Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/30e1b526-edb4-3408-90ff-b3883c8f9b14.roa
File:                     30e1b526-edb4-3408-90ff-b3883c8f9b14.roa (raw, json)
Hash identifier:          YSo/uV30A2rRGyRE7gp2zNxCtB1HQRX9uKYoL8xL/FY=
Subject key identifier:   C6:E8:43:B5:33:63:97:23:5F:50:16:2A:B9:C6:67:72:E0:2C:BE:67
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584B0A116D844BD25196EBEEC200
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/30e1b526-edb4-3408-90ff-b3883c8f9b14.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     142594
IP address blocks:        2602:f919:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:6d:84:4b:d2:51:96:eb:ee:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=dbb4a6f1-90ee-4aa7-9143-279141bb7b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:71:88:70:55:45:fb:5c:79:da:83:5c:b0:
                    73:b4:30:ed:6c:ff:df:a8:2f:b3:78:19:8f:16:dd:
                    b7:1f:8d:f2:7d:ee:24:e4:9b:ae:fd:78:a7:31:e5:
                    a3:09:f0:78:0e:8d:34:82:07:ee:cd:aa:22:9c:d0:
                    71:79:10:31:c7:f5:bd:9a:44:f5:2e:af:31:ee:f3:
                    7b:2f:8a:77:0e:ad:84:3c:a0:16:cf:86:ca:30:73:
                    11:2b:9c:6a:7a:4c:50:a7:41:34:9e:43:47:9a:63:
                    7a:87:47:43:fe:90:f0:be:f0:ed:3b:aa:59:69:87:
                    4a:64:ce:38:af:bb:83:41:85:95:95:83:fd:bf:c0:
                    5b:6a:1d:2a:a8:47:e4:b6:63:69:15:8b:5b:02:ab:
                    4d:a4:ba:0f:76:ae:b8:e0:9b:e5:75:ab:c7:44:78:
                    bc:c2:6a:95:23:c2:7f:da:40:a2:fc:ff:0c:2e:7a:
                    a9:98:b5:22:04:f5:e5:01:45:cc:c4:4d:0e:bb:ec:
                    5e:bd:0f:2e:43:a3:24:48:86:7f:2c:a1:a2:08:fb:
                    6e:d9:6a:bd:8c:2c:a7:36:61:92:89:67:2b:fc:de:
                    10:5b:ac:b4:13:5e:a1:51:1d:02:ad:a8:a3:17:52:
                    5a:68:2c:28:fb:f4:59:81:65:88:c6:68:68:d9:fd:
                    da:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E8:43:B5:33:63:97:23:5F:50:16:2A:B9:C6:67:72:E0:2C:BE:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/30e1b526-edb4-3408-90ff-b3883c8f9b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2b:d6:c1:f1:4d:f2:6e:27:b7:2e:06:7c:c7:df:9c:53:27:
         01:5b:9a:b7:9c:46:bd:15:11:32:de:4b:50:1d:54:cb:6a:5b:
         60:5a:0a:d7:96:8b:bb:a1:63:fb:c5:46:c5:15:41:1c:e1:6b:
         f8:b4:1b:30:17:4b:1f:0f:5e:81:1a:42:5e:53:47:33:b8:f5:
         01:a4:f9:1c:27:ea:43:b5:84:88:34:0e:a0:69:34:34:a5:10:
         bc:42:13:b4:42:16:bf:0b:be:13:93:b4:dd:06:fe:cf:99:0d:
         0e:a7:a6:2e:1b:22:1d:a3:42:29:40:63:5a:07:8a:95:1b:ae:
         a6:c5:ae:3c:38:1c:76:f7:b8:b2:3d:75:ec:22:cf:7f:f7:4b:
         06:92:fe:18:40:53:25:91:69:28:fb:91:5f:4d:0f:81:27:df:
         6f:da:fe:9f:af:bd:6a:bc:d9:21:c0:dd:2b:27:81:31:df:82:
         88:3b:64:23:d2:04:2a:25:84:e1:78:b7:0e:b2:fb:bd:d3:c9:
         1f:14:fc:57:44:ff:38:de:d6:a7:cc:3c:f2:6a:a0:db:d3:20:
         3e:f8:48:18:78:28:20:b6:e8:1c:77:5d:3f:a8:7e:48:41:e2:
         71:26:e2:59:e3:3f:c5:2f:4c:a0:a1:b0:eb:38:a1:6e:c1:d7:
         09:49:c8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:26:59 2025 by rpki-client