Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/7418dab0-3256-3eae-b773-87d5e7bb6fb5.roa
File:                     7418dab0-3256-3eae-b773-87d5e7bb6fb5.roa (raw, json)
Hash identifier:          R9RR+HCdog6GlwVzopW7Alq2uPn7ntcfvx49LG+uW7A=
Subject key identifier:   97:58:BE:31:1B:0E:0F:5D:A1:54:21:48:8A:C9:69:F4:8B:4F:10:E7
Certificate issuer:       /CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569
Certificate serial:       010D0C9F4328584B44B1B417E74B0B7C17ADA150
Authority key identifier: D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/7418dab0-3256-3eae-b773-87d5e7bb6fb5.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     11611
IP address blocks:        2602:fd61::/36 maxlen: 36
                          2602:fd61:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:b4:17:e7:4b:0b:7c:17:ad:a1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=86cf4610-bc38-4da6-911c-a1d7de442002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fd:3c:85:1b:98:f3:d9:8b:71:34:97:79:bc:
                    ac:5e:0b:17:59:92:36:dd:b3:ae:15:e2:cd:ac:d6:
                    74:d0:52:f4:a8:28:bd:69:43:a0:bc:62:a3:b3:17:
                    59:0d:8e:0d:90:57:cf:c8:79:02:7d:33:82:e2:2e:
                    9b:6d:df:f8:23:e2:56:f3:1f:1b:ea:7c:77:d0:23:
                    f8:70:dd:ea:53:9a:14:ae:f1:43:48:8b:89:00:e2:
                    37:d3:68:8e:07:e1:45:a8:2e:70:4e:2b:5c:42:6e:
                    23:60:9a:23:c0:52:df:2b:b1:1f:d9:f5:11:d8:9f:
                    f6:94:fd:ad:67:2a:46:0d:d0:6c:da:95:63:39:c1:
                    d1:21:fd:90:ca:8b:f9:57:6d:36:52:f5:a9:94:fd:
                    9b:ca:49:b3:0a:18:32:b1:5d:74:0a:53:09:fb:80:
                    d5:0a:a9:75:51:05:73:83:bb:d6:c0:6f:05:cd:f8:
                    38:95:a6:db:db:63:42:50:8a:82:9a:2d:c6:5d:a4:
                    70:5d:24:af:d3:30:8a:38:fc:1b:11:b0:af:09:0a:
                    b7:fe:9e:e7:c2:b0:2d:51:af:05:cc:92:31:83:8d:
                    80:2e:db:ae:b9:0b:59:dd:0f:43:c8:8e:16:0c:22:
                    fa:71:f2:ee:0b:7a:c1:ac:76:18:37:85:01:f2:3d:
                    a5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:58:BE:31:1B:0E:0F:5D:A1:54:21:48:8A:C9:69:F4:8B:4F:10:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/7418dab0-3256-3eae-b773-87d5e7bb6fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.crl

            X509v3 Authority Key Identifier:
                keyid:D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd61::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c3:d3:9a:96:1d:47:ed:67:2f:09:e3:84:97:88:08:2d:9f:
         8b:52:f0:35:ec:fa:a7:49:b2:4a:0e:b2:07:61:0a:ac:0d:42:
         24:15:18:b2:47:a3:25:b7:a1:14:fb:67:c3:80:9e:67:3b:85:
         28:9e:ab:0d:6d:4e:9c:47:50:3b:d2:b4:51:ce:36:fa:94:b2:
         96:45:7f:ff:57:19:4c:22:d6:5f:05:1c:b1:25:0f:15:e6:23:
         8c:9d:fd:b8:bd:09:c3:fa:29:91:8b:76:80:f8:df:e8:85:da:
         4c:29:70:bf:5e:b9:94:50:a1:fe:74:27:1a:9e:bd:f2:69:29:
         14:ab:4a:07:fd:e7:8b:39:50:13:ed:92:f7:22:3a:67:3a:c0:
         ee:8d:1a:2c:37:6b:53:6b:87:fc:c7:fd:e7:1b:2e:59:42:35:
         50:78:3f:95:4d:e7:fc:35:d7:2e:eb:5e:cc:4d:cd:d1:c7:fe:
         bd:5c:39:50:d5:fa:7f:a4:c4:96:be:97:7e:99:74:bd:c7:51:
         ff:24:8f:89:be:5d:75:e5:4b:55:02:f3:f1:45:ce:56:99:7d:
         62:35:07:bb:a5:54:22:c1:5b:cb:37:90:30:33:25:93:d3:bb:
         5f:a6:8a:b6:11:69:7f:58:f4:40:ef:8f:b4:0e:56:1b:12:6c:
         6a:45:eb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:40 2025 by rpki-client