authority key identifier: 2A:90:BB:00:F0:A9:B6:C5:A8:E4:97:F5:1F:6F:C5:6E:67:47:98:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b/9f4d9bcc-1e91-3cc0-977c-7f77b1874b09.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     1050
IP address blocks:        2602:fb3f::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:9e:e0:3b:b0:9f:62:89:36:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd62bbc-ac6b-44a9-9097-0de386a3ef8b
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=2ea243d8-30a9-4ac7-83d8-758499672981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ab:e1:4b:ed:3b:9c:df:dc:09:a8:16:2b:c3:
                    a5:6d:57:ba:9e:16:4d:84:d8:93:24:b3:34:75:f2:
                    46:5a:60:46:9e:1f:2e:d4:3b:66:b3:4a:8e:99:08:
                    31:e9:fa:12:bb:a0:f7:50:3e:44:41:05:36:be:97:
                    65:0c:fe:b8:b3:23:62:5a:69:fe:5e:85:32:d1:94:
                    d0:88:b3:ab:55:18:ea:dc:c4:7a:21:6a:eb:ae:19:
                    d9:78:c0:3f:34:ed:88:94:4e:1c:93:43:39:28:06:
                    73:bd:ac:4a:49:45:47:ac:8d:ef:5d:65:46:2a:a6:
                    bf:0c:fc:c9:b1:93:a2:1c:9a:d2:93:02:73:89:db:
                    30:28:1b:19:32:2c:0a:02:a4:6e:33:55:4d:1b:b6:
                    0b:9f:58:1f:e1:de:3b:16:6d:32:60:83:73:9d:84:
                    71:cc:d6:5c:9f:de:ac:40:fc:51:6c:21:94:24:3e:
                    24:0d:67:2d:0c:52:d1:ab:37:38:dd:d3:b7:d3:56:
                    6e:6c:21:10:82:2c:83:ab:a3:2e:90:4c:77:db:5b:
                    da:d7:71:39:8a:91:a8:c8:5c:dc:16:cd:8b:03:da:
                    9a:3a:0a:f5:4e:61:ac:13:4e:bc:8b:64:42:52:e1:
                    da:2c:08:c6:31:0f:7f:f3:56:35:34:ef:70:db:f2:
                    51:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:87:72:3D:5F:CF:31:7E:92:9C:90:87:CD:9B:17:DF:8E:B9:B5:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b/9f4d9bcc-1e91-3cc0-977c-7f77b1874b09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b.crl

            X509v3 Authority Key Identifier:
                keyid:2A:90:BB:00:F0:A9:B6:C5:A8:E4:97:F5:1F:6F:C5:6E:67:47:98:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2dd62bbc-ac6b-44a9-9097-0de386a3ef8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb3f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:70:b7:52:eb:b4:fd:12:a0:98:ad:6e:94:39:87:e5:1c:54:
         f1:cb:56:da:bc:a3:54:ff:48:60:99:f8:0c:b1:bb:26:cb:df:
         a4:1e:5e:26:b8:e0:ab:9d:a8:9d:51:44:ba:58:21:a1:1a:8a:
         cd:35:14:da:12:df:60:f4:3d:a5:ea:1f:93:49:a4:51:87:e1:
         c3:ee:c4:0c:b0:21:d1:ff:fe:93:a7:a8:95:9d:86:c7:35:87:
         17:06:ba:df:9a:97:7a:f5:ef:1e:74:68:29:ec:ff:99:90:b6:
         d8:59:42:db:7f:76:86:0d:8a:20:d9:d8:c1:de:64:39:d5:ca:
         0d:5b:02:b3:9a:0a:64:49:42:5c:5b:57:96:16:e8:11:aa:bf:
         12:2d:93:66:74:93:a7:62:19:c8:21:19:81:2d:bd:57:c1:f4:
         67:7b:95:f1:82:18:fa:55:4d:bb:7a:26:9f:cc:5e:2a:aa:ae:
         8b:76:8b:60:18:68:c4:64:f2:7b:67:3b:54:a1:9d:29:e0:92:
         ea:9d:61:21:a2:b6:6b:3c:51:6b:49:7b:58:8f:7f:58:7a:74:
         48:a4:6d:64:ad:a7:52:c7:ca:88:57:a3:4d:0e:02:fe:e4:07:
         44:13:13:dd:d8:8f:46:a2:09:bc:3d:a3:20:08:0f:b1:36:95:
         92:09:0f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:42:21 2025 by rpki-client