Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6/fcd0ef24-b691-3997-9adc-56833e2b653f.roa
File:                     fcd0ef24-b691-3997-9adc-56833e2b653f.roa (raw, json)
Hash identifier:          QUGgpHdQ4ytjHkYNZV9JLNs22YdPDMnF2hmulOaYRSU=
Subject key identifier:   96:E7:A1:70:7A:C6:EF:2F:DB:0C:43:7F:77:5B:3B:62:24:F5:75:18
Certificate issuer:       /CN=7311d09f-0e08-4761-abfa-23bbd03484c6
Certificate serial:       010D0C9F4328584B5C6C77B5B25D7FFB6E1D2980
Authority key identifier: 3D:8B:65:24:D5:A7:D0:5D:26:B1:A0:E1:09:45:18:FC:0C:45:D2:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6/fcd0ef24-b691-3997-9adc-56833e2b653f.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     5081
IP address blocks:        2602:ff0c::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6/7311d09f-0e08-4761-abfa-23bbd03484c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6/7311d09f-0e08-4761-abfa-23bbd03484c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:77:b5:b2:5d:7f:fb:6e:1d:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7311d09f-0e08-4761-abfa-23bbd03484c6
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=d25b83ae-988e-4fd1-a760-72ab019aec0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:c7:be:ca:7d:f1:85:ae:d2:92:9a:3f:3f:
                    a8:d3:48:49:db:5e:1f:23:04:fc:71:05:be:99:77:
                    bf:ea:2e:24:8b:68:82:e8:1a:ec:66:74:52:7f:02:
                    09:7c:55:f3:a5:52:b4:57:33:86:38:8b:56:96:83:
                    46:f4:09:64:87:7f:93:43:36:d2:2b:0f:11:f4:78:
                    a2:92:22:0d:2d:d6:81:bf:41:ff:05:64:8e:77:d8:
                    5b:f3:8e:f0:35:aa:23:b8:ec:81:3b:51:23:38:11:
                    6f:22:3e:fc:57:b1:a6:9a:2b:09:9f:06:ba:af:07:
                    88:f1:61:a6:24:ec:a3:00:d9:ad:6f:c9:73:7b:aa:
                    af:b2:2c:35:ff:43:b9:7f:57:26:e9:8a:b6:d2:f7:
                    0a:33:b3:22:07:d7:ce:2d:60:99:7f:e8:a0:08:ec:
                    0d:74:40:c8:d6:d7:88:a1:f9:46:ac:88:4a:7e:b6:
                    e1:66:a2:f8:90:98:48:6b:bf:6a:64:17:2c:fa:de:
                    01:2c:d9:5b:48:3f:ff:40:f3:17:c5:f1:53:97:cc:
                    0a:2e:92:3c:76:4f:f1:d9:51:e6:0b:ba:2b:72:90:
                    3a:b5:5f:38:12:3f:ac:1f:e7:9e:f0:d6:36:ee:ac:
                    5a:89:6a:59:c0:ec:6e:8b:0b:0a:ae:d6:8e:d8:18:
                    f5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E7:A1:70:7A:C6:EF:2F:DB:0C:43:7F:77:5B:3B:62:24:F5:75:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6/fcd0ef24-b691-3997-9adc-56833e2b653f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6/7311d09f-0e08-4761-abfa-23bbd03484c6.crl

            X509v3 Authority Key Identifier:
                keyid:3D:8B:65:24:D5:A7:D0:5D:26:B1:A0:E1:09:45:18:FC:0C:45:D2:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7311d09f-0e08-4761-abfa-23bbd03484c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff0c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8a:59:31:13:0c:5c:43:a3:1e:e0:75:02:97:6d:d4:07:d0:
         9e:86:fb:e2:bd:b8:99:95:17:d9:13:44:f6:8d:10:6f:96:ba:
         90:e2:c4:70:96:7d:0e:18:21:d4:c7:1c:1c:db:b0:90:ce:f5:
         7e:8d:ba:f9:89:7c:33:c7:37:7c:4a:e3:f3:05:2f:4a:01:54:
         24:01:4f:bf:d7:b2:46:ce:07:ee:88:d3:3a:40:73:38:d4:5a:
         63:25:64:02:ed:b5:88:f7:32:72:d1:f5:cc:8a:06:3d:98:1f:
         d5:70:96:89:28:c9:92:5b:fa:ce:d5:b3:1c:05:4d:47:f5:0e:
         48:2f:e8:92:07:57:ab:30:40:9a:0f:62:01:dc:7f:ca:2d:f1:
         14:e5:3f:83:da:6c:61:58:3a:3c:26:d9:df:bd:0f:ce:e1:3a:
         97:65:34:cf:f5:c4:3d:b4:c2:19:a3:e9:9e:11:7a:88:f1:33:
         38:5c:44:c7:32:90:6b:4b:e2:9e:0d:95:b6:90:62:64:9b:3d:
         b8:9b:03:1c:69:85:b1:1d:e9:79:2b:0e:f4:df:41:29:4a:1f:
         71:e1:e2:38:98:f8:52:de:5b:25:50:7e:62:b3:4b:af:55:19:
         7e:04:b8:97:4f:66:cd:aa:5e:01:ae:7e:5c:73:8f:bb:23:e2:
         73:c4:b5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:26:58 2025 by rpki-client