Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b/8b1938a2-c955-3378-b400-ac21f2c42f3a.roa
File:                     8b1938a2-c955-3378-b400-ac21f2c42f3a.roa (raw, json)
Hash identifier:          SOmvKCZfGhKbVcGG8HA5KKhmFe5QK927b36VFWI0HLE=
Subject key identifier:   33:B9:27:EF:4C:78:48:DC:88:08:CA:57:D4:41:6F:AB:B0:83:D9:20
Certificate issuer:       /CN=c3821293-eea8-46fe-8eaf-ca46323c5e8b
Certificate serial:       010D0C9F4328584B2CF6E0F5AAFEE7BE4AE1B280
Authority key identifier: BD:B9:87:F5:10:82:35:D2:BC:A9:95:94:6A:29:F2:F1:DE:1D:46:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b/8b1938a2-c955-3378-b400-ac21f2c42f3a.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     394781
IP address blocks:        2602:faf6::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b/c3821293-eea8-46fe-8eaf-ca46323c5e8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b/c3821293-eea8-46fe-8eaf-ca46323c5e8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:e0:f5:aa:fe:e7:be:4a:e1:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3821293-eea8-46fe-8eaf-ca46323c5e8b
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=4782c40d-f68c-456f-91c3-b45feac6b8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:09:1a:d7:a5:0e:10:23:43:87:18:b0:2b:48:
                    f1:34:b3:60:b8:10:35:c6:54:37:73:68:83:57:55:
                    0b:3a:a7:d4:27:a4:44:95:24:ba:52:6b:28:60:e2:
                    31:5e:01:b9:10:ef:54:b7:73:4d:c6:6d:8c:e7:3e:
                    44:43:e5:45:e7:00:6d:b9:7d:36:99:60:45:97:df:
                    fe:4c:d5:fc:cd:4d:5e:f4:98:46:1f:39:76:7e:4f:
                    98:b1:53:f3:49:a5:4a:25:1a:3f:a5:2a:78:ff:67:
                    b6:07:e9:26:06:25:f4:39:d6:3f:fc:27:0d:8e:38:
                    f1:32:87:85:e5:37:29:7b:09:e3:2c:78:28:89:46:
                    5b:02:5b:0f:5b:6e:25:68:72:e8:73:12:2f:be:10:
                    7d:bc:30:47:33:67:cd:07:02:4f:84:8b:a9:e0:60:
                    7b:c2:ba:50:9a:ce:22:46:f4:e9:1e:52:c9:96:fa:
                    ba:18:49:c8:d2:92:16:27:08:a9:9b:b0:62:30:2e:
                    a9:f5:e0:00:fe:5e:7f:2e:9b:80:fd:3e:13:b4:67:
                    83:37:f1:3f:7c:3d:c8:21:98:ae:f2:51:43:86:66:
                    52:75:b9:7b:bd:3f:94:4e:a7:28:35:01:48:e6:bb:
                    5b:f7:ad:60:38:2d:f6:64:f8:0f:41:03:3c:e3:5a:
                    1a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B9:27:EF:4C:78:48:DC:88:08:CA:57:D4:41:6F:AB:B0:83:D9:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b/8b1938a2-c955-3378-b400-ac21f2c42f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b/c3821293-eea8-46fe-8eaf-ca46323c5e8b.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B9:87:F5:10:82:35:D2:BC:A9:95:94:6A:29:F2:F1:DE:1D:46:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3821293-eea8-46fe-8eaf-ca46323c5e8b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faf6::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:1f:f8:e9:4c:2b:61:d4:5e:0b:0e:a7:d1:de:0b:f3:c7:24:
         6b:c9:11:a4:0d:9d:32:2e:86:85:35:7b:a4:35:06:bb:fc:ad:
         f7:90:76:59:11:92:6a:38:eb:7e:f0:7e:69:8c:0a:8b:a2:99:
         55:e9:d4:c5:de:e3:e2:8f:a8:a1:ab:0a:08:4e:3c:0c:d1:29:
         f7:33:d2:8b:c4:4f:a2:28:4b:70:ea:f3:eb:a9:a6:76:46:c6:
         df:b4:97:a2:d2:8f:a6:b6:73:36:b9:69:c4:d0:b5:e7:0c:39:
         f6:26:4a:5b:38:6f:fe:bc:95:09:4a:e0:59:ad:9a:46:54:82:
         a9:0b:90:9c:53:4a:e6:93:90:0d:e2:6f:73:cc:71:85:6e:c4:
         50:d1:d5:2b:10:0f:6c:c1:32:8c:36:39:9f:5f:69:08:de:05:
         9f:70:67:6d:c1:6d:ad:ae:9d:63:ed:d5:c5:7a:3c:8a:25:3b:
         08:bb:f6:55:27:3f:1a:b7:01:d6:cc:b7:e8:0f:a0:89:56:af:
         be:bd:1b:c6:b0:14:7d:a7:6a:94:2c:af:08:78:99:37:f0:5a:
         26:4a:c8:27:93:1a:b8:71:e2:77:bd:0c:c9:fc:aa:1f:e3:df:
         cf:df:ef:ec:1f:ba:9a:85:8c:02:e2:22:11:0b:7e:76:56:cc:
         ed:a4:8f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:28:50 2025 by rpki-client