Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/fc8157c6-7c1c-3f32-a229-61a454c91ac7.roa
File:                     fc8157c6-7c1c-3f32-a229-61a454c91ac7.roa (raw, json)
Hash identifier:          XNUmmNNf+oC5eiprwQX/uTfLTycx4MtvlS2sc54K7CU=
Subject key identifier:   0C:FC:F4:B9:EF:B2:E5:0B:2A:E2:01:07:9A:AF:45:FA:41:1E:26:16
Certificate issuer:       /CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546
Certificate serial:       010D0C9F4328584B2CF718010CEC76F13BA02880
Authority key identifier: 2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/fc8157c6-7c1c-3f32-a229-61a454c91ac7.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     394106
IP address blocks:        2602:f6a6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:18:01:0c:ec:76:f1:3b:a0:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=50cf0c22-24eb-4942-9777-1fae5c776dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c0:82:bc:23:d9:4f:5e:03:19:f7:ca:a8:e6:
                    3d:13:37:e2:3d:ad:55:e2:2e:a1:0c:e1:51:b0:45:
                    36:22:86:2f:b6:ff:f6:74:cd:14:1e:f7:dc:2b:95:
                    29:c9:18:72:65:e6:ac:a4:16:8e:5a:36:80:00:26:
                    01:b2:4b:84:2c:8b:09:e9:96:9e:35:f4:6e:1a:20:
                    a5:fd:8e:95:de:0a:49:52:1f:8d:19:08:b7:cb:4e:
                    f9:43:fb:82:9f:07:3c:a9:46:db:eb:da:a2:5e:f8:
                    ca:2b:5c:b6:ca:78:b3:6c:a6:0b:33:e1:19:ee:10:
                    aa:56:fe:a7:64:a4:eb:b2:9e:44:5d:99:fd:60:ec:
                    49:11:a0:e1:ee:d7:ef:60:5a:2c:0e:2c:0a:66:ed:
                    08:67:e2:ef:e9:d9:f3:ce:e9:35:e4:36:91:e4:1a:
                    23:8b:89:a3:1a:34:53:01:7b:ae:07:5d:ba:b5:6b:
                    1b:fc:4d:1b:e3:8e:87:9c:eb:4b:2f:b3:b2:11:dd:
                    ba:c3:a4:01:89:26:f9:8c:9c:55:21:54:ba:62:8c:
                    75:ef:b4:e0:11:66:61:1e:0d:55:c0:cc:b8:a7:bc:
                    63:2c:47:d5:11:00:4d:76:b4:be:4e:0a:aa:78:e6:
                    78:3d:01:ca:6c:8e:6d:88:42:ac:f8:8d:35:c7:39:
                    57:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FC:F4:B9:EF:B2:E5:0B:2A:E2:01:07:9A:AF:45:FA:41:1E:26:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/fc8157c6-7c1c-3f32-a229-61a454c91ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl

            X509v3 Authority Key Identifier:
                keyid:2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6a6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ae:92:03:87:1c:f1:74:55:5b:10:e6:78:6e:40:53:ab:56:
         af:47:3d:20:a0:52:bf:fa:82:95:dd:4b:d2:56:38:32:ce:85:
         1a:cd:ef:b9:fd:e6:39:51:29:2e:1c:55:8f:dc:7e:85:bd:e6:
         d1:b8:78:56:aa:ea:9f:0b:61:19:cb:32:1e:bd:33:04:2b:59:
         1d:6d:72:35:83:3f:a7:47:56:ad:08:bf:71:8e:fe:53:3a:34:
         95:33:bc:79:01:5a:5b:4a:19:e2:d7:1f:2c:23:a6:35:97:05:
         55:06:cd:e8:40:5f:a8:a3:bd:13:32:5e:62:ff:66:36:b8:97:
         a7:17:75:ad:77:64:0e:8a:a7:69:0c:ef:a6:76:f0:ff:a7:12:
         42:a3:52:e9:7b:93:7e:f3:20:a6:5e:44:0d:c6:bd:38:1a:08:
         f3:96:7b:20:d1:a3:8e:c1:8e:3f:66:e0:77:a5:19:43:d6:22:
         dd:b0:5e:2f:81:ca:88:9f:3a:f3:1f:e2:51:8d:1b:4c:78:05:
         d0:70:37:a7:1f:44:ad:11:e6:68:e4:cd:cd:61:54:59:4e:37:
         27:b5:fa:00:0a:32:d5:09:3b:e6:de:c7:19:59:7e:8d:a6:a3:
         9b:97:7d:38:11:95:db:ff:16:41:e1:77:80:99:4d:cc:00:d4:
         f7:ab:e1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:45:47 2025 by rpki-client