Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/90ab908c-be55-3437-8ac3-a02bf5a66846.roa
File:                     90ab908c-be55-3437-8ac3-a02bf5a66846.roa (raw, json)
Hash identifier:          BTQgFxg6ITXpEV2E9x/+VDwuc+oQ7RJ/gmTt+1DeDe4=
Subject key identifier:   CE:8C:43:5C:26:4B:04:6D:BC:8C:C9:9B:EA:58:C5:E7:9D:F2:86:88
Certificate issuer:       /CN=b3f5323f-8bea-48c6-aa03-949255dd1997
Certificate serial:       010D0C9F4328584B3F1C5E7414B7D7151C3A1980
Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/90ab908c-be55-3437-8ac3-a02bf5a66846.roa
Signing time:             Fri 19 Sep 2025 13:00:41 +0000
ROA not before:           Fri 19 Sep 2025 13:00:41 +0000
ROA not after:            Thu 18 Dec 2025 14:00:41 +0000
asID:                     46474
IP address blocks:        2602:819:e002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:1c:5e:74:14:b7:d7:15:1c:3a:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997
        Validity
            Not Before: Sep 19 13:00:41 2025 GMT
            Not After : Dec 18 14:00:41 2025 GMT
        Subject: CN=fffe9a8e-2e6a-4c06-95be-16dd74d51203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:88:92:d0:1c:d2:a3:de:7f:ff:d9:84:fb:
                    b8:03:a1:58:94:4c:d1:84:2e:35:68:fb:9a:ad:2a:
                    26:30:92:28:bd:d3:12:fc:c9:6d:86:65:56:7c:7c:
                    be:aa:b0:7b:ba:0b:e9:9f:f9:16:f4:93:23:c2:6c:
                    6b:e9:40:1a:8a:c5:fd:97:b3:bc:e0:45:dc:2d:64:
                    60:bf:c3:f2:53:f5:af:5c:f8:7c:bd:9a:1e:cd:30:
                    a5:89:4e:0d:68:df:2c:da:80:ac:d0:79:0a:06:3f:
                    93:50:a9:7d:9a:c2:3a:04:a9:44:68:ee:66:91:5c:
                    98:66:f9:e1:2c:d5:b0:0c:16:aa:c6:78:dd:78:4d:
                    f3:fb:b4:46:f0:25:dd:a8:88:ca:96:2b:04:3c:ef:
                    13:20:52:d9:54:e3:dc:be:59:99:03:00:43:13:f8:
                    f3:fe:ce:c8:58:da:eb:56:cb:73:65:cd:5d:e6:01:
                    13:1b:0f:6c:43:50:7a:66:9e:db:32:77:8e:86:70:
                    1e:ee:49:30:3b:10:d5:33:8a:8f:8d:6a:13:55:20:
                    fb:24:6f:ee:b9:e2:b9:e6:c2:29:8b:50:14:76:ff:
                    b2:b3:0c:de:85:1e:4f:67:de:ac:f5:13:2e:94:3e:
                    ef:35:ad:d0:fe:6f:c2:11:54:54:34:46:40:a4:47:
                    8f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8C:43:5C:26:4B:04:6D:BC:8C:C9:9B:EA:58:C5:E7:9D:F2:86:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/90ab908c-be55-3437-8ac3-a02bf5a66846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl

            X509v3 Authority Key Identifier:
                keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819:e002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:4f:1f:41:16:46:9c:44:dc:6e:80:f7:ac:ea:da:ff:41:d3:
         2f:25:c3:cc:78:0f:5f:3b:fb:51:97:5e:2d:f2:54:ce:d1:b0:
         c9:aa:02:4a:14:d0:d3:68:36:d2:b1:66:82:68:58:05:20:c5:
         4b:d1:e9:f0:ce:52:67:89:ae:40:46:32:ed:82:6d:45:5b:7a:
         0a:6b:a0:55:f9:28:08:9d:6e:7d:62:a2:a6:40:ed:e3:3d:a1:
         27:99:5b:09:ff:f3:c6:11:5b:70:08:7c:71:5c:ed:c1:3d:d4:
         36:b7:4a:3f:d9:92:b7:86:d4:08:69:2c:1f:fb:14:68:cc:00:
         a1:e7:e4:32:f8:df:51:e1:77:fe:1e:79:bd:99:6a:a2:f4:77:
         c3:cf:b1:3b:61:a6:c6:c7:7a:dd:a6:a2:35:89:8b:0d:78:7d:
         30:9c:ce:3b:04:f6:2e:a6:78:ff:60:de:f1:92:a1:ed:4b:d6:
         bc:64:9c:11:b8:23:f7:2e:e5:2b:e5:a6:2d:fc:63:65:c0:83:
         0f:68:04:cd:9e:d3:f2:4c:d0:2f:f2:52:c5:08:8f:af:0e:e7:
         a6:0d:af:ab:fb:ac:86:58:0f:ba:d5:48:ec:c4:c6:65:10:9f:
         69:23:eb:d6:1e:ee:aa:8c:11:ff:39:da:8c:90:28:3b:6b:c2:
         5a:19:bc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:27:00 2025 by rpki-client