Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/6e7dcfcc-dc99-3e6c-a84f-01f50c4d1d8a.roa
File:                     6e7dcfcc-dc99-3e6c-a84f-01f50c4d1d8a.roa (raw, json)
Hash identifier:          +J85KlkX6meSlpn8QgnR61Rb36kiHVlWjQ1ZB6s/Q2k=
Subject key identifier:   82:34:DB:98:50:E3:7C:F7:CE:1C:72:25:84:51:FB:BE:BF:4B:3A:FD
Certificate issuer:       /CN=5742dde3-84a3-4488-a01c-525734c4d81b
Certificate serial:       010D0C9F4328584B0B76AB12BE99AB590E0B1380
Authority key identifier: 80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/6e7dcfcc-dc99-3e6c-a84f-01f50c4d1d8a.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     399924
IP address blocks:        2602:fc53:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:ab:12:be:99:ab:59:0e:0b:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5742dde3-84a3-4488-a01c-525734c4d81b
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=e4760ea4-6bf8-4fab-a627-06e31858d84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a8:8b:11:f5:2e:6e:fe:11:56:0d:da:18:d7:
                    f1:3c:fb:aa:e9:bd:89:b8:80:2d:bd:21:ab:ee:72:
                    50:90:34:e0:a5:62:42:0d:73:67:3d:2a:21:e5:4c:
                    c4:54:30:1f:01:7f:4b:00:86:bc:04:92:cf:54:a8:
                    62:ca:77:d2:23:00:c9:ee:b1:02:d8:7f:ca:72:96:
                    f5:38:c2:cb:bb:d7:fe:f0:0b:bd:46:11:02:49:7b:
                    fa:20:08:3b:ea:29:c0:49:a6:8a:5c:29:89:38:20:
                    f7:b4:60:f1:11:45:35:45:1c:8b:50:57:a8:67:ab:
                    f1:6f:22:ec:9c:0a:61:35:ff:8d:f2:eb:af:09:c3:
                    38:96:c5:02:eb:0b:50:20:6c:dc:b1:a5:43:27:57:
                    8d:34:ca:f6:be:fc:a7:12:9f:ff:76:39:32:46:ea:
                    c3:a0:6e:13:32:ac:69:7c:4b:80:51:38:f0:d5:89:
                    2f:34:ed:8f:53:12:37:c9:4d:91:ab:bf:d0:a1:05:
                    8f:1e:1a:a5:66:4a:e6:25:9a:a4:cb:e6:50:3a:09:
                    92:94:02:54:b8:56:a8:8b:cc:a7:69:2c:c1:80:af:
                    40:47:c1:8f:f1:80:83:87:3c:c3:4f:75:9d:48:68:
                    d0:e7:c4:e9:41:99:1b:02:f7:7b:ec:59:cd:03:c9:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:34:DB:98:50:E3:7C:F7:CE:1C:72:25:84:51:FB:BE:BF:4B:3A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/6e7dcfcc-dc99-3e6c-a84f-01f50c4d1d8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl

            X509v3 Authority Key Identifier:
                keyid:80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc53:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:95:a5:7d:51:0f:d8:ee:3d:d1:31:dc:fb:49:39:e9:ab:e5:
         61:32:fe:59:0a:b1:9d:0f:fe:c1:9d:e9:da:8c:46:75:68:75:
         89:fa:71:40:85:94:61:17:08:18:d1:51:64:2e:74:a8:82:44:
         29:5b:60:53:78:80:00:6b:a1:35:a4:09:70:0f:5d:14:eb:9c:
         56:ad:ad:be:8a:73:c1:ed:06:16:91:7a:bc:9d:29:53:51:10:
         ed:21:ac:ea:39:3e:6a:fe:dd:0c:c6:72:1b:ea:f2:4c:4a:1a:
         9b:8b:1d:87:78:a0:8d:b6:ed:73:6e:12:a1:8c:9e:a8:df:6f:
         fc:a2:64:1e:13:86:a2:9b:46:59:df:eb:d6:c0:d6:76:27:19:
         86:cb:41:96:35:26:4f:b8:ff:ad:89:22:2b:7f:0b:c2:22:b4:
         31:15:1b:29:86:4a:97:8e:c9:66:86:d7:5a:d5:1b:7d:03:28:
         38:54:f7:e5:fc:a0:73:47:c8:98:59:74:e0:ec:c2:2e:88:04:
         8d:43:14:86:7d:ed:5b:64:1c:98:ac:89:f7:73:5f:ed:19:55:
         5b:c9:20:08:bf:30:76:e9:9c:2a:ca:94:d8:b1:d9:38:8c:16:
         fd:5f:4b:91:3a:90:48:fa:0a:80:91:60:af:fd:5b:a3:7a:a5:
         60:4d:21:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 06:01:45 2025 by rpki-client