Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/3b50eda4-d186-3c03-97d4-3333ad067d0c.roa
File:                     3b50eda4-d186-3c03-97d4-3333ad067d0c.roa (raw, json)
Hash identifier:          N7u8mt1dvizxMk1zUfRzesKsTNZdzLVDYlQntBgEFMA=
Subject key identifier:   07:BA:F2:36:7C:BD:CA:AC:A9:68:A1:1B:21:67:FF:94:D4:A1:6D:A8
Certificate issuer:       /CN=fc4f47a4-5d19-4615-bc02-3360aba2322a
Certificate serial:       010D0C9F4328584AF521551977B10DCCF6368560
Authority key identifier: A1:B5:FF:00:D7:55:06:57:CE:6A:7C:7D:5D:50:1C:C3:D5:93:1B:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/3b50eda4-d186-3c03-97d4-3333ad067d0c.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     25735
IP address blocks:        2602:fb40:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/fc4f47a4-5d19-4615-bc02-3360aba2322a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/fc4f47a4-5d19-4615-bc02-3360aba2322a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:55:19:77:b1:0d:cc:f6:36:85:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4f47a4-5d19-4615-bc02-3360aba2322a
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=7783d558-9b25-4cd2-8c62-3288aae4a66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:69:35:d7:1b:dc:f0:bb:63:91:ef:21:9d:9f:
                    68:8a:c2:d2:60:f2:26:7d:5e:5d:e2:da:a2:06:b2:
                    06:2c:36:cf:2d:96:28:61:a1:e7:3c:7e:d9:96:dc:
                    a6:69:fd:c7:8a:42:9a:a2:7d:eb:58:ea:73:3c:b2:
                    d9:3a:71:c7:d0:29:c8:09:db:f1:52:c3:94:15:34:
                    c7:1c:69:ab:aa:8c:59:9c:1c:ae:d7:f4:e9:48:3e:
                    15:9e:c6:1f:56:a2:2c:9e:00:6b:ae:fd:4a:ec:6d:
                    ac:3a:a0:af:75:5a:18:a4:5d:0f:29:02:5f:55:37:
                    1e:00:8b:2f:bb:87:2f:95:69:75:bc:09:a2:93:69:
                    74:7d:50:c4:0d:dd:52:c9:8b:75:93:b1:5d:b3:25:
                    44:0e:3b:71:67:92:90:27:76:b1:90:58:db:5e:7e:
                    97:ae:ab:8d:d3:3a:4f:75:05:80:24:86:c3:9d:a9:
                    4a:91:a6:90:ed:bf:a7:99:49:6b:f2:cb:f4:41:5b:
                    17:70:63:c1:33:9c:41:68:4a:c8:82:7c:89:f7:d6:
                    75:49:89:17:bf:52:2f:79:2f:89:b9:aa:d6:a9:e6:
                    7a:21:42:dd:f9:61:c2:e8:2f:64:b2:ae:3f:f8:f1:
                    7f:35:30:fb:c4:ec:23:4f:b0:a9:85:54:20:eb:74:
                    b3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BA:F2:36:7C:BD:CA:AC:A9:68:A1:1B:21:67:FF:94:D4:A1:6D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/3b50eda4-d186-3c03-97d4-3333ad067d0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/fc4f47a4-5d19-4615-bc02-3360aba2322a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:B5:FF:00:D7:55:06:57:CE:6A:7C:7D:5D:50:1C:C3:D5:93:1B:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb40:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:8f:24:44:64:0c:88:a3:18:5f:1f:fa:1e:f4:0c:b7:87:e1:
         e0:13:35:49:96:fe:fd:2b:0d:a7:38:bb:9e:66:9c:64:26:b6:
         6e:56:62:8d:66:ef:24:7e:2a:b7:fb:73:93:fd:86:98:8e:c7:
         ce:4a:07:82:f7:3f:5a:39:6d:0b:9f:9a:9c:bb:f1:85:d3:40:
         fb:f8:75:7f:f4:23:7d:fa:24:38:4c:14:59:62:db:cd:31:3f:
         50:62:ef:d1:90:a0:8d:56:38:28:c2:c7:bf:64:9c:fd:9d:75:
         16:84:d2:24:10:95:12:39:ba:37:98:d8:cb:3d:a3:00:9f:36:
         1d:9b:d9:ff:06:28:27:88:f5:a6:e3:1f:c1:80:d9:0c:8b:8c:
         e1:9e:3c:2a:b2:fa:7d:47:af:20:82:d0:71:66:cc:5b:f2:7a:
         dd:99:8c:12:d9:b7:9f:db:37:5d:48:d2:1d:6c:40:55:02:94:
         88:2b:9a:57:da:c4:b8:7d:52:d8:3a:d9:ae:44:16:ce:35:b3:
         48:3b:8d:09:d1:a6:89:1b:81:4f:4b:3a:08:56:a7:3d:9d:01:
         7d:e4:d1:28:45:53:b3:c8:67:65:58:89:ce:17:39:7f:6c:12:
         31:24:4e:c7:3e:29:eb:0a:a5:fe:a2:b1:e9:00:69:e8:7a:aa:
         10:f0:45:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 08:59:14 2025 by rpki-client