Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9a45d6c9-6c7c-35a5-a975-b8139ee87cc3.roa
File:                     9a45d6c9-6c7c-35a5-a975-b8139ee87cc3.roa (raw, json)
Hash identifier:          PbSuf7ZLP801sjeivkrtNMzn9jjcMm0gfOxd28HPKOM=
Subject key identifier:   C6:8D:34:23:13:F1:A5:A2:EF:D6:1E:76:D7:7D:47:B6:E2:EC:3A:FC
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584B4616FCBC5150ACA9D3A77B80
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9a45d6c9-6c7c-35a5-a975-b8139ee87cc3.roa
Signing time:             Mon 22 Sep 2025 01:00:33 +0000
ROA not before:           Mon 22 Sep 2025 01:00:33 +0000
ROA not after:            Sun 21 Dec 2025 02:00:33 +0000
asID:                     13778
IP address blocks:        2602:284::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:46:16:fc:bc:51:50:ac:a9:d3:a7:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Sep 22 01:00:33 2025 GMT
            Not After : Dec 21 02:00:33 2025 GMT
        Subject: CN=d84c188f-03c3-43a4-82f3-4972e59891b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e5:12:ab:05:4e:7d:85:5f:df:0d:d8:4b:72:
                    23:5f:36:63:2c:2e:a8:49:92:0b:66:c1:01:3c:15:
                    9d:94:41:5e:ff:af:7f:59:ec:56:a6:de:0a:8c:04:
                    9e:ad:56:bc:0d:50:90:4c:77:be:05:d6:ed:06:f4:
                    20:8f:ed:a2:9a:63:90:c6:a2:29:d5:5f:6d:0c:c1:
                    81:09:1f:21:e5:06:62:2d:58:91:9e:97:6f:4a:55:
                    4f:dd:d8:be:a3:2d:88:f3:9d:be:e3:74:08:e1:10:
                    cb:55:57:b4:af:26:53:1a:90:eb:52:f9:a6:a2:34:
                    f0:29:5e:50:e3:a2:40:1e:92:bc:8c:13:b3:aa:c3:
                    b8:ab:b3:52:57:59:a4:97:75:38:98:bb:a6:89:03:
                    90:fc:a8:ac:eb:b6:5e:be:56:7f:97:21:14:6b:e5:
                    ed:c7:bb:2d:ca:62:2f:1d:3c:fa:af:00:6a:e6:46:
                    c8:e3:36:92:bd:ec:08:5e:71:b5:69:ff:5e:a3:1e:
                    f4:3f:64:bc:d5:a8:46:f4:d0:fc:57:19:29:ef:30:
                    04:af:50:2e:fe:d4:9b:bc:a1:4b:b1:11:d9:cc:30:
                    b5:43:0f:d6:fe:51:c4:ac:9a:68:44:ec:3a:40:69:
                    7d:ef:51:42:d5:8d:13:18:2b:23:f9:27:e7:64:9a:
                    65:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8D:34:23:13:F1:A5:A2:EF:D6:1E:76:D7:7D:47:B6:E2:EC:3A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9a45d6c9-6c7c-35a5-a975-b8139ee87cc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:284::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:aa:70:fd:23:d1:bc:8a:bf:c1:d1:8e:0c:1c:48:75:23:2b:
         5c:c8:20:52:58:3b:09:2c:25:ad:c8:ce:18:11:04:d8:2e:55:
         c3:4c:eb:e9:7b:c7:ed:53:4b:ce:96:d8:d4:ca:92:4c:15:0a:
         49:56:2d:f8:58:c5:e0:62:a7:75:fc:26:72:02:68:df:ce:da:
         af:81:70:ba:55:f4:2c:8e:24:83:1a:b8:9c:9e:b2:56:5e:6e:
         9f:41:03:5a:e0:0e:2b:86:70:b2:b1:8a:1e:2e:ac:4c:44:7f:
         ad:ab:c2:28:69:19:6c:71:c2:e5:fd:a6:49:fd:c1:74:5f:b1:
         9a:fc:fd:8a:1e:81:bf:f3:8b:2f:79:9c:82:28:53:a6:bd:b6:
         45:f2:9e:73:48:67:07:ba:5c:8f:28:60:87:2e:84:f9:6d:2b:
         e5:b1:0e:f5:af:0c:48:f2:a1:70:2b:9a:a5:0e:82:b0:a1:43:
         8f:5b:bd:38:c9:70:5f:93:9a:a3:3d:41:29:fe:90:8a:e9:60:
         5e:f8:e4:44:4f:33:45:4d:58:38:f6:1b:7e:71:29:2f:d3:f8:
         56:3c:b0:b8:52:0f:96:b2:31:32:dc:fa:be:13:ca:d4:eb:b0:
         e7:91:6b:01:35:01:54:b0:c4:33:96:4a:af:aa:f7:0d:95:91:
         de:fc:99:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:28:21 2025 by rpki-client