Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/733fbb0b-0e33-342a-801b-f49c56699ad8.roa
File:                     733fbb0b-0e33-342a-801b-f49c56699ad8.roa (raw, json)
Hash identifier:          xn4tU0hTYDk/9z6YzInpgV3CYVcSNbPkCjW3YgVGL7w=
Subject key identifier:   52:0A:05:C7:74:28:23:8D:DF:F4:C9:9B:09:42:15:23:B0:4D:84:28
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584B141690D2E153DF53168ACA80
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/733fbb0b-0e33-342a-801b-f49c56699ad8.roa
Signing time:             Thu 04 Sep 2025 03:09:20 +0000
ROA not before:           Thu 04 Sep 2025 03:09:20 +0000
ROA not after:            Wed 03 Dec 2025 04:09:20 +0000
asID:                     38047
IP address blocks:        2602:f83b:81::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:14:16:90:d2:e1:53:df:53:16:8a:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Sep  4 03:09:20 2025 GMT
            Not After : Dec  3 04:09:20 2025 GMT
        Subject: CN=68e7f769-36c7-4095-b0cd-ac717397c746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:4e:ec:9e:b2:d7:43:9a:ad:2d:a5:f2:46:
                    bc:79:fc:cc:e9:bd:66:97:86:2d:ff:3e:5d:a4:cb:
                    e3:96:35:27:a8:cc:b7:03:19:4e:68:86:79:d4:ba:
                    79:30:d3:8f:e2:f4:61:5e:7c:ed:b6:aa:a5:50:e6:
                    f7:b6:7a:9e:b4:44:cf:73:5e:a3:b7:1e:8e:88:ac:
                    8b:de:8b:f8:e6:c3:bc:e2:f3:fb:1a:48:15:d7:20:
                    ad:1f:a8:5e:ce:5b:fc:c1:17:1d:e7:51:00:83:75:
                    6c:ee:1b:9c:79:cd:22:73:02:c4:de:19:86:92:33:
                    e5:a5:b9:4c:57:4d:2f:7f:88:ba:b4:13:e0:2f:07:
                    82:a3:07:ae:78:c6:57:c2:ef:5b:bf:0f:fe:ae:28:
                    9b:06:e1:f6:75:f6:2a:43:0c:d8:23:9d:96:04:d2:
                    07:87:ce:a0:76:db:10:95:ac:6c:80:18:af:68:bc:
                    1f:0b:6a:0c:cd:33:45:89:a1:2f:fd:10:a0:2e:de:
                    06:3b:98:c8:63:cf:d5:22:44:c5:6a:19:f4:bf:4d:
                    e6:a9:b9:91:bf:91:ff:4f:d3:c2:14:67:1a:ba:6b:
                    73:2d:cb:22:b0:34:44:b5:3f:e6:c3:8b:05:13:a3:
                    0e:7a:6a:f0:a4:ff:9f:83:78:50:f3:9a:42:7d:6e:
                    18:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0A:05:C7:74:28:23:8D:DF:F4:C9:9B:09:42:15:23:B0:4D:84:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/733fbb0b-0e33-342a-801b-f49c56699ad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:81::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:fe:eb:ca:e6:48:fb:61:35:9c:34:91:d4:a3:b0:d6:69:b0:
         66:4f:12:04:18:e6:93:89:ea:be:7d:95:8e:70:75:22:28:2a:
         5c:0a:00:1e:dc:1a:0c:2b:9a:51:ae:5b:1a:f8:72:03:2a:26:
         03:f4:10:fa:66:3b:96:5b:09:65:8e:ff:72:ee:90:b3:18:40:
         06:20:b6:86:82:64:2f:a4:82:73:da:4c:c0:f4:71:5a:97:8b:
         0c:8b:77:7b:36:69:1e:d5:36:f3:68:9c:71:22:0e:83:0c:22:
         0b:2a:62:73:a2:b8:3e:c8:50:fb:68:12:65:b8:7d:66:02:55:
         2f:43:b6:01:b0:85:5b:f3:e6:9d:b5:a1:ae:89:22:77:f7:a9:
         39:83:77:ce:1f:25:0f:99:a7:9a:f5:c4:a7:96:43:99:b5:4b:
         73:f1:bd:20:25:3f:b9:11:c5:14:21:b7:a3:85:20:02:d7:6c:
         c5:32:c1:4c:d8:39:6b:c6:a4:7c:4a:36:d9:98:df:33:90:1c:
         9c:7b:ab:3e:ae:54:80:59:84:da:6f:c8:d0:ce:f9:1b:95:15:
         cf:25:0d:0f:5d:fd:4a:77:76:0b:ed:b1:29:47:4c:b7:8c:56:
         9c:15:c7:fb:69:8c:1a:59:5b:ad:33:e2:85:90:34:38:21:38:
         df:5e:8f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 14:16:13 2025 by rpki-client