Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b94d83c5-b62e-4143-bd55-5d49a83709dc/1093e842-2ca8-3751-968e-e20e04bcb5e7.roa
File:                     1093e842-2ca8-3751-968e-e20e04bcb5e7.roa (raw, json)
Hash identifier:          JWRdlP+UjlJyqBoBgJpKkrnUw6Z8yHNooXj/dJVz5Qo=
Subject key identifier:   35:8E:94:4C:1A:44:49:40:A1:1D:DE:ED:E4:59:2B:6D:60:A4:6D:35
Certificate issuer:       /CN=b94d83c5-b62e-4143-bd55-5d49a83709dc
Certificate serial:       010D0C9F4328584B46457D55AEDEFD48F7052700
Authority key identifier: 33:E4:F6:B0:33:83:DA:B9:CC:A3:F7:DC:E2:DD:74:F2:36:0F:3C:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b94d83c5-b62e-4143-bd55-5d49a83709dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b94d83c5-b62e-4143-bd55-5d49a83709dc/1093e842-2ca8-3751-968e-e20e04bcb5e7.roa
Signing time:             Wed 17 Sep 2025 20:47:35 +0000
ROA not before:           Wed 17 Sep 2025 20:47:35 +0000
ROA not after:            Tue 16 Dec 2025 21:47:35 +0000
asID:                     62467
IP address blocks:        2602:fc13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b94d83c5-b62e-4143-bd55-5d49a83709dc/b94d83c5-b62e-4143-bd55-5d49a83709dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b94d83c5-b62e-4143-bd55-5d49a83709dc/b94d83c5-b62e-4143-bd55-5d49a83709dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b94d83c5-b62e-4143-bd55-5d49a83709dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:46:45:7d:55:ae:de:fd:48:f7:05:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b94d83c5-b62e-4143-bd55-5d49a83709dc
        Validity
            Not Before: Sep 17 20:47:35 2025 GMT
            Not After : Dec 16 21:47:35 2025 GMT
        Subject: CN=f7f1bf68-49cb-4139-bb78-f75eb1a2d2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ec:b6:68:9e:bc:a1:6c:83:61:ac:a1:4a:fd:
                    7b:44:8a:ec:5b:d6:71:7a:5e:96:07:52:6a:03:7b:
                    89:f8:7e:fd:ee:73:03:d2:ef:85:e6:6b:44:63:82:
                    c1:f1:73:53:f8:0c:2f:4d:c3:5d:40:d4:79:aa:4a:
                    39:60:e6:90:4a:49:56:65:f4:28:6e:f7:b6:88:24:
                    30:c8:c2:97:c3:40:75:b8:ad:5d:56:55:1f:b7:15:
                    fe:48:7b:23:90:b1:58:b8:1b:06:65:34:84:9d:85:
                    8c:38:18:9b:2d:dd:9b:31:a4:4f:c1:34:c0:8e:b5:
                    e6:69:43:9e:52:e4:f9:48:c7:70:36:99:8b:19:ac:
                    f1:4c:7f:53:18:fa:1d:89:4a:9e:6b:e7:cf:57:fd:
                    16:5c:64:60:fc:25:c3:bc:2e:b9:6e:6f:89:e8:84:
                    05:e8:ae:49:79:ab:29:fe:99:90:7d:3e:f8:b7:0e:
                    f0:7d:08:1a:15:70:1e:d7:21:c3:f9:81:57:29:fd:
                    bc:f8:38:91:ff:5c:95:60:ef:73:5b:4b:8f:20:9d:
                    0b:68:55:28:9f:c4:7e:f9:e0:87:78:ab:e2:36:57:
                    56:84:eb:7a:ac:bd:f3:48:e5:e0:0d:02:43:37:df:
                    75:e6:5f:ab:d8:36:7f:62:c3:b1:7d:00:65:39:2b:
                    31:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8E:94:4C:1A:44:49:40:A1:1D:DE:ED:E4:59:2B:6D:60:A4:6D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b94d83c5-b62e-4143-bd55-5d49a83709dc/1093e842-2ca8-3751-968e-e20e04bcb5e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b94d83c5-b62e-4143-bd55-5d49a83709dc/b94d83c5-b62e-4143-bd55-5d49a83709dc.crl

            X509v3 Authority Key Identifier:
                keyid:33:E4:F6:B0:33:83:DA:B9:CC:A3:F7:DC:E2:DD:74:F2:36:0F:3C:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b94d83c5-b62e-4143-bd55-5d49a83709dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:e7:aa:47:69:06:d7:c8:ad:44:b6:99:11:4f:7f:34:e4:dc:
         b1:2d:27:93:5f:c1:38:da:1c:a2:1b:b0:10:bb:95:b4:88:e2:
         38:58:a6:98:e1:20:46:5b:8e:f5:fa:57:6c:93:cf:11:df:0f:
         f1:2b:67:3e:ce:d7:02:3e:f6:9d:e5:28:a2:47:1a:25:da:4a:
         88:df:fe:7f:ab:d9:37:1e:4a:dc:95:3a:6c:e1:ce:ab:b3:4d:
         55:d4:d2:6c:b9:33:65:54:bc:7f:d8:d6:3e:aa:e6:47:29:53:
         3d:db:3a:1a:75:3e:c7:79:72:58:a2:13:0e:c7:72:06:5c:f6:
         52:38:66:1e:a6:c3:00:f1:d9:ac:44:f8:0b:f7:3b:63:5d:26:
         93:33:19:81:f7:2c:0d:04:a4:42:41:c6:3c:a5:9b:47:96:d0:
         6b:e3:23:08:84:5c:50:5e:05:98:3a:9f:b8:ec:da:25:fb:b9:
         d9:ac:e6:84:30:fd:24:7f:8e:0d:e3:7c:1e:c0:77:14:55:7f:
         d0:95:87:77:06:ff:bb:61:45:4e:9b:39:94:de:58:66:0c:06:
         dc:b8:19:c7:ce:8b:cf:83:5e:19:da:b9:de:77:70:39:95:89:
         e1:45:18:77:e3:88:73:c7:3a:7e:fc:67:73:49:7e:1e:fb:e9:
         41:1e:00:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:08:34 2025 by rpki-client