Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff/24c13717-d7c5-31b8-9e36-c034a159e7c1.roa
File:                     24c13717-d7c5-31b8-9e36-c034a159e7c1.roa (raw, json)
Hash identifier:          8gBWfDbOPM0RCVQsEq2pXDZKKwaGLjMV5uA12RdQ05k=
Subject key identifier:   D4:46:F2:76:F4:92:95:06:D3:44:A5:32:F8:D2:F0:82:C9:3C:0C:D2
Certificate issuer:       /CN=e93b687e-96ad-4930-acf8-896c92d40eff
Certificate serial:       010D0C9F4328584B33F19C446CFD7D9368176978
Authority key identifier: C4:DA:79:31:26:68:92:A2:74:AB:6A:D3:D7:CE:E0:5C:4F:5A:D0:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff/24c13717-d7c5-31b8-9e36-c034a159e7c1.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     211548
IP address blocks:        2602:facc:ff0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff/e93b687e-96ad-4930-acf8-896c92d40eff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff/e93b687e-96ad-4930-acf8-896c92d40eff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:9c:44:6c:fd:7d:93:68:17:69:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93b687e-96ad-4930-acf8-896c92d40eff
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=e61d05da-472a-42ba-8792-0a24169e970c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:5c:03:f8:68:c4:2a:64:36:b4:5b:22:cf:
                    d0:a1:22:17:e1:14:5b:c8:68:50:94:dd:16:df:21:
                    bb:4e:c5:cb:d4:f4:40:b5:40:24:1e:fc:44:26:81:
                    3b:61:9e:7c:6f:03:e8:ec:4c:97:bb:eb:d8:c8:07:
                    2a:9a:71:c8:fa:ec:48:2f:9b:2a:96:bf:0d:d7:20:
                    56:b8:fc:5a:d0:f7:29:7f:02:36:65:36:78:25:6b:
                    66:2e:0a:48:d1:ff:2d:a5:07:56:86:ca:d5:d5:ea:
                    b6:83:77:d8:1a:ca:f0:fe:26:99:98:cf:be:b4:22:
                    f0:c8:f5:53:30:84:89:23:07:37:19:1c:7c:0d:20:
                    1e:59:36:b0:fa:95:f7:b7:5d:4e:62:6c:e9:11:06:
                    0e:15:02:42:ad:fa:6e:f2:4b:a4:15:5b:e3:ad:3e:
                    a6:c3:77:e5:05:1b:dc:2f:9a:b7:fa:f1:30:72:72:
                    c2:8c:7d:5f:cb:99:18:58:50:a9:d4:fc:91:82:fd:
                    0d:da:04:29:20:e0:f6:4d:6b:d3:7a:c4:93:8a:1c:
                    9d:3d:e6:85:4c:d8:f4:10:62:d8:47:95:45:8e:71:
                    15:d6:f6:3f:9e:9d:2f:0e:46:85:62:23:f5:45:79:
                    f5:c5:c3:fd:31:40:db:7d:76:ea:69:cf:57:d4:50:
                    b0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:46:F2:76:F4:92:95:06:D3:44:A5:32:F8:D2:F0:82:C9:3C:0C:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff/24c13717-d7c5-31b8-9e36-c034a159e7c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff/e93b687e-96ad-4930-acf8-896c92d40eff.crl

            X509v3 Authority Key Identifier:
                keyid:C4:DA:79:31:26:68:92:A2:74:AB:6A:D3:D7:CE:E0:5C:4F:5A:D0:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e93b687e-96ad-4930-acf8-896c92d40eff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:facc:ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f6:44:c5:e2:b7:9f:d7:01:42:0f:23:1a:e4:9e:45:12:da:
         ce:4d:c9:a2:c3:20:7f:58:7d:08:cb:f2:af:98:06:ec:22:f9:
         21:b2:31:5b:b7:c8:a1:36:ac:96:80:a0:ee:60:c1:65:69:c3:
         cb:0a:c1:c1:3b:95:c6:62:71:f9:4c:17:6b:12:fc:32:0e:2a:
         db:de:d4:15:a3:13:96:b9:71:30:2c:ca:9e:ef:9d:95:2c:d9:
         e2:14:c0:02:5c:29:69:ed:fd:eb:af:aa:17:c7:92:94:63:28:
         cd:71:66:db:28:74:ec:15:1c:c3:eb:b2:16:89:81:77:f7:07:
         27:1e:96:07:40:15:13:93:e5:6b:b9:2c:1f:c9:fe:3d:9c:59:
         9e:0d:79:51:0e:1d:73:58:c2:48:10:d2:86:2a:79:73:ae:bb:
         5a:25:82:65:72:63:00:77:33:f0:4a:d4:fb:9d:8c:2f:60:b8:
         77:b3:68:63:6d:d9:77:54:f5:ed:a2:29:a1:4e:8a:64:79:3c:
         4e:ac:9d:df:f2:6e:d2:72:7a:29:81:55:6c:16:56:c9:86:de:
         db:ef:84:19:cb:a6:31:de:23:ff:fa:31:96:5d:35:1a:be:d7:
         e6:71:eb:7d:98:ec:af:f6:c0:6d:f8:62:5c:41:fb:90:86:8b:
         82:b7:f9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:37:54 2025 by rpki-client