Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/bb8cca25-c470-319d-94a9-304db5760ead.roa
File:                     bb8cca25-c470-319d-94a9-304db5760ead.roa (raw, json)
Hash identifier:          Laoc0DbOiWJZr9k+ATD6+Eg9IWH6Oy5Y9GDUShAXJ8g=
Subject key identifier:   78:18:E0:22:42:AD:FE:AE:A1:18:5B:73:D0:31:11:36:4F:15:25:3B
Certificate issuer:       /CN=932105b1-ce56-44a7-9670-6f4e56578ef8
Certificate serial:       010D0C9F4328584B5DD20C28BFD011101AFD6100
Authority key identifier: DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/bb8cca25-c470-319d-94a9-304db5760ead.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     53724
IP address blocks:        2602:f7f8:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d2:0c:28:bf:d0:11:10:1a:fd:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932105b1-ce56-44a7-9670-6f4e56578ef8
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=9f2f5e5a-a41e-47fa-a86c-b543da4ea185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:cf:77:20:af:6a:f7:ae:a4:6c:58:a4:95:
                    49:aa:e8:ed:d6:a6:73:50:04:ad:61:d6:85:3c:f8:
                    35:ff:3f:1a:e6:38:0a:8a:59:d6:6e:fe:ab:ef:ed:
                    29:33:4b:9e:4f:21:b4:21:58:8e:c8:b0:cf:fc:7a:
                    ad:39:92:7a:e8:8d:0c:b0:43:8a:a7:cc:fc:1a:4b:
                    52:e9:8e:2e:80:eb:04:16:cc:42:01:f2:7e:4b:a9:
                    44:ec:8b:e6:45:ca:c6:b0:7e:e8:ca:79:8a:66:7e:
                    3d:4f:bb:93:fe:44:1f:af:0c:50:4f:e1:cd:5f:1a:
                    88:e5:4f:2f:89:06:2e:70:3c:c8:ee:55:f1:1d:5c:
                    00:b7:30:93:6c:03:de:4e:10:1b:0f:2b:5f:ed:9a:
                    b3:96:24:67:51:49:53:e3:52:1d:d7:f0:71:4d:34:
                    1c:a2:47:62:e0:7e:a4:3d:79:49:e5:cc:c3:e8:8d:
                    47:5a:73:32:d6:ac:59:56:50:15:20:94:4a:85:56:
                    e4:0e:35:4f:1b:3b:c7:32:51:21:f0:d2:56:44:db:
                    35:d6:97:e3:ac:be:fd:ac:ad:5e:2f:92:8b:40:1c:
                    b4:ba:f0:fb:99:38:28:a2:09:e0:1a:2e:c8:7c:37:
                    19:8a:b3:04:1f:2a:45:9a:5c:05:18:b9:12:ce:7a:
                    ce:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:18:E0:22:42:AD:FE:AE:A1:18:5B:73:D0:31:11:36:4F:15:25:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/bb8cca25-c470-319d-94a9-304db5760ead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl

            X509v3 Authority Key Identifier:
                keyid:DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7f8:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:35:ac:f4:27:db:33:52:53:9d:06:c8:b2:1a:00:e7:4f:77:
         58:68:15:79:8b:73:c0:36:43:ad:44:a6:ae:54:6e:14:60:e5:
         d4:c9:f9:6b:bd:d5:c8:54:ee:aa:86:4c:9a:9c:23:d0:d7:ff:
         47:5b:2b:e1:2f:19:eb:73:b6:4f:27:18:7f:e9:21:4c:20:cc:
         1b:cb:d1:79:bc:d9:8b:95:fc:b6:f9:40:df:6c:a3:b3:7c:47:
         23:dd:dc:58:65:1e:34:5b:b1:e0:b7:f3:0f:6b:b6:cb:65:8e:
         7b:4b:a3:ce:8d:18:5d:b2:34:c2:1b:44:91:95:c3:b8:f0:a2:
         4f:20:2f:8e:45:c7:2f:da:bb:91:07:ed:73:9d:4d:ca:17:e0:
         1d:24:5f:38:f9:a2:9b:7a:54:7d:32:ff:41:b5:c1:80:d0:70:
         20:69:61:4a:93:a0:d6:e9:97:66:4f:e3:ec:26:e6:14:c8:41:
         c2:64:be:34:b4:99:37:58:47:23:62:a1:a6:a8:72:e1:d9:6d:
         0c:a0:cf:65:26:c6:a9:d9:cf:fa:36:08:8b:c9:b5:1d:6f:86:
         54:57:94:2d:57:1e:66:69:ce:84:59:6c:e7:9e:45:b9:b3:dd:
         53:ed:47:af:9f:5f:25:99:08:f5:4d:e5:5c:70:94:b8:a1:94:
         5e:8b:dc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:20:29 2025 by rpki-client