Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/34414dc5-7ea2-417d-af12-618a251553d9/44df918b-73de-30e3-9d73-1474c9db7163.roa
File:                     44df918b-73de-30e3-9d73-1474c9db7163.roa (raw, json)
Hash identifier:          vGjeYq6RNRgNa17Mnr01XQYduHtR//udoTEjECmaqHc=
Subject key identifier:   76:17:1A:7B:CE:BF:FF:B9:58:BD:56:70:ED:75:49:51:6F:2B:2B:85
Certificate issuer:       /CN=34414dc5-7ea2-417d-af12-618a251553d9
Certificate serial:       010D0C9F4328584B3126F9DE7B3CEC6307109800
Authority key identifier: 94:8F:F9:58:48:53:D7:63:0D:E8:89:9E:51:C6:6B:B9:5D:2D:E2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/34414dc5-7ea2-417d-af12-618a251553d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/34414dc5-7ea2-417d-af12-618a251553d9/44df918b-73de-30e3-9d73-1474c9db7163.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     401758
IP address blocks:        2602:f61b::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/34414dc5-7ea2-417d-af12-618a251553d9/34414dc5-7ea2-417d-af12-618a251553d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/34414dc5-7ea2-417d-af12-618a251553d9/34414dc5-7ea2-417d-af12-618a251553d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/34414dc5-7ea2-417d-af12-618a251553d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:f9:de:7b:3c:ec:63:07:10:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34414dc5-7ea2-417d-af12-618a251553d9
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=a4771638-bf21-463b-8839-9ba5f1ad9bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:39:f5:a8:4d:eb:38:b1:37:6d:15:77:69:
                    b6:52:0d:d5:6e:62:4f:44:23:c8:34:49:cf:c0:c0:
                    ed:7f:8a:58:89:7d:cf:02:c1:57:20:e6:22:22:bc:
                    d9:3c:fb:20:99:2c:82:0d:1f:47:b9:9c:51:99:4c:
                    85:86:9c:e4:78:bf:85:4a:d9:d2:49:a4:06:1c:14:
                    c1:7a:67:3f:d5:a5:50:92:36:ff:2c:4e:60:53:1f:
                    e0:f2:e9:8f:1a:85:93:db:1c:6f:d0:e3:2e:db:21:
                    b3:03:32:4b:f5:21:5f:3d:26:75:ce:8d:13:fc:44:
                    66:b2:42:17:23:d9:03:7c:f0:01:9e:84:36:48:9b:
                    90:25:3a:2c:a5:15:d3:f1:a7:44:e7:83:c6:6b:8b:
                    ca:32:13:e8:aa:ac:2b:ef:82:0a:eb:c4:8b:51:63:
                    06:97:4a:f9:42:97:9b:43:d2:b2:1e:24:88:fd:63:
                    7f:d6:19:6e:f7:f7:60:0d:a0:b6:76:1a:9c:2c:7c:
                    9c:59:af:6d:91:65:4b:0d:21:e0:bb:93:df:90:53:
                    cf:da:da:59:26:b9:2c:f0:9a:59:5f:93:86:df:87:
                    fb:eb:36:4f:4c:7f:c2:cd:0b:9e:87:6d:90:bd:84:
                    cb:7e:eb:1a:26:d7:b2:8c:f7:a4:c2:27:09:be:ed:
                    89:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:17:1A:7B:CE:BF:FF:B9:58:BD:56:70:ED:75:49:51:6F:2B:2B:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/34414dc5-7ea2-417d-af12-618a251553d9/44df918b-73de-30e3-9d73-1474c9db7163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/34414dc5-7ea2-417d-af12-618a251553d9/34414dc5-7ea2-417d-af12-618a251553d9.crl

            X509v3 Authority Key Identifier:
                keyid:94:8F:F9:58:48:53:D7:63:0D:E8:89:9E:51:C6:6B:B9:5D:2D:E2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/34414dc5-7ea2-417d-af12-618a251553d9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f61b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:1c:90:79:1f:cd:bc:9c:85:10:d2:88:f8:07:92:54:e6:8c:
         39:59:1b:7d:7b:10:f4:12:74:8d:01:6a:04:e6:6b:58:d2:34:
         0e:c3:37:1c:b0:c7:f6:7d:4b:89:12:1b:4c:fa:09:2a:b0:a8:
         b6:1c:c7:54:ca:fd:82:30:73:d4:cd:91:83:74:62:70:d1:d3:
         09:9c:3c:c0:40:8c:a8:02:ba:70:91:93:13:4b:db:b6:5f:7d:
         71:37:87:59:8c:ec:13:1c:22:5b:d6:27:46:88:52:fd:32:e6:
         7f:6a:19:9c:7f:43:b0:79:9e:a4:c8:69:95:b5:d1:66:db:93:
         76:a5:4d:8d:d4:31:f0:db:32:b5:c9:26:c6:0b:82:dc:1e:a2:
         7a:5e:58:f7:6c:d5:e1:08:de:91:eb:32:b4:59:38:2e:68:4d:
         cb:09:2b:75:31:1f:b3:cd:52:7d:8f:09:0c:d9:dc:cb:62:de:
         6a:7f:6e:13:e9:13:e0:83:97:0a:a8:12:76:6e:90:c5:04:fa:
         dd:9a:9f:05:26:48:bb:53:4a:d6:6a:1b:5d:d3:94:60:85:1f:
         a4:47:27:1e:8c:8a:a6:82:94:0c:fa:47:f0:eb:a9:3a:3d:65:
         4f:e1:19:3d:5e:6b:cc:92:4d:3c:32:23:cc:41:4c:3d:3d:b6:
         21:bd:76:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:07:23 2025 by rpki-client