Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/43b737f8-5d33-38f5-9659-04f92c5f69ec.roa
File:                     43b737f8-5d33-38f5-9659-04f92c5f69ec.roa (raw, json)
Hash identifier:          amPq+KzGsoQPStkZrjQtexflKZKE4DslhBiAp7S5pyE=
Subject key identifier:   92:1D:4B:92:FF:AD:A4:94:12:A7:32:27:3F:54:6B:E8:6A:CD:52:A1
Certificate issuer:       /CN=a076692a-65ec-4598-b231-91f6d6e63c63
Certificate serial:       010D0C9F4328584B2066D2B25A59AF10E6551BE0
Authority key identifier: D6:A5:79:4D:44:9F:D0:0B:B8:6E:CC:C8:49:3C:17:71:0B:4D:F9:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/43b737f8-5d33-38f5-9659-04f92c5f69ec.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     401418
IP address blocks:        2602:f7d0::/48 maxlen: 48
                          2602:f7d0:1::/48 maxlen: 48
                          2602:f7d0:2::/48 maxlen: 48
                          2602:f7d0:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/a076692a-65ec-4598-b231-91f6d6e63c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/a076692a-65ec-4598-b231-91f6d6e63c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d2:b2:5a:59:af:10:e6:55:1b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a076692a-65ec-4598-b231-91f6d6e63c63
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=0234e349-f77d-4175-a53c-8ac3a0ee8eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8f:87:f1:3d:28:74:ec:0b:e6:4b:77:66:6b:
                    e7:13:d2:3d:87:79:6b:cb:29:3d:aa:85:6b:13:7e:
                    e1:fa:b3:2a:ba:ac:fd:a5:83:89:9f:2f:a9:f3:d1:
                    65:48:8c:49:53:69:3e:03:63:28:cb:c5:6f:0b:ff:
                    8e:1e:0c:0e:cf:93:11:22:03:84:25:6c:30:81:75:
                    8f:33:66:31:bc:cc:43:49:82:66:e7:f7:fa:dd:f5:
                    6c:97:3e:71:29:15:ff:a8:eb:f7:49:20:85:24:c1:
                    76:c5:7f:86:48:e5:56:02:37:62:5e:22:3c:d5:8d:
                    2a:a1:f6:5a:e9:6d:7e:eb:f1:89:21:42:cf:71:5a:
                    36:19:47:a4:35:5f:2b:8c:84:67:fe:4d:ac:cb:ba:
                    6a:85:59:b8:b7:9c:42:c7:6b:6e:6e:07:fa:88:fc:
                    78:97:8d:29:22:20:8f:5e:b6:c9:7e:c9:6b:7f:86:
                    bf:29:d5:7c:f7:c5:51:41:f2:31:32:fd:d2:73:da:
                    70:42:2b:01:ed:20:2c:b2:ea:2d:2a:3d:d5:da:c3:
                    6b:38:d8:18:60:c5:62:9d:87:eb:36:c1:6f:9e:36:
                    a7:24:7a:c5:34:07:e8:b9:06:af:d8:d9:a5:77:e4:
                    6a:40:3d:c8:62:f6:15:ab:34:c7:c2:db:81:44:1b:
                    cb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1D:4B:92:FF:AD:A4:94:12:A7:32:27:3F:54:6B:E8:6A:CD:52:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/43b737f8-5d33-38f5-9659-04f92c5f69ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63/a076692a-65ec-4598-b231-91f6d6e63c63.crl

            X509v3 Authority Key Identifier:
                keyid:D6:A5:79:4D:44:9F:D0:0B:B8:6E:CC:C8:49:3C:17:71:0B:4D:F9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a076692a-65ec-4598-b231-91f6d6e63c63.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7d0::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:93:e1:fb:44:c1:6b:04:69:b8:2b:b5:6e:dd:d5:cf:2e:2c:
         36:3f:a3:8e:99:c3:9a:f0:43:8e:86:25:b2:ac:c5:a5:99:5f:
         ac:d4:09:a0:e5:64:41:95:6b:9b:01:62:5c:95:8f:88:d6:8b:
         1e:4a:5f:ee:82:8f:2a:e1:26:1b:3f:6a:7f:4b:e2:7a:18:81:
         17:9a:11:eb:c0:23:12:95:77:2a:0f:32:44:14:60:23:f8:61:
         67:23:55:7a:b9:00:e6:8a:51:a2:e0:83:c3:e7:41:f6:a6:ca:
         55:dd:fb:32:0a:9a:ea:78:da:86:92:aa:f3:72:65:d6:f9:1b:
         b2:64:73:05:d2:71:c3:e2:65:63:4f:01:0b:76:11:79:ae:ec:
         b1:14:ba:1a:5d:9d:75:8e:6f:e8:3a:0b:5f:cf:fb:b1:eb:cb:
         b8:9e:d2:04:08:2a:f4:d6:e9:ce:c2:fb:83:52:db:3b:43:58:
         7c:be:08:4e:87:2f:9b:c3:fa:9d:c1:85:b6:98:fc:cb:a5:85:
         c0:8e:ee:28:61:c3:b4:48:d6:30:f2:87:c1:87:26:cf:c7:df:
         e1:29:9f:5b:0d:35:94:93:8c:52:22:4e:90:2c:f5:95:69:59:
         dc:84:e6:20:fc:25:8a:5c:39:f4:0b:83:e7:6e:9b:b3:f4:cd:
         cb:0a:00:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 14:06:36 2025 by rpki-client