Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/cb309b79-d534-378e-8391-a62dfccc86df.roa
File:                     cb309b79-d534-378e-8391-a62dfccc86df.roa (raw, json)
Hash identifier:          3sNFrRuppNut72sQbGhsQ+ksk+iifmcUm+aiBdXLygU=
Subject key identifier:   F3:E3:72:39:A5:CE:9A:A4:FD:EA:84:30:98:95:0B:C5:5F:D6:BA:76
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584B3556E0FCDADA665A8D804780
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/cb309b79-d534-378e-8391-a62dfccc86df.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     39618
IP address blocks:        2602:fd92:c30::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:e0:fc:da:da:66:5a:8d:80:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=6d5aeb04-5434-45b5-9a45-26004af1f678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:29:9d:e5:aa:b7:9e:a3:d9:07:4d:3c:54:88:
                    80:cf:fb:78:ed:2d:a7:31:c8:e7:f0:08:96:5a:80:
                    ec:91:f1:f1:23:d8:06:e3:59:a6:6d:df:d3:3d:41:
                    03:9d:61:b5:6f:80:20:de:ed:92:13:4a:ec:b7:12:
                    9d:b2:f5:d1:c3:29:3a:b2:eb:63:a9:a5:b6:cc:6e:
                    d1:49:02:ba:22:d5:6a:98:ef:94:2b:95:e3:28:d5:
                    b5:3c:49:9e:90:ac:93:ee:ac:db:e8:20:24:4f:e3:
                    4d:3b:1b:98:72:0e:c9:2a:af:66:2f:3e:ff:85:63:
                    97:24:75:41:8e:b1:59:7a:d3:ec:1d:df:17:89:2e:
                    d0:24:a5:8a:99:54:df:45:94:2a:a1:90:8a:3f:e2:
                    e0:cb:b3:ee:fc:1d:42:e9:a1:a8:64:67:64:00:f7:
                    d5:e1:8b:d5:6b:1b:d5:c6:58:3d:4c:c6:af:77:b1:
                    32:1e:eb:50:92:4b:08:56:3f:1d:f3:82:1b:57:2a:
                    71:63:e6:95:25:d2:a3:48:6e:6d:48:c4:43:c3:a4:
                    09:8f:6c:43:e7:62:0f:9d:0c:70:56:7c:df:d2:47:
                    5b:b4:5c:11:52:bc:96:97:4b:c6:ae:b8:2f:92:17:
                    16:fb:23:51:b4:65:0c:57:43:eb:bd:fc:ee:4f:1e:
                    83:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E3:72:39:A5:CE:9A:A4:FD:EA:84:30:98:95:0B:C5:5F:D6:BA:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/cb309b79-d534-378e-8391-a62dfccc86df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:c30::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:f1:35:0c:2c:00:fe:3c:15:37:78:9f:1a:80:f9:3c:27:28:
         ce:2b:5b:d9:8f:91:93:e6:9b:49:86:74:35:51:ac:c6:2a:33:
         83:21:7c:33:5d:32:3a:f8:71:f5:eb:71:59:3f:33:aa:ff:67:
         73:c5:68:86:7e:9c:b7:0d:7b:17:8f:17:79:85:94:36:36:0b:
         47:b2:b0:29:2b:1f:a8:78:cc:5e:c4:a9:21:ee:9d:33:73:46:
         80:dc:2d:75:f6:49:95:64:32:c8:25:f9:be:bd:95:3c:7a:cd:
         c5:79:77:a3:77:bf:09:ed:8e:48:e7:fe:65:05:06:e5:b4:54:
         0e:8f:ff:75:c1:7e:27:61:5d:08:2d:68:26:59:0d:5d:6a:bc:
         a7:6e:82:1a:45:b1:28:df:37:88:c3:87:1d:33:89:86:99:f2:
         74:93:74:00:d0:d0:0b:40:11:d9:1f:71:49:77:33:03:c0:a6:
         3f:4e:2e:9e:71:63:dc:26:35:07:39:79:9a:1f:0b:41:89:3b:
         d2:c4:30:02:af:b0:73:96:6b:5a:47:06:20:ac:71:a5:62:9f:
         0e:a0:40:e3:0c:bf:ca:4e:92:15:a7:7d:c2:ff:46:74:eb:a5:
         4c:16:69:85:5b:c5:9b:00:2e:ae:ab:15:19:8d:cd:f1:16:f0:
         61:dd:6b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:37 2025 by rpki-client