Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/bdf7a273-4d0f-3ffe-9529-371db3e0362f.roa
File:                     bdf7a273-4d0f-3ffe-9529-371db3e0362f.roa (raw, json)
Hash identifier:          4aPMkPK6VeMDpjhC/0d0tNZPgujbV1pX0PeEARdU1zs=
Subject key identifier:   54:44:CE:7B:67:06:12:0C:71:02:39:8C:F7:98:9C:B6:C6:2E:82:F6
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584B48E1C0332B8EB653A27E9A98
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/bdf7a273-4d0f-3ffe-9529-371db3e0362f.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     18526
IP address blocks:        2602:fd6f:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:c0:33:2b:8e:b6:53:a2:7e:9a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=b6dd5c67-ebf8-4073-9a74-a626caae4f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1f:79:ce:54:45:c1:e7:69:bc:96:94:97:06:
                    5b:22:68:f8:45:8f:b9:ad:04:dd:d6:76:cf:d0:85:
                    cb:95:06:23:ed:e9:91:75:83:41:f4:22:d0:00:ca:
                    fc:8c:a3:5c:c6:11:2b:f7:98:93:0c:64:7c:86:bf:
                    a4:93:98:1b:78:99:92:e2:1c:2f:83:fd:ab:bf:e5:
                    12:cc:a8:21:62:b0:31:99:09:ad:3a:0d:e7:e1:f0:
                    35:f4:9f:41:58:ff:cd:81:c8:0b:0f:91:97:8e:81:
                    88:f9:45:e9:f1:ba:4a:34:68:30:c6:84:5f:30:fc:
                    85:5c:d5:95:80:cd:fc:cc:96:3b:a8:e4:ea:ec:59:
                    e7:15:59:da:94:ca:91:14:fc:49:63:97:8d:6f:5f:
                    84:e0:fa:f1:91:5b:e8:69:9b:91:e9:c9:f6:eb:71:
                    68:70:97:1c:5c:27:80:f2:fe:b7:1c:94:6f:19:72:
                    a7:18:34:46:28:4d:49:38:39:07:53:c4:8e:18:fa:
                    9e:08:2b:49:04:fc:db:5f:18:b1:65:64:ce:39:90:
                    18:ad:66:dd:4d:32:44:ce:59:04:d3:00:d1:ae:95:
                    31:7c:fa:67:72:18:71:6d:1f:4c:c9:96:1a:7e:3f:
                    8a:4e:a6:50:ae:e4:70:23:10:de:3c:cc:95:fd:90:
                    7d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:44:CE:7B:67:06:12:0C:71:02:39:8C:F7:98:9C:B6:C6:2E:82:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/bdf7a273-4d0f-3ffe-9529-371db3e0362f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:75:24:8b:5f:82:f4:1f:55:eb:0c:c7:55:7f:47:83:de:d6:
         19:5d:a7:3f:a8:13:77:06:e7:f7:ff:cc:1c:ea:85:56:1a:8d:
         fe:e8:3d:36:76:11:48:38:b9:11:30:e8:ca:58:d0:99:20:5f:
         9d:1a:7f:68:b7:3a:af:b7:e0:d1:41:a5:f7:b6:ad:01:78:9a:
         2c:32:dc:20:97:b7:e4:91:26:88:e7:c1:74:5f:97:f2:84:1e:
         b0:f7:4a:8c:6e:23:60:7a:08:72:c6:7e:4a:46:ac:7b:89:2d:
         65:0f:4d:3b:52:e1:64:82:8d:5a:a3:e6:bd:fc:f0:3b:fa:e1:
         e8:40:92:bf:90:de:09:97:5e:17:f6:ec:8d:b7:79:3a:13:99:
         cd:da:19:e0:a5:1d:57:c1:9a:64:e7:a9:f1:1a:7f:ee:82:8d:
         5c:94:01:f8:2a:59:1f:eb:6b:13:b8:38:48:18:49:6b:3f:50:
         bc:53:f7:0c:76:ab:9e:47:65:3f:68:65:7f:37:18:cd:f2:c8:
         a8:11:6c:3d:4f:8b:17:34:04:e5:e0:65:19:21:9f:0c:67:07:
         43:67:c7:38:b0:72:5c:c8:37:ac:9f:d4:c3:a7:bc:15:98:85:
         02:14:eb:7f:00:1c:03:d1:15:3f:ed:71:cb:e0:65:7a:85:2b:
         37:78:a8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:53:14 2025 by rpki-client