Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5b0e913e-6331-377e-ad38-c00fd513c783.roa
File:                     5b0e913e-6331-377e-ad38-c00fd513c783.roa (raw, json)
Hash identifier:          qA6xmFsF9ZB7OM1jJJkneOHW7nlvS30F5oDGnV8s+BI=
Subject key identifier:   39:E2:A6:F1:2C:48:E7:D7:68:8A:9B:0C:71:18:D2:A7:F1:C4:FE:3F
Certificate issuer:       /CN=5742dde3-84a3-4488-a01c-525734c4d81b
Certificate serial:       010D0C9F4328584B0B76AB2870123E6AF41E9080
Authority key identifier: 80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5b0e913e-6331-377e-ad38-c00fd513c783.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     399924
IP address blocks:        2602:fc53:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:ab:28:70:12:3e:6a:f4:1e:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5742dde3-84a3-4488-a01c-525734c4d81b
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=d79e8ebf-821a-402e-b7cc-69cd2aec7b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:01:1e:54:9e:26:97:b7:76:de:1c:dd:65:22:
                    63:d2:d4:31:4e:ed:d4:97:c2:17:d6:7d:b9:4e:83:
                    4e:aa:7a:bb:fb:0c:e5:d8:0d:0f:bf:bd:13:53:29:
                    21:9e:c9:b9:27:55:e5:30:0a:d7:c4:04:6e:86:11:
                    29:87:0e:99:3a:15:e4:8e:c0:ed:aa:49:13:57:e7:
                    d9:45:48:ab:d8:ce:b8:b9:5b:b1:53:68:e8:9a:57:
                    e6:ef:90:94:f8:05:b5:2b:52:24:6a:48:a7:d2:8f:
                    a8:47:1d:1f:e4:41:3b:b4:77:9c:ec:cb:10:c1:6d:
                    3c:05:5d:4d:fc:76:8a:8c:c0:74:dc:bf:0f:99:44:
                    85:8a:c0:ef:86:ee:72:38:62:c4:f9:ce:69:b0:25:
                    89:31:ae:d1:73:59:fd:e9:cb:88:90:1e:35:6d:7c:
                    8d:79:1a:09:77:25:85:63:c9:d4:83:1c:c4:a5:31:
                    2c:54:70:cc:47:b4:75:f9:96:6b:75:13:fe:07:23:
                    c5:67:65:70:e8:0e:80:1e:e1:0d:18:82:34:cc:ba:
                    23:88:b9:01:04:c2:da:fd:1c:0e:9b:b9:a9:a5:73:
                    be:39:f9:71:da:33:1c:33:fd:59:4f:c6:b6:08:dc:
                    49:40:30:70:b7:bb:df:1d:ad:f4:f8:7f:b5:ab:a3:
                    72:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E2:A6:F1:2C:48:E7:D7:68:8A:9B:0C:71:18:D2:A7:F1:C4:FE:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5b0e913e-6331-377e-ad38-c00fd513c783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl

            X509v3 Authority Key Identifier:
                keyid:80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc53:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:57:3c:4e:af:7c:06:10:d9:36:a0:70:51:31:e7:43:09:c8:
         59:6a:35:8a:35:67:15:99:61:b4:f3:63:c0:0a:d2:5b:23:16:
         ad:66:c9:eb:02:2e:d5:d6:57:d9:11:a1:4c:98:fc:51:72:33:
         94:63:3f:03:33:4d:4b:ba:b1:eb:be:27:18:f3:e8:a9:fb:bc:
         3c:24:cf:63:46:5d:eb:51:15:7e:9e:cd:5f:1b:24:08:fa:77:
         5a:35:ad:e9:14:00:ea:54:83:ad:0f:85:12:48:e6:62:ba:52:
         35:c7:58:b1:a8:22:d7:38:ae:50:8a:92:97:7a:17:79:d6:04:
         f5:fb:0d:48:16:90:48:7c:e5:f5:2b:4f:6c:67:c9:97:64:b5:
         0b:df:31:d1:01:c5:37:99:01:dd:e4:cc:7b:09:31:45:47:f1:
         93:c5:df:30:3b:6c:28:59:b9:df:87:84:ba:20:5e:3e:01:f3:
         8f:eb:b3:ec:9d:64:4b:b7:5a:aa:10:33:c1:d1:33:13:29:d5:
         f5:f6:b4:af:20:f9:be:c5:c1:fd:01:4a:63:50:06:91:e2:54:
         78:6f:7a:2c:1d:e4:86:78:68:5a:f3:26:57:57:23:a7:71:6e:
         6f:2b:8e:c3:15:50:f8:4f:e9:95:11:7a:1a:a4:23:82:a7:e4:
         72:5a:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 06:02:09 2025 by rpki-client