Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/57d164f6-e56b-3dfa-8c77-a5f9ae7ec960.roa
File:                     57d164f6-e56b-3dfa-8c77-a5f9ae7ec960.roa (raw, json)
Hash identifier:          JggoTxjBUJCdMd9OLmKgvyUbX0fJgAyBMeV4GILIVEI=
Subject key identifier:   AB:FE:C5:02:9E:06:14:93:13:C9:B6:BF:41:F9:FB:B6:06:AD:04:80
Certificate issuer:       /CN=bc531289-e97e-4da3-a7d9-a36ddfc34cdf
Certificate serial:       010D0C9F4328584B583C819D062793295ED7ED80
Authority key identifier: 0B:90:22:7D:07:1F:F7:BB:3E:CA:84:48:84:2D:38:AB:65:6A:FD:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/57d164f6-e56b-3dfa-8c77-a5f9ae7ec960.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     394446
IP address blocks:        2602:fd1a::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/bc531289-e97e-4da3-a7d9-a36ddfc34cdf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/bc531289-e97e-4da3-a7d9-a36ddfc34cdf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:81:9d:06:27:93:29:5e:d7:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc531289-e97e-4da3-a7d9-a36ddfc34cdf
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=3b4295e0-c6ea-453f-9f96-884edc9d5644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:6f:d0:b9:5d:6f:98:fc:b3:92:5b:4d:81:
                    15:b7:02:23:a6:43:f3:1d:14:8f:e6:41:97:31:bb:
                    58:45:a6:55:14:fa:e2:c5:ba:30:63:7f:f4:8a:31:
                    88:e2:6a:8f:76:33:3a:e6:f9:aa:53:5a:29:35:a9:
                    ff:f2:e4:e1:40:5b:e6:89:8f:3c:2d:9b:71:68:af:
                    e5:4f:f8:5a:30:43:5f:13:4c:24:3a:57:88:e9:63:
                    9d:16:2e:7c:4a:d5:ff:eb:f3:a2:23:37:e2:08:9e:
                    89:ea:4c:61:72:b2:a7:81:91:50:78:d0:75:2a:3f:
                    e4:4c:97:61:ed:c9:75:82:8e:52:88:78:9a:a7:53:
                    52:36:78:cc:bf:93:11:fc:6e:bd:2f:c4:be:82:32:
                    3e:0a:03:43:e0:28:96:29:35:b9:b8:23:2c:73:a6:
                    d2:bc:31:62:8e:44:6b:7c:9c:96:9b:59:28:fe:c6:
                    2f:7d:cd:9a:3c:9a:1a:a6:40:04:29:de:09:2a:8a:
                    b2:15:5f:ea:f5:2c:d6:c5:a0:a7:98:68:89:7c:cb:
                    9c:6a:1a:50:65:4b:93:fc:3b:d3:7c:5b:ee:e6:76:
                    cc:de:48:2c:28:50:24:ed:ba:a9:02:ba:db:22:44:
                    f7:47:c6:6c:13:86:6c:4f:c4:11:7e:58:a6:c4:24:
                    7a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FE:C5:02:9E:06:14:93:13:C9:B6:BF:41:F9:FB:B6:06:AD:04:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/57d164f6-e56b-3dfa-8c77-a5f9ae7ec960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf/bc531289-e97e-4da3-a7d9-a36ddfc34cdf.crl

            X509v3 Authority Key Identifier:
                keyid:0B:90:22:7D:07:1F:F7:BB:3E:CA:84:48:84:2D:38:AB:65:6A:FD:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc531289-e97e-4da3-a7d9-a36ddfc34cdf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd1a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b6:16:d5:ae:aa:b2:15:b4:6e:69:73:f1:07:21:1a:15:35:
         62:e9:d4:e9:bb:75:68:81:be:e7:d4:46:68:16:8a:04:55:26:
         af:7f:89:95:0b:f9:10:77:36:9d:6b:f4:f4:88:c2:fc:72:11:
         f7:56:34:f8:b4:70:c4:5d:e4:54:15:99:94:15:cd:68:8e:f6:
         a2:d2:a2:97:4c:a7:c7:81:ba:1a:ca:bc:84:f7:0b:a1:55:fb:
         02:22:85:f2:a9:4f:d6:a9:40:41:a6:b0:56:ba:fc:ec:7b:8c:
         ae:85:1b:6e:4d:8f:11:c6:2c:6e:72:4e:50:33:6b:ae:b1:3c:
         71:9d:ef:15:b2:bb:dd:38:5b:2a:16:49:f3:f3:cb:1a:d0:9a:
         d6:cd:37:7d:bb:c7:95:84:b6:ba:af:3a:d0:35:52:65:47:ba:
         d5:e5:17:4a:3a:eb:6e:a3:4f:3e:e7:1f:f0:ae:7a:64:1c:d2:
         d6:ec:6d:9b:cf:5a:d6:75:3e:e5:e6:f2:43:ae:fd:43:63:21:
         09:b6:95:b7:af:f7:c3:c2:fc:4e:f4:9b:2a:ac:0e:d3:e5:86:
         36:00:cd:ab:67:36:92:17:63:b3:6d:60:89:e7:02:88:3b:17:
         eb:4d:e7:be:a2:2b:46:4e:a5:b2:3c:99:81:64:39:22:71:cf:
         4a:db:be:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 10:00:55 2025 by rpki-client