Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/0bec5560-5f61-3939-92dc-d3500f8e8095.roa
File:                     0bec5560-5f61-3939-92dc-d3500f8e8095.roa (raw, json)
Hash identifier:          +hjWeOizmVcbu0SIMUmwyHS0b4DZY6zs/2vtSyNNTig=
Subject key identifier:   B4:65:84:2F:1C:D8:23:09:BE:F3:FB:0A:37:32:FE:02:34:94:7C:97
Certificate issuer:       /CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
Certificate serial:       010D0C9F4328584B13D6AB5C18834A7D64C7F480
Authority key identifier: C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/0bec5560-5f61-3939-92dc-d3500f8e8095.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2602:fc8b:aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:ab:5c:18:83:4a:7d:64:c7:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=53dd74bf-8716-4e07-b678-9774aceb4f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c6:87:3f:dc:c9:51:00:7d:e6:b1:5b:45:2b:
                    18:28:f5:ac:34:b8:23:19:b0:6b:63:73:4b:a3:b8:
                    51:95:ab:61:04:89:0f:e7:13:83:50:ee:1c:c1:c4:
                    2b:86:f6:66:83:94:0c:32:76:54:76:0c:1b:63:ad:
                    67:8a:34:f2:54:1f:78:8c:18:cc:b0:49:b0:db:56:
                    7c:db:5e:86:ed:a7:10:ff:5b:a5:a3:34:24:19:2d:
                    28:70:1e:4e:4a:18:e1:f7:ff:04:e9:fd:85:bb:19:
                    51:9b:cf:e4:f6:00:1e:ac:a4:c9:1c:4e:3e:3a:f4:
                    17:75:3f:43:b5:bd:0d:68:89:66:0f:d9:e6:2c:63:
                    4b:c9:24:42:93:99:fc:22:7c:07:29:da:b6:be:51:
                    f9:cf:e6:fa:46:a4:37:4c:4e:5e:60:a6:f3:91:06:
                    75:bf:a7:e4:b3:c3:96:e9:f3:5a:31:db:19:e0:0b:
                    f9:92:66:b8:99:69:d6:c6:d4:cf:2a:9f:08:77:6f:
                    ba:e9:ee:3f:e6:39:5c:a9:de:eb:f2:bc:c2:66:34:
                    51:c6:21:8f:2e:63:8a:17:36:35:2a:2a:5d:97:f4:
                    01:1f:0a:44:9e:4c:bf:bc:dc:82:ba:31:5a:a0:61:
                    11:c1:39:fe:87:22:fe:6b:be:aa:6d:33:68:65:40:
                    f1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:65:84:2F:1C:D8:23:09:BE:F3:FB:0A:37:32:FE:02:34:94:7C:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/0bec5560-5f61-3939-92dc-d3500f8e8095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc8b:aa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:69:44:98:6c:dc:e6:0f:18:9a:bc:f4:8d:14:71:ed:d3:ff:
         7a:93:2d:92:e4:12:ae:55:82:38:4f:bb:93:f8:ca:63:9e:30:
         50:4a:fe:29:b5:7c:ef:75:15:68:45:0f:e5:40:80:7b:82:5e:
         2f:23:d5:00:d3:21:5e:c9:1a:7d:f9:7a:5a:08:16:73:e3:a4:
         cc:bd:a0:f9:bb:2d:f7:67:50:96:c4:77:49:6b:76:8d:a8:ee:
         65:35:42:a7:ae:93:d2:16:6e:7a:5a:d9:cd:e3:0f:da:b6:a1:
         f8:6c:c8:e7:90:58:f1:6e:03:67:09:6f:3c:ef:34:1c:0f:1d:
         3c:45:19:a3:49:0d:e0:c8:4b:8b:68:ae:ff:28:93:a7:fb:33:
         52:71:05:3d:41:c9:03:7e:7f:09:32:21:78:d0:f7:47:af:3b:
         2f:36:63:e8:87:8c:e8:0e:d2:ed:3a:52:35:ff:96:81:7d:12:
         89:25:84:78:5f:00:e5:8d:ca:b9:a5:d3:b7:03:eb:17:74:36:
         d2:5e:7d:d7:0d:ab:98:28:73:b7:24:16:18:ea:5a:1e:40:57:
         7b:af:ef:19:b9:dc:29:00:c6:4c:da:df:63:85:56:7f:7d:ee:
         27:56:0a:83:38:61:22:6c:c1:f3:ef:4a:39:a0:65:1b:c4:47:
         85:1a:fe:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:48 2025 by rpki-client