Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0/66dd72c0-5379-38a2-89af-5967055d3006.roa
File:                     66dd72c0-5379-38a2-89af-5967055d3006.roa (raw, json)
Hash identifier:          znqt+T3Wp+fNyY65irct+kluQT7N8mvhPqpkzVDMwes=
Subject key identifier:   2C:F7:60:23:53:8E:02:BB:78:A7:D3:34:38:EB:17:7B:19:D8:AA:3A
Certificate issuer:       /CN=79e9b329-e246-44a9-83eb-07fbccf4f7e0
Certificate serial:       010D0C9F4328584AFEE69E20A38FA8FE9621E530
Authority key identifier: 98:D3:AB:23:1F:74:45:7D:49:5C:ED:49:0F:4C:50:B7:CA:C7:6F:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0/66dd72c0-5379-38a2-89af-5967055d3006.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     394230
IP address blocks:        2602:fd3f::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0/79e9b329-e246-44a9-83eb-07fbccf4f7e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0/79e9b329-e246-44a9-83eb-07fbccf4f7e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:9e:20:a3:8f:a8:fe:96:21:e5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e9b329-e246-44a9-83eb-07fbccf4f7e0
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=a2cd6e38-96e1-4e3b-91b6-518feaa21f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:ac:3f:3d:f0:6a:23:01:41:b4:15:d5:61:
                    df:38:9a:00:3f:ab:ca:04:00:a0:b5:85:9e:10:ba:
                    f5:70:5f:02:1f:5b:e4:5e:f3:9f:ec:ca:a0:20:47:
                    42:38:91:b2:d3:fb:5d:2f:75:6f:53:e4:c8:82:e0:
                    e7:0d:b6:0e:2d:fb:3b:2a:f9:26:01:5d:17:76:9a:
                    44:fb:cd:c6:cc:7a:c9:15:92:38:89:44:47:9e:8b:
                    6d:72:01:3c:66:ab:85:fc:98:13:77:25:e5:a3:74:
                    bb:39:4e:f6:e3:89:32:51:0c:d9:66:54:ef:09:4e:
                    c2:c2:18:3e:02:3f:1d:c1:06:7e:69:96:9e:6b:f4:
                    eb:13:d5:2d:f5:c4:d4:ec:fb:95:35:0f:09:91:41:
                    fe:94:ef:07:82:eb:7a:ce:65:75:9a:8e:35:0e:ef:
                    8c:77:b4:c0:e1:16:50:5b:9c:e5:a6:40:f3:fb:2b:
                    02:27:b5:26:67:7e:7e:02:77:61:07:e9:35:cb:af:
                    cf:c3:4e:5a:80:25:65:78:0a:f9:9d:5c:a9:ae:20:
                    ec:c6:3c:37:0c:85:90:34:c2:24:26:3b:19:48:b3:
                    3e:52:0c:7a:35:89:49:26:e3:d9:a7:48:42:b3:74:
                    68:d9:e3:a1:f2:a7:59:28:b2:60:47:3b:81:b1:a9:
                    5e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F7:60:23:53:8E:02:BB:78:A7:D3:34:38:EB:17:7B:19:D8:AA:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0/66dd72c0-5379-38a2-89af-5967055d3006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0/79e9b329-e246-44a9-83eb-07fbccf4f7e0.crl

            X509v3 Authority Key Identifier:
                keyid:98:D3:AB:23:1F:74:45:7D:49:5C:ED:49:0F:4C:50:B7:CA:C7:6F:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/79e9b329-e246-44a9-83eb-07fbccf4f7e0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd3f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:ef:78:4d:b2:0d:94:a4:35:63:10:af:98:19:75:f9:7b:89:
         04:9b:13:c4:8d:26:63:ec:d1:df:48:89:d7:31:9c:ea:f2:3f:
         13:56:af:6e:56:f2:f1:1a:fa:a0:88:29:4a:0a:71:fd:d0:a1:
         bf:49:d4:76:df:40:97:80:e3:a3:f2:d8:20:c1:ee:d3:35:56:
         e6:b5:4b:6c:aa:2c:0d:e4:ba:1a:3d:80:5a:d0:13:9a:32:5d:
         e3:4f:a1:c4:e9:48:9b:9f:b2:49:e2:18:d1:38:4f:e2:07:1f:
         1e:81:be:1e:da:9e:98:dd:fa:33:a4:3d:c7:bf:45:28:0c:46:
         91:ce:68:20:33:26:8f:f9:74:fa:2a:93:cb:d1:b6:c5:03:cb:
         45:c6:77:52:f3:af:cc:93:6e:50:e9:f6:20:fe:b6:4d:a2:36:
         1f:84:b7:62:3a:b2:6b:f2:5c:53:81:fc:fe:13:c1:a0:c5:8f:
         85:b6:53:80:05:45:2f:a6:8f:a9:05:e1:a7:d4:37:b9:dc:74:
         56:d7:69:b7:7d:17:dd:65:4b:8c:54:d3:13:7c:da:4d:e9:48:
         d6:a3:1d:2f:af:80:6d:80:bf:a3:05:c0:af:70:5f:66:0c:ea:
         8b:76:dd:ed:11:b0:06:98:ed:1c:e8:a4:18:ca:03:eb:1f:f5:
         63:76:c6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:15:39 2025 by rpki-client