Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9455e8a6-f627-42bc-bc72-fcb5209dffbf/3a015928-ee8e-3138-adf8-3a94df3634ad.roa
File:                     3a015928-ee8e-3138-adf8-3a94df3634ad.roa (raw, json)
Hash identifier:          bADKxylwPqHQjAmZ3ZAOVj6gHr+O9DAmmsgsiOMf1Hg=
Subject key identifier:   08:69:A7:33:E2:53:65:7F:E9:3C:C7:2D:C4:0D:13:6D:E9:CB:A4:FA
Certificate issuer:       /CN=9455e8a6-f627-42bc-bc72-fcb5209dffbf
Certificate serial:       010D0C9F4328584B477C6B49E7DE28CAED1A9F00
Authority key identifier: B2:59:F8:B8:AB:22:CA:08:0E:44:01:A3:44:AA:CB:0E:A8:83:55:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9455e8a6-f627-42bc-bc72-fcb5209dffbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9455e8a6-f627-42bc-bc72-fcb5209dffbf/3a015928-ee8e-3138-adf8-3a94df3634ad.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     13536
IP address blocks:        2602:faf7::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9455e8a6-f627-42bc-bc72-fcb5209dffbf/9455e8a6-f627-42bc-bc72-fcb5209dffbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9455e8a6-f627-42bc-bc72-fcb5209dffbf/9455e8a6-f627-42bc-bc72-fcb5209dffbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9455e8a6-f627-42bc-bc72-fcb5209dffbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:6b:49:e7:de:28:ca:ed:1a:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9455e8a6-f627-42bc-bc72-fcb5209dffbf
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=3ac225b3-caf0-4678-9ae2-a6b79c37c3a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:13:1f:c9:c5:fc:7b:4b:1a:4c:ed:64:8b:
                    2b:af:8e:6e:c3:b5:5d:bd:f6:c2:76:c9:33:c2:77:
                    1f:9c:2e:c5:6a:27:ef:a8:6b:48:c7:4e:c7:91:6d:
                    38:7e:d9:b6:c9:e9:0c:60:2b:b8:e8:8a:1f:5b:34:
                    f6:c0:94:27:0b:1f:b8:27:e0:31:9d:9c:24:7e:40:
                    54:53:9f:b7:5b:1d:e1:fd:30:2d:59:40:32:b1:61:
                    0d:fa:16:9f:2d:10:e8:39:04:3f:45:9a:65:7a:70:
                    32:b3:c5:96:d0:10:26:e8:1d:c7:d7:df:60:e7:c3:
                    b4:90:ec:cb:4c:12:07:38:1d:b3:d9:42:1b:76:95:
                    9e:ee:68:ec:a2:27:d7:4f:68:18:b9:0a:61:7b:3d:
                    3f:09:a6:18:0f:ea:a4:05:c5:fb:40:69:14:ae:4f:
                    a3:ce:5c:cb:8b:6b:43:6d:ba:0c:92:6b:17:3a:0e:
                    1d:19:ea:9f:99:90:48:ba:0e:11:a1:00:a8:fb:c7:
                    fd:14:0c:65:d3:13:5e:e1:5e:68:dd:ef:92:e7:55:
                    a8:a6:26:b3:81:78:84:c7:d1:09:7a:52:b9:92:29:
                    29:0e:9b:8c:8e:9b:31:ba:ac:86:8f:e6:99:4c:6a:
                    69:72:2d:c6:29:28:75:b1:7b:bd:07:0d:0a:9b:17:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:69:A7:33:E2:53:65:7F:E9:3C:C7:2D:C4:0D:13:6D:E9:CB:A4:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9455e8a6-f627-42bc-bc72-fcb5209dffbf/3a015928-ee8e-3138-adf8-3a94df3634ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9455e8a6-f627-42bc-bc72-fcb5209dffbf/9455e8a6-f627-42bc-bc72-fcb5209dffbf.crl

            X509v3 Authority Key Identifier:
                keyid:B2:59:F8:B8:AB:22:CA:08:0E:44:01:A3:44:AA:CB:0E:A8:83:55:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9455e8a6-f627-42bc-bc72-fcb5209dffbf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faf7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:63:d6:c2:81:5d:a0:3a:a8:39:ad:36:a0:a7:09:19:c8:88:
         ab:9e:93:98:13:0c:64:19:dd:26:91:00:32:6e:fc:a3:fe:e4:
         d1:a7:72:a0:7f:46:f7:66:73:8e:8f:cf:48:fd:a2:a8:e2:fe:
         e5:54:36:ba:48:3f:ce:a3:20:a0:e0:01:fe:17:93:e3:64:21:
         f8:b1:cc:ed:9f:06:88:d8:99:ad:08:ce:3e:32:52:7b:dc:46:
         7f:d0:66:34:cb:98:59:ef:f1:b1:49:f7:d8:97:e8:9f:71:03:
         37:fc:1e:b1:da:f3:6d:5f:d3:02:f5:26:3f:9a:aa:17:85:62:
         ee:77:18:22:27:c6:82:1c:d6:39:25:40:6c:93:22:e5:7a:5b:
         36:73:4a:3c:a9:27:77:63:49:64:58:8a:ef:4a:2a:8b:e5:2f:
         72:36:7e:99:54:82:d5:3a:cd:4b:af:b7:e0:d9:53:2c:35:a4:
         86:90:5f:8b:a0:2d:b4:48:e8:3e:1c:84:d9:a8:ef:4a:51:e9:
         ba:4e:36:0f:1e:2f:7e:a9:16:c1:74:8c:c9:77:c6:9f:a2:4b:
         0e:bc:29:d0:d1:49:bb:7b:eb:6d:b2:91:ce:87:ad:7a:3a:80:
         6f:0d:df:aa:7d:15:eb:15:f2:69:f1:43:20:71:bf:cc:05:32:
         75:c2:4b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:04:45 2025 by rpki-client