Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/7728bee1-fcc1-33fc-84c6-0aa328e2f1b8.roa
File:                     7728bee1-fcc1-33fc-84c6-0aa328e2f1b8.roa (raw, json)
Hash identifier:          6NEdOrAU6cAuh09cesLQlpQc0OFF2dH9icijZtTSZC0=
Subject key identifier:   37:EF:1A:78:7B:ED:AA:85:7A:FF:04:8F:E8:AE:BC:11:A4:8A:F1:D2
Certificate issuer:       /CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6
Certificate serial:       010D0C9F4328584B1D9C29A5A98BF5945A6DE000
Authority key identifier: DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/7728bee1-fcc1-33fc-84c6-0aa328e2f1b8.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     393746
IP address blocks:        2602:f95b:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:29:a5:a9:8b:f5:94:5a:6d:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=a0328b6a-36d3-4eeb-b796-f64b25e95052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e1:01:9f:c9:00:be:fd:8a:28:b7:46:bb:fd:
                    42:f7:6e:69:ce:a0:95:99:6f:f7:4f:8d:5f:6a:7d:
                    58:c9:be:03:00:97:80:10:c9:00:97:80:ef:04:4c:
                    dd:fc:d7:6a:28:0c:fc:08:13:12:33:cd:d3:eb:e1:
                    a3:d7:d6:e9:9e:83:5e:90:e3:54:d9:3e:d2:d2:21:
                    55:54:81:68:5a:e1:2e:96:68:d5:60:17:dd:e8:dd:
                    99:ee:e0:7d:28:ae:12:45:5e:a0:d9:48:67:85:e0:
                    db:bc:1e:e7:58:12:8b:de:eb:b1:44:8e:49:78:89:
                    ab:f4:bb:3c:f4:a4:5d:ba:91:d3:e0:af:64:02:55:
                    26:b2:0b:60:5b:12:0f:f9:cb:80:26:2e:40:ba:83:
                    12:ca:58:64:ed:ee:da:60:ec:a8:4f:6a:bb:7d:da:
                    00:df:67:4a:15:92:17:1f:9a:59:92:1d:4b:2d:09:
                    fe:37:6e:d2:7d:3f:9c:26:8b:60:0a:93:fb:90:f9:
                    69:25:94:5c:4d:65:69:7d:9d:ac:2b:34:45:17:92:
                    06:8c:93:d3:99:cb:87:ee:d0:64:65:83:ab:39:b4:
                    b2:40:8d:ca:7c:01:75:2c:8f:75:58:f1:6d:fa:4c:
                    28:3f:ef:e6:29:5f:d5:69:15:24:26:f9:22:04:ca:
                    bf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:EF:1A:78:7B:ED:AA:85:7A:FF:04:8F:E8:AE:BC:11:A4:8A:F1:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/7728bee1-fcc1-33fc-84c6-0aa328e2f1b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl

            X509v3 Authority Key Identifier:
                keyid:DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95b:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:9e:fc:67:bd:99:1c:1d:b7:70:cf:bf:c0:e1:a2:c8:58:c6:
         b7:58:d2:e2:31:20:ce:50:0a:d4:75:60:b9:52:08:8e:c5:df:
         e3:49:52:05:02:40:be:1f:fb:49:ea:9e:8c:36:5c:ef:31:63:
         fb:a4:40:fe:c9:d4:c4:c7:13:11:1e:8b:52:3d:c3:93:3a:d7:
         35:8b:fd:eb:cf:54:2d:2a:fb:21:10:18:65:b3:e3:e9:81:27:
         86:72:cb:26:e4:4f:8f:33:a0:d6:b3:d5:27:99:a5:e6:a1:f5:
         89:86:01:29:6d:26:d0:d1:8e:22:f8:8b:41:bf:62:8f:e3:a8:
         1f:3b:09:80:73:5e:f9:14:56:9e:e3:27:c5:7d:a0:ae:4c:7d:
         ec:fc:d1:38:ff:9a:bb:d0:3a:81:56:f2:2e:11:b2:8f:7e:6e:
         71:80:ad:99:18:33:22:3a:4d:20:4a:22:93:31:b0:aa:5d:21:
         dd:d6:54:58:91:4f:0e:8c:b2:93:2e:e6:7e:98:d2:a7:78:61:
         5d:e3:50:63:61:ca:28:5c:88:a3:c0:67:8a:ed:9a:48:41:04:
         41:dc:a6:65:49:26:1e:89:54:97:79:ce:fa:6d:c8:a1:ef:3e:
         0b:26:e5:70:ca:80:8f:1e:dc:ac:5a:61:1b:eb:b7:28:bc:fb:
         5b:73:54:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 20:34:39 2025 by rpki-client