Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/0376af83-0954-3fac-af6b-98f0bdd7d351.roa
File:                     0376af83-0954-3fac-af6b-98f0bdd7d351.roa (raw, json)
Hash identifier:          SFIrcpLPllGy9GFx87AfLc1CkZB02lNu+fHK3aU+ALs=
Subject key identifier:   FE:DF:B0:55:D9:30:51:86:E4:FE:A6:7A:FA:1C:98:3E:29:D1:62:90
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584B0B76BD3DF58BEA16DEC5CBC0
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/0376af83-0954-3fac-af6b-98f0bdd7d351.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     44324
IP address blocks:        2602:f919:109::/48 maxlen: 48
                          2602:f919:110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:bd:3d:f5:8b:ea:16:de:c5:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=efafab1b-17c9-4824-8266-861823d2fb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:c3:33:b1:f0:5f:c6:dc:8f:69:0e:e1:df:
                    8e:60:42:ca:03:cc:8b:92:53:6b:8b:c9:fe:ab:27:
                    27:26:81:f1:98:2c:e9:d3:ea:71:8f:d6:8b:f0:b7:
                    3c:de:2c:94:4f:0c:74:3c:46:6f:f9:28:df:fa:58:
                    7f:37:77:b4:cc:89:72:99:90:42:a3:38:f7:91:a6:
                    fe:f8:df:22:30:f2:81:a9:95:c8:58:db:f2:f7:67:
                    7e:16:34:73:f2:89:bc:6e:4c:ee:ce:3a:46:eb:2b:
                    a2:82:2f:7e:25:43:90:f9:5f:ab:29:a5:2c:b2:d8:
                    7f:ee:9c:89:b0:55:f2:bb:a5:15:ff:af:6f:74:3e:
                    9c:6a:f4:28:f6:4d:b5:82:02:49:30:bf:20:bc:af:
                    57:c3:ea:ce:75:c1:72:48:c9:e2:c3:b3:d4:55:a4:
                    1b:fa:f3:1d:52:1b:75:5d:79:4c:35:5a:14:10:27:
                    b7:e0:99:d9:d3:1e:27:0a:73:c8:aa:23:12:f5:53:
                    82:88:41:f5:5c:af:61:0a:09:7a:98:14:74:d8:47:
                    8e:fa:6d:40:63:a2:7e:75:e6:cc:6e:9d:d1:2d:f8:
                    1b:69:2a:ea:f2:62:ae:b0:63:59:80:8a:c0:90:ff:
                    04:3b:cd:31:aa:41:f9:47:fb:8b:d7:13:0b:fb:b0:
                    ef:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DF:B0:55:D9:30:51:86:E4:FE:A6:7A:FA:1C:98:3E:29:D1:62:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/0376af83-0954-3fac-af6b-98f0bdd7d351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:109::/48
                  2602:f919:110::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:36:99:ff:98:a7:3f:d4:83:ca:01:58:34:b5:45:50:8a:91:
         9c:05:1b:7b:b3:74:92:da:d1:82:48:32:61:50:f0:fd:17:b0:
         a7:34:b8:c8:f0:cb:4f:0d:f0:2b:c5:ca:42:12:5e:6d:db:59:
         3e:03:f3:26:11:f7:fc:ed:7d:b3:8b:0a:9c:c8:68:7b:76:61:
         9f:84:83:86:ae:49:ce:8e:dc:64:e5:fe:1d:04:34:af:67:09:
         f8:f3:61:ab:c2:de:8b:34:1b:b6:3d:c5:46:78:43:97:67:bc:
         a3:00:22:5e:05:aa:83:74:99:c8:bf:be:81:e6:83:03:8a:84:
         c8:a2:e8:7a:70:a3:ca:b3:98:e3:e5:da:74:9b:ff:e5:92:6c:
         bd:89:c8:e6:e4:6e:b1:b6:4b:57:39:88:1a:eb:12:36:ce:db:
         68:c0:ea:2b:64:a6:3f:1a:af:1f:c3:f7:86:5b:f8:9e:d1:1d:
         cf:90:04:6b:62:f6:11:c6:d8:5a:01:fb:ff:7b:2d:65:25:73:
         8c:66:14:39:8f:90:29:5a:5e:a5:25:97:07:a2:b9:41:dd:b7:
         7d:72:87:9e:22:82:d5:b3:df:51:5b:1b:a2:28:f0:69:bf:48:
         20:20:98:60:10:18:4e:33:a0:21:a2:c2:0d:20:a9:2f:ab:4a:
         a8:d0:87:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:26:55 2025 by rpki-client