Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/293283ce-c8b2-3ca8-8fa3-ff57676a820d.roa
File:                     293283ce-c8b2-3ca8-8fa3-ff57676a820d.roa (raw, json)
Hash identifier:          cfsJcrkbXQuZ4QTYXRzpW6+d2db8psn7nBjF0peCysw=
Subject key identifier:   3C:1B:A9:89:0B:67:4C:16:00:3F:F7:CA:D5:26:A0:1D:D4:9C:9D:42
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584AF5215150C5F6C7633641F380
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/293283ce-c8b2-3ca8-8fa3-ff57676a820d.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:2045::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:51:50:c5:f6:c7:63:36:41:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=9e2badb1-5676-499a-bca9-f565255d5813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9a:60:70:19:a2:03:24:69:de:89:d5:b3:17:
                    19:29:dc:24:b6:c9:1a:79:ed:39:1e:89:3a:18:46:
                    13:31:8a:2f:1a:63:bc:7d:d9:69:67:a2:ee:e3:d1:
                    e5:10:4a:67:46:36:5e:77:f3:24:85:20:31:69:b8:
                    23:e3:28:0c:12:51:da:1b:2c:48:88:34:de:71:32:
                    d7:70:bc:40:18:0b:5e:e5:f0:7d:cc:70:0e:56:9b:
                    43:72:22:fb:57:49:a4:99:3d:be:42:83:a9:20:39:
                    90:cd:17:ef:19:5d:bd:43:96:05:fd:19:8c:42:09:
                    f8:cf:66:9b:03:4b:e6:24:d7:e7:35:e9:3c:13:b1:
                    ff:3c:f3:6e:04:19:7a:9b:15:10:5f:7d:35:60:1a:
                    02:b4:2d:6e:df:8c:14:72:c8:6e:cb:bd:07:37:77:
                    ce:e4:0f:85:14:16:ae:e7:5a:7a:8f:ab:7d:bc:97:
                    13:ec:0b:b0:bf:bb:83:21:21:f6:d9:05:5c:84:ae:
                    c5:9f:4e:cc:2f:28:21:68:d5:35:03:91:28:e9:fd:
                    94:c2:0a:2f:78:75:06:aa:81:b1:d7:dc:da:6e:14:
                    a9:b2:ce:e0:92:16:80:89:64:b8:f0:4f:43:be:52:
                    5e:6c:2e:84:6b:ed:f6:d8:48:5b:87:c1:2a:46:65:
                    5a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1B:A9:89:0B:67:4C:16:00:3F:F7:CA:D5:26:A0:1D:D4:9C:9D:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/293283ce-c8b2-3ca8-8fa3-ff57676a820d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2045::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:07:1f:f5:7b:0d:7a:a1:a2:df:28:4c:38:6c:d0:77:c1:04:
         c8:8f:64:b4:84:2b:2d:e8:ee:ce:b0:b7:76:35:8c:36:47:57:
         85:f9:87:49:a6:4c:43:9e:7d:e6:f5:92:6a:ee:9d:91:53:b6:
         c5:6c:af:6f:aa:9b:00:88:bc:90:7e:5a:78:49:e1:a1:9f:a4:
         71:19:8b:31:76:4e:97:59:47:3b:32:64:83:3d:15:48:11:3c:
         26:4e:87:6b:15:c9:69:11:90:28:d8:0f:40:e1:e3:6e:4d:61:
         e8:d5:ab:79:34:ce:ac:14:94:f2:b3:11:e0:52:00:69:02:de:
         11:6b:74:e6:88:ba:ee:ef:04:a5:6e:71:7e:55:b9:87:eb:af:
         e9:ac:a0:7e:ac:e2:27:19:59:b2:81:aa:0a:57:6d:07:18:53:
         f1:35:b6:62:e4:fc:28:31:ed:23:13:48:1f:3c:06:b3:2d:d1:
         37:40:c0:0c:27:71:c4:b4:10:02:25:99:d1:8c:59:38:87:b7:
         90:49:11:7b:c5:45:8d:2d:24:b2:53:64:3d:9d:94:0d:3e:61:
         f8:39:76:87:a4:9b:43:51:f7:90:b3:33:05:d7:31:48:c7:d3:
         08:35:ec:15:65:90:62:26:6d:61:2a:b0:8a:f6:19:fe:6f:70:
         a1:b6:2c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 19:31:26 2025 by rpki-client