Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/a4843b74-884d-3404-9816-c1d40d9ed480.roa
File:                     a4843b74-884d-3404-9816-c1d40d9ed480.roa (raw, json)
Hash identifier:          qhpc042v6T37aTK2Qhw48cOGrSUnk3OfnZWfDjem7k0=
Subject key identifier:   3D:3C:2C:57:AA:89:CF:23:B3:A5:72:EC:4D:7B:DB:44:41:77:E7:3C
Certificate issuer:       /CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0
Certificate serial:       010D0C9F4328584B03168ED7559384DEDF6A7F80
Authority key identifier: 60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/a4843b74-884d-3404-9816-c1d40d9ed480.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     398020
IP address blocks:        2602:fde8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:8e:d7:55:93:84:de:df:6a:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=a0d5ff79-8cde-4094-b297-19b75dada327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c9:5b:81:63:1a:b1:48:57:f9:63:56:28:37:
                    67:b7:00:9e:09:d1:a9:47:ee:1f:ec:08:55:9f:52:
                    8e:78:89:8f:80:19:12:ea:f4:c4:a3:6b:2b:93:00:
                    c2:66:ea:d9:14:41:5f:68:0e:a2:5a:01:3a:3d:5f:
                    73:e7:bf:38:3e:f0:d3:2e:48:d7:76:71:b3:c3:0e:
                    52:a7:af:14:fa:49:a0:3c:61:6f:e1:82:f5:9c:7a:
                    ad:4c:97:bd:40:e6:99:6b:8d:ed:ec:91:86:50:b1:
                    14:13:72:cf:37:64:cf:b0:52:70:37:7a:32:3d:b7:
                    1c:e7:26:5b:dd:22:b2:5c:9f:c8:d8:57:a6:fb:28:
                    b7:6d:8d:d0:bf:84:d8:86:40:27:71:28:0c:db:71:
                    c5:1f:08:32:8f:b0:22:a2:14:c8:87:df:f5:8d:21:
                    fa:27:dc:2e:5a:31:6d:d6:11:a8:1c:6b:0c:19:01:
                    44:84:25:65:da:66:d9:c8:ad:04:65:87:19:98:f2:
                    86:e3:a1:66:1f:d5:55:0c:43:b0:e1:d2:00:c6:0c:
                    6a:9a:d8:69:8f:59:97:a7:02:c5:2e:0d:74:2d:6c:
                    b5:84:5a:26:14:5a:4f:46:37:b5:34:2c:ef:5b:9a:
                    9a:1e:94:1e:97:84:9b:c8:99:54:61:07:10:fd:1b:
                    79:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3C:2C:57:AA:89:CF:23:B3:A5:72:EC:4D:7B:DB:44:41:77:E7:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/a4843b74-884d-3404-9816-c1d40d9ed480.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.crl

            X509v3 Authority Key Identifier:
                keyid:60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fde8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:37:b0:7e:22:6e:e0:a4:d5:c0:c2:0a:59:b6:0b:3e:ba:fd:
         1a:db:2d:f0:0c:76:65:30:5d:63:f2:16:70:fc:65:6b:b6:10:
         ad:c4:4c:a4:f6:a8:1c:c2:a5:fc:9c:42:9b:32:b5:03:4f:35:
         90:ea:ea:aa:b4:2b:ea:48:ce:f2:d2:56:13:08:7e:6c:7e:da:
         e4:0e:05:bd:3d:a1:ce:eb:c7:58:df:d4:85:86:65:94:86:37:
         91:b3:77:02:f4:de:6e:4f:81:6b:c9:38:3b:d3:17:9a:8e:ed:
         b4:02:5e:ca:63:13:b3:60:e9:4c:f4:63:ec:f1:20:9a:65:36:
         28:cf:96:dd:53:3d:d6:64:3f:d7:4a:fb:70:30:39:47:81:77:
         7b:cf:7a:49:8d:99:a9:fc:13:5e:83:59:23:95:a9:f5:d3:33:
         3d:f3:a0:b1:53:98:60:25:e6:c1:2d:a8:e1:8b:aa:36:0c:f1:
         a1:04:dd:b9:53:c1:70:65:f2:49:4f:e0:08:a1:e5:67:cd:1a:
         31:01:fd:a8:25:7a:fc:17:67:99:21:28:9c:54:31:6a:0e:52:
         61:43:ca:2f:76:4d:c2:c8:42:f8:f1:1d:e1:ff:d6:a6:c8:3d:
         f5:3d:0b:00:39:a2:88:55:41:24:22:75:c0:cc:f6:57:77:7e:
         09:01:22:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:35 2025 by rpki-client