Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/3a301ecb-1b30-3b2d-ac4e-3c85c04dfc19.roa
File:                     3a301ecb-1b30-3b2d-ac4e-3c85c04dfc19.roa (raw, json)
Hash identifier:          ugq74ewO74z81H57y7/BjxiKEuaZ7B2zJpKOeDB64+E=
Subject key identifier:   A5:8E:26:A8:49:C7:0E:E6:E0:8E:16:73:EA:43:05:4A:49:D1:90:97
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584B110C0AE1C957DCC20F1FB280
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/3a301ecb-1b30-3b2d-ac4e-3c85c04dfc19.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     7992
IP address blocks:        2602:200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:0a:e1:c9:57:dc:c2:0f:1f:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=a6228ff3-0abb-4006-bdd2-033e6346eae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:80:4f:5f:c8:5e:6a:96:b2:28:8e:f8:0d:99:
                    90:03:89:40:49:02:de:06:14:6d:72:5d:c9:24:87:
                    62:b4:cc:e0:ec:70:6e:57:be:4d:4c:cb:90:6e:7a:
                    26:6d:5a:86:e3:51:84:31:a0:0f:2c:c2:37:a5:9f:
                    08:a3:44:84:09:69:93:d7:c1:fb:5a:7b:f5:62:97:
                    6e:a1:dd:90:a0:bc:56:4d:17:89:7b:77:8f:95:67:
                    2e:2a:77:b2:23:ab:b2:55:8f:ec:2f:bc:aa:e4:b5:
                    0e:ea:3b:8a:d0:6a:97:33:54:57:d3:ea:76:bf:0a:
                    6b:f6:21:fb:76:d3:66:2a:f5:38:6e:aa:32:9b:e0:
                    3f:0b:77:af:0e:09:6e:a0:1f:29:13:42:49:0d:d8:
                    9c:8e:dc:c2:4f:3b:cb:95:cc:df:11:00:f9:08:31:
                    5c:a0:c6:8e:32:eb:ef:84:16:b1:27:1f:aa:10:87:
                    b1:cc:ea:b1:44:4f:f3:73:91:dd:e9:cc:d8:0a:a2:
                    05:b5:77:82:0c:4d:bd:c1:70:90:09:a9:7a:26:c4:
                    3f:6e:f7:75:99:a9:28:cc:f9:b6:ca:30:ac:7c:17:
                    a5:90:38:e0:ad:fc:e0:63:e1:2e:f7:b6:f9:ec:d9:
                    fa:f5:0f:cd:dd:0c:fe:2f:bb:b5:1d:b7:f7:ea:47:
                    aa:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8E:26:A8:49:C7:0E:E6:E0:8E:16:73:EA:43:05:4A:49:D1:90:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/3a301ecb-1b30-3b2d-ac4e-3c85c04dfc19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:65:4b:f9:af:79:3c:dc:af:e2:e8:3f:53:40:b7:21:7b:a6:
         66:66:84:21:e6:2e:ba:43:b3:e5:5c:2e:60:e4:53:c8:3f:f1:
         73:0d:5d:96:96:3b:46:49:3a:42:02:93:f4:19:2a:33:1f:fe:
         d8:c2:2f:5c:87:2d:c9:68:ae:ce:b5:7d:01:b4:94:4a:e7:f3:
         78:f7:92:aa:da:0e:61:a1:36:b1:b4:a1:75:87:86:3c:f0:cb:
         99:6d:e6:ad:7a:ee:01:a2:39:4d:40:4d:57:53:30:d8:1b:31:
         2f:79:66:48:8d:3e:94:99:17:31:5f:25:2f:a6:66:6b:8b:88:
         05:38:b1:7d:ba:c0:cc:18:a2:30:5e:e3:f5:9e:39:ad:67:30:
         ed:9f:fd:e6:b3:fd:b6:10:ef:08:15:55:79:df:bb:f7:95:1c:
         ed:e9:e4:b1:3d:98:42:bc:f7:e3:c9:8d:70:de:2c:bf:fc:f4:
         d9:cc:02:7b:a9:7c:f6:b4:5b:f8:6d:25:56:14:f4:e7:8c:71:
         3e:a3:43:5f:65:36:ad:84:39:57:c8:9c:64:90:19:5c:57:6d:
         3b:f5:8d:72:c3:9d:fb:90:69:82:46:74:66:53:3a:0e:c5:cf:
         04:c7:98:1b:9b:ef:ba:b2:f8:aa:5f:b5:31:d3:f4:a1:7d:cb:
         75:b3:aa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:03:46 2025 by rpki-client