Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/4374be94-67ad-32d7-8887-d9e6f2857425.roa
File:                     4374be94-67ad-32d7-8887-d9e6f2857425.roa (raw, json)
Hash identifier:          gBZbRJ1rnHN0pmRl6iOgTZ+pXUueIBG2f9ffCaqsj64=
Subject key identifier:   E4:5A:E1:D5:32:0F:E3:B1:3C:4E:7C:42:AC:00:03:7B:4E:EA:EE:E6
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584B328C4540D2DF6BD038AD9DB0
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/4374be94-67ad-32d7-8887-d9e6f2857425.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     398324
IP address blocks:        2602:80d:1001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:45:40:d2:df:6b:d0:38:ad:9d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=55f472d9-4b12-45fa-bfb4-2b349f6e6b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:ce:cd:30:0c:30:25:a7:2e:c1:53:b3:45:
                    bb:a4:42:57:3d:21:e6:9f:0f:08:f4:67:12:83:9b:
                    64:02:f8:40:f8:f9:fc:5e:69:0f:08:78:34:6a:c3:
                    ef:fc:61:61:c6:98:1b:b0:2e:e7:28:4d:da:56:e3:
                    14:ba:e9:4c:1f:d8:bf:28:bb:dc:a2:4a:76:12:c1:
                    64:48:78:aa:d3:89:e1:32:64:ad:ca:2f:e4:75:f9:
                    bc:19:da:48:78:c8:76:4f:97:f1:70:eb:d8:51:1f:
                    fd:78:05:b5:5b:dc:6b:38:8f:44:fc:32:52:42:c8:
                    c7:0e:55:e2:31:fc:22:11:e3:17:d1:4c:5a:3c:70:
                    03:cd:43:10:6f:14:4f:4c:a9:9c:e9:01:35:b0:e4:
                    10:6b:b7:f0:e0:5b:09:0b:fa:db:f9:6a:da:fd:4f:
                    ef:b3:a4:90:45:f7:b9:ce:08:db:01:ac:38:b6:09:
                    32:33:ba:dd:23:93:98:c6:f1:84:b1:16:f5:58:59:
                    70:70:03:87:30:4b:7e:45:04:c3:02:12:98:08:17:
                    52:2d:b5:8e:a5:33:79:5a:ae:d9:38:71:1a:6a:18:
                    8b:9e:b2:d2:dd:ff:ca:f6:e2:65:94:94:be:5f:95:
                    64:4c:6a:f9:b4:8a:a2:11:fe:c0:2e:ce:05:78:fb:
                    02:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5A:E1:D5:32:0F:E3:B1:3C:4E:7C:42:AC:00:03:7B:4E:EA:EE:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/4374be94-67ad-32d7-8887-d9e6f2857425.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80d:1001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:04:ef:9e:79:2c:9c:cc:d8:4a:ce:9a:24:94:41:60:a4:9b:
         de:7d:08:d8:d8:33:e6:87:5c:b4:bd:ef:d5:5a:d8:87:0c:31:
         a3:37:c8:c9:e2:98:b5:f3:d1:bb:dc:da:9c:f3:f0:bf:f8:c8:
         aa:8c:5c:cb:73:12:9d:65:a0:fa:19:cc:20:60:bb:3f:94:c4:
         11:58:dd:6b:1b:ca:fb:30:41:7f:59:e5:92:60:32:7e:22:cd:
         7c:01:50:ca:a8:42:7d:42:3c:48:8f:45:0f:5f:e7:73:83:71:
         49:56:c2:aa:93:ef:46:20:5e:fe:a6:b9:66:c5:b9:26:db:4a:
         eb:de:af:32:a1:0a:68:48:72:45:1b:0e:e0:7f:68:82:c7:94:
         36:a6:bb:fc:4f:16:c7:a6:43:21:06:b7:61:00:79:a0:2d:a3:
         09:90:ae:73:35:53:15:e6:2a:c6:cf:a1:e5:cf:12:72:7d:ec:
         51:1c:c5:2f:96:73:88:79:5f:93:5b:43:2b:24:12:8f:f6:60:
         03:0c:7c:5d:51:44:25:31:38:0c:88:df:a2:75:47:19:09:4b:
         07:48:cb:95:64:56:9e:3c:16:37:6d:99:6f:df:c9:9d:41:ae:
         71:c3:13:85:8b:4d:5e:af:56:b5:34:28:15:f7:73:81:c9:13:
         ea:4a:0e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 21:14:20 2025 by rpki-client