Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/0324a99b-635c-375e-af56-954f8fd6c9c6.roa
File:                     0324a99b-635c-375e-af56-954f8fd6c9c6.roa (raw, json)
Hash identifier:          hyH+WFsJ7ukoLReN+BijxD7VX1W6kvJGVbnLkvVPl5A=
Subject key identifier:   AB:7E:C2:AB:56:0F:BE:D1:93:8E:E1:6D:CB:F0:1D:BD:A3:96:E6:2B
Certificate issuer:       /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
Certificate serial:       010D0C9F4328584B13D6B9F9A785F6BEBEFF0880
Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/0324a99b-635c-375e-af56-954f8fd6c9c6.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     62467
IP address blocks:        2602:fc05:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:b9:f9:a7:85:f6:be:be:ff:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=be935201-a319-4ed3-b917-82ae3205041f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d3:8e:98:f7:1c:0a:cd:7e:e2:41:eb:81:08:
                    35:84:93:c8:f4:a4:af:f1:cd:b5:9a:7c:e5:50:60:
                    d2:e0:ae:bb:3f:b3:4e:ff:dd:db:bb:d9:fd:03:e8:
                    df:97:4a:17:b4:87:7c:b4:5e:31:15:bb:78:62:ac:
                    ce:48:db:d9:fa:73:15:9a:38:a2:04:3e:e3:ef:91:
                    8e:18:b8:d1:4d:b8:d5:7f:e1:e1:27:b2:6e:0d:45:
                    af:64:55:91:5d:cf:77:d6:78:89:7a:1c:ff:c3:1d:
                    43:34:fe:b9:02:ba:2c:fe:00:58:90:dc:d6:a2:db:
                    37:6e:cc:57:6a:1b:b4:77:aa:d7:33:78:46:b9:5f:
                    99:c6:2d:91:8d:4b:2d:68:d3:cc:2f:c3:51:2d:8f:
                    fb:99:07:7e:5c:57:30:1d:58:dc:20:b1:ca:c0:18:
                    0a:4e:0f:e2:45:e7:4a:7e:f5:47:b5:0d:f3:f7:0e:
                    6e:9c:bc:d0:6a:74:8d:c2:c5:19:4c:cf:c5:6b:d3:
                    65:ac:a8:cb:10:0f:3b:4a:d2:55:3a:37:d2:35:4b:
                    7a:bb:ff:d1:e2:9b:cd:e1:55:90:b8:e6:35:9a:c6:
                    f1:fa:b6:38:a1:87:64:91:1f:5f:6b:18:75:f7:1a:
                    ae:7c:9e:a3:ea:98:f5:6e:07:23:13:ea:41:44:7b:
                    30:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7E:C2:AB:56:0F:BE:D1:93:8E:E1:6D:CB:F0:1D:BD:A3:96:E6:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/0324a99b-635c-375e-af56-954f8fd6c9c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc05:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:55:91:1e:f1:af:de:57:f2:61:92:d3:29:f9:37:b6:40:d3:
         86:3f:08:91:91:59:b1:f5:b1:26:26:1d:7d:f1:73:07:7f:c7:
         fe:84:f9:42:d0:bd:f6:5b:9e:13:fd:8d:91:ac:f3:a7:3a:d9:
         d3:3e:60:52:0f:47:99:f5:da:9c:70:ae:52:0d:1a:cf:ba:87:
         cb:7e:8e:cf:fe:27:36:2a:de:57:52:f8:51:6a:aa:e2:07:14:
         36:27:fc:e4:15:80:ee:7b:5f:a4:33:8c:a3:dc:ea:40:b9:99:
         e7:22:5e:eb:63:86:e6:51:be:8e:8f:71:81:00:6b:56:33:8c:
         67:db:cd:9f:f7:ee:68:fc:4e:ea:5c:45:97:e7:64:06:00:59:
         fb:08:eb:ab:96:23:b3:5e:68:68:4d:61:bc:f2:1f:19:1c:2f:
         a6:94:98:7e:f7:6b:d0:57:0a:0f:6d:87:93:44:87:33:cd:57:
         e9:5b:12:b2:91:f5:5b:b7:28:99:52:67:79:9f:68:fa:97:a6:
         02:e4:8f:c8:6c:63:3d:c8:fb:b7:a2:5a:c5:fb:68:83:e3:0c:
         25:5e:61:48:93:95:a5:41:db:a7:54:ae:61:2a:ac:dc:1a:9d:
         7d:0e:72:04:43:de:a4:ec:c7:b7:1a:c7:bd:b4:c5:6d:29:c7:
         b6:d5:ec:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 10:00:19 2025 by rpki-client