Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/48e9f760-1601-35b1-9940-8cfc8cac9a16.roa
File:                     48e9f760-1601-35b1-9940-8cfc8cac9a16.roa (raw, json)
Hash identifier:          vjh+h5yY8ygMlRmGyR+a6M690LpR0dl8lnd58TZw8/w=
Subject key identifier:   7A:3F:F4:69:6B:56:B2:17:7A:EC:0B:12:C1:18:91:09:72:A2:6D:72
Certificate issuer:       /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
Certificate serial:       010D0C9F4328584B64CCA14CBAD1C1C0A0A3E480
Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/48e9f760-1601-35b1-9940-8cfc8cac9a16.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     393732
IP address blocks:        2620:11d:5002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:a1:4c:ba:d1:c1:c0:a0:a3:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=30a302e0-5f56-4096-ac1b-01673dbcb9fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0f:51:b6:62:f3:92:89:41:2c:5c:91:aa:89:
                    1a:9b:04:91:60:9d:d9:9d:c4:67:23:44:15:f0:f4:
                    8f:02:00:ff:41:c1:de:fd:eb:63:aa:2d:3f:55:b0:
                    05:33:bd:d2:24:d0:b0:43:2b:a8:db:27:84:d6:8b:
                    dc:45:31:f2:87:87:b4:1a:09:9a:99:64:05:0a:46:
                    b6:b8:eb:9e:0f:18:d8:ea:bb:c2:2f:13:e1:35:f3:
                    b5:37:8c:35:c2:83:0c:c9:80:bc:68:5b:f2:64:c0:
                    68:97:7b:60:ec:4a:15:1a:f8:9d:93:c9:d2:96:23:
                    30:1c:e6:d3:d8:79:ce:51:22:14:55:4a:99:b1:8d:
                    6d:4e:de:01:93:b6:15:9d:bc:d6:51:15:cb:01:08:
                    91:ab:e2:f9:18:52:38:7a:e0:f5:7c:e5:3a:ca:68:
                    a5:ff:46:a5:8d:8e:96:bc:d6:eb:ef:34:d6:92:25:
                    ee:cc:cd:0e:13:2b:b5:f8:66:a9:eb:97:13:26:7f:
                    79:82:37:f9:5e:20:0a:c5:93:a0:f9:03:9b:99:09:
                    00:84:fd:e7:cc:72:95:0e:7a:d1:20:31:c9:58:97:
                    db:59:5f:81:a4:2d:f2:41:38:fa:72:8a:d9:4a:cd:
                    ad:19:2f:cb:ae:65:56:a6:1d:23:ed:44:20:6e:95:
                    39:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3F:F4:69:6B:56:B2:17:7A:EC:0B:12:C1:18:91:09:72:A2:6D:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/48e9f760-1601-35b1-9940-8cfc8cac9a16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl

            X509v3 Authority Key Identifier:
                keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11d:5002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:14:a6:f4:c2:92:1c:ec:a7:18:c8:98:f3:10:6b:c3:60:dc:
         69:90:f2:44:ac:ff:80:a1:61:22:31:cb:e0:71:da:c1:fb:b1:
         e7:3a:c1:16:70:a1:63:7e:4f:fb:d8:5e:e6:3b:75:d6:68:21:
         1f:24:e5:b0:a8:7e:15:c9:15:07:b9:bd:1e:c4:c5:49:3e:de:
         67:d0:f7:b3:96:72:bb:f3:f4:b7:47:7f:ec:2e:47:47:b1:e9:
         7f:f5:53:24:dd:f7:b1:e0:00:f7:77:4c:0a:42:75:ce:4d:43:
         a4:29:64:53:93:0e:b8:fc:8e:aa:e2:b1:98:ba:99:45:b7:5b:
         8b:94:22:18:75:83:62:fe:e1:23:a6:67:08:e3:ef:33:4a:4c:
         c3:a6:f9:5f:bb:55:56:78:50:33:d3:0a:88:a8:fd:82:f6:f8:
         c1:e6:56:4b:d0:8a:73:91:d1:00:58:91:d5:e8:ec:1a:d9:ba:
         45:24:02:8a:ac:c4:d1:37:a3:4e:96:ad:43:93:7a:61:67:fb:
         56:b7:d7:ba:f3:9c:7b:89:15:1b:0f:0b:76:fa:17:9a:6a:c6:
         62:b1:e2:77:88:22:71:f9:aa:6e:b8:e6:02:ef:ec:26:73:8e:
         99:87:fe:b0:50:56:05:e8:e6:d7:41:9a:7f:b0:d1:13:74:9b:
         0b:a8:4a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:35:35 2025 by rpki-client