Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/b39ed084-6335-3303-91cb-d4bd54f999ee.roa
File:                     b39ed084-6335-3303-91cb-d4bd54f999ee.roa (raw, json)
Hash identifier:          AAwkEaeQ0QZq9DSHly4uwvIXupw4deF3AF449sW9jQI=
Subject key identifier:   3E:6B:56:06:AE:16:A9:D2:09:2E:B2:0D:39:09:30:5E:D9:CA:3A:3C
Certificate issuer:       /CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209
Certificate serial:       010D0C9F4328584B0CDC07E927301AB956EDC900
Authority key identifier: 46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/b39ed084-6335-3303-91cb-d4bd54f999ee.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     20473
IP address blocks:        2602:810:6008::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:07:e9:27:30:1a:b9:56:ed:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=401e4947-7e01-4997-b0df-6c6cbf19ec87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:69:0c:91:25:84:d4:30:86:40:cb:8c:f8:52:
                    65:d7:c5:fc:89:b7:8b:da:31:60:ba:b9:45:b0:3d:
                    8f:dc:32:99:71:fb:19:a4:ca:cf:cc:1a:98:6e:04:
                    19:16:c5:a0:5a:05:f2:7e:fe:9d:63:5c:6d:a7:18:
                    01:49:f7:70:f9:e0:d6:98:81:38:1a:56:15:23:43:
                    10:3a:0d:1a:0f:c1:77:94:e9:d3:6e:80:39:cb:cd:
                    b6:b3:86:ab:a9:2d:68:e8:8d:fc:b9:c2:73:1f:04:
                    6b:ff:ae:2f:7a:b9:2b:f0:c8:bd:86:cd:f9:99:14:
                    44:10:55:2b:55:f0:44:27:2a:b8:fa:48:f1:60:c4:
                    5b:1a:c6:42:71:d4:65:f6:d2:41:79:0a:67:4f:7f:
                    54:41:f4:dc:15:03:47:75:e4:2c:ec:7a:5a:35:43:
                    3e:6e:ef:0a:b5:a8:0b:00:af:5b:c5:ea:3c:0a:81:
                    db:ba:77:3c:03:01:57:22:2f:12:1a:dc:24:8f:ee:
                    e8:26:c8:af:a9:64:6d:19:f5:5f:ce:0e:45:0f:ed:
                    34:7f:da:49:0c:e6:65:28:c0:28:2e:d2:ea:5d:10:
                    da:4c:d9:54:9f:0b:de:19:af:e9:7b:b8:56:b9:35:
                    42:b2:3f:76:8c:a9:a5:a6:8b:9f:76:5c:97:5d:3b:
                    52:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6B:56:06:AE:16:A9:D2:09:2E:B2:0D:39:09:30:5E:D9:CA:3A:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/b39ed084-6335-3303-91cb-d4bd54f999ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl

            X509v3 Authority Key Identifier:
                keyid:46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:810:6008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:7b:3c:7f:ae:ca:d8:ae:37:2a:2c:3d:54:d2:b2:de:98:8a:
         ca:78:ac:08:f3:85:23:f1:09:ab:86:03:22:47:5b:89:9e:69:
         41:ae:98:de:53:bf:a3:14:65:56:2c:0c:74:92:23:64:72:46:
         31:77:f4:98:a6:68:31:0d:e6:d1:e6:01:00:38:0c:dd:85:2f:
         f5:12:74:39:44:95:60:73:a8:f9:40:4e:a3:84:50:45:ad:96:
         fc:6b:a2:c6:00:b3:8f:d8:82:ba:a1:a4:e7:5c:3d:fa:af:b3:
         a4:48:de:92:84:c6:e5:d7:11:8f:ef:6c:ed:23:af:62:66:99:
         5b:46:dd:77:52:5d:f0:54:2f:3c:4b:05:55:8d:7a:e4:b6:05:
         de:12:e9:15:92:d2:68:5d:4d:65:80:7d:3f:d7:7c:cc:49:c8:
         f0:3e:a7:0a:f7:e6:88:4b:e8:10:88:50:b7:ce:9e:2c:13:68:
         83:c8:00:b2:04:5d:e2:38:6b:cd:a6:46:d2:c9:0c:9f:06:41:
         be:25:40:a3:1c:3e:c0:41:12:14:b6:cf:99:a5:a1:fd:4c:92:
         10:82:13:70:49:26:c5:56:28:f3:73:87:cd:30:60:6f:88:12:
         00:11:df:47:07:92:47:75:88:cd:a8:b2:9f:91:60:86:3b:9d:
         a0:98:fe:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 19:22:10 2025 by rpki-client