Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/6d5b2ac0-9129-313e-8672-3e4f90ff06d8.roa
File:                     6d5b2ac0-9129-313e-8672-3e4f90ff06d8.roa (raw, json)
Hash identifier:          EUJcPOBKIIxgDRkpK6Rcm98nb+7sK4AAujjrNGKCP1E=
Subject key identifier:   E9:72:8C:20:73:BB:6C:70:8E:68:27:63:0D:A9:55:EE:D1:24:85:70
Certificate issuer:       /CN=5742dde3-84a3-4488-a01c-525734c4d81b
Certificate serial:       010D0C9F4328584B0B76AB40D8B2C5D55CE4D880
Authority key identifier: 80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/6d5b2ac0-9129-313e-8672-3e4f90ff06d8.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     399924
IP address blocks:        2602:fc53:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:ab:40:d8:b2:c5:d5:5c:e4:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5742dde3-84a3-4488-a01c-525734c4d81b
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=164a807a-aed6-4360-96c0-31ddc5055afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0a:0c:fd:80:9c:54:13:b4:15:c2:92:c4:99:
                    0a:d3:7f:8a:16:53:55:c0:1c:aa:e3:11:82:e6:cb:
                    8b:87:dd:6f:19:36:77:ba:6b:e0:9e:9f:72:0b:04:
                    da:fd:f0:9e:f4:43:aa:b3:8f:77:9a:d5:ef:f9:18:
                    fc:fc:d1:08:ac:86:40:17:0e:d5:6b:c2:f2:f8:24:
                    02:6b:70:ac:79:59:a3:e4:b1:eb:9c:46:04:65:a5:
                    29:29:bd:b0:8e:80:99:95:16:c1:d4:d4:56:e8:10:
                    28:67:da:ed:aa:97:f7:f2:eb:35:bd:4e:8a:ca:09:
                    15:f4:69:ee:1f:0d:6e:d4:a2:c8:f4:ec:b1:6a:f0:
                    33:b8:f9:33:8a:74:59:e0:ba:97:31:03:47:ba:95:
                    c9:85:db:bc:1b:ec:89:3d:69:2b:83:d0:d2:50:63:
                    0d:d2:72:0f:23:97:c9:75:0d:ed:ef:c4:db:9b:c1:
                    bd:e8:1a:f2:87:9e:88:b2:fe:d1:7d:bc:7c:23:b4:
                    64:a1:60:6e:c5:00:5a:dd:b7:e1:87:28:8d:f4:d9:
                    22:e8:01:74:30:fe:21:22:28:39:cb:4d:21:74:fc:
                    51:02:10:2c:1e:e6:1d:9f:6f:e1:6f:3a:f5:c9:45:
                    55:62:86:49:9c:27:bf:bc:3a:b4:0a:28:6a:d5:24:
                    8d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:72:8C:20:73:BB:6C:70:8E:68:27:63:0D:A9:55:EE:D1:24:85:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/6d5b2ac0-9129-313e-8672-3e4f90ff06d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl

            X509v3 Authority Key Identifier:
                keyid:80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc53:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:45:5e:13:1b:14:05:38:6d:14:f4:d3:3f:39:c2:31:5b:1b:
         e5:31:bc:18:0c:a4:49:c0:39:55:9a:ab:35:f7:09:36:00:b0:
         6e:71:1d:a5:1a:a0:98:b8:a4:80:c2:ee:42:c6:a8:02:a4:e0:
         bf:98:ed:1a:51:34:6e:64:e2:f5:13:c6:3a:f7:43:a0:15:83:
         38:ed:17:79:dd:e6:78:e9:2a:b2:2c:7c:23:3a:5f:0c:30:e6:
         c8:7c:5f:3d:23:e6:29:ad:e0:33:98:dd:12:3a:c5:98:05:6e:
         ba:e8:d7:69:a1:05:e4:82:70:d6:0b:ca:10:a5:22:13:eb:31:
         66:94:75:ab:e9:8f:30:75:47:3e:8d:2e:eb:26:fe:21:7a:f5:
         9c:23:94:61:e4:7a:06:13:f5:f9:db:e1:62:5d:97:c7:29:5b:
         3e:22:28:69:b3:bf:98:0c:91:19:bc:db:23:a9:04:dd:a5:b3:
         fc:b2:e8:74:20:2d:8b:05:5f:6b:23:e4:94:fc:af:00:70:62:
         dd:5f:4a:2e:a5:11:b7:3c:50:0f:92:5a:7c:82:a7:cc:8d:44:
         ce:54:6e:1a:3f:ce:fd:57:6e:9f:34:c7:aa:5c:d0:26:2c:95:
         a6:db:3d:4b:e5:cc:b0:f3:52:f1:b3:a9:8d:b4:89:5a:48:2c:
         2e:01:87:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 06:04:23 2025 by rpki-client