Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/780dc63e-2eb2-30cf-ae3f-fc79bc3f7173.roa
File:                     780dc63e-2eb2-30cf-ae3f-fc79bc3f7173.roa (raw, json)
Hash identifier:          5xa46prMLAWWzKJERFHMNq0uI/9ThCRILK03t7Xidvs=
Subject key identifier:   15:28:21:3F:DC:2C:AB:CC:C7:92:8B:51:C2:24:6A:D6:39:F2:49:70
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F4328584B1AD1965FE2F25493C40E1100
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/780dc63e-2eb2-30cf-ae3f-fc79bc3f7173.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     203888
IP address blocks:        2602:f9df:10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:96:5f:e2:f2:54:93:c4:0e:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=da3b7fe2-1658-4bd5-b46f-e5abb1d510ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a7:19:85:2e:d4:6b:51:bb:cf:2b:2e:33:77:
                    04:49:31:82:39:1d:0a:c7:4d:f9:4b:c2:2b:e6:7c:
                    48:4d:55:f9:b4:ef:e5:2e:95:e6:18:ef:c7:41:07:
                    05:db:24:2c:80:eb:c5:76:a4:6e:93:40:0b:ab:0a:
                    ee:e7:96:80:f4:41:8e:69:9e:8c:03:c6:0b:0e:1f:
                    f5:c4:71:d7:4c:e5:ab:32:25:78:97:2f:fa:07:cb:
                    5e:b0:b3:61:d8:0e:ce:bd:7e:b3:e9:e3:b8:30:34:
                    0a:24:26:a5:da:f6:49:14:0b:9a:a5:09:f8:2a:01:
                    97:34:de:cc:89:b5:78:8d:c0:f3:9c:c0:aa:a8:5c:
                    e5:b5:e4:2d:16:bb:22:af:63:7d:2e:5c:8c:9f:12:
                    05:ef:63:7a:ef:f0:c1:f2:d0:b0:2f:d6:dc:0f:6e:
                    a0:f7:9c:02:8c:b6:81:41:d8:27:1d:e6:1a:7c:03:
                    be:f9:1c:bb:3d:ef:fe:f5:b3:01:dd:47:c5:6c:3f:
                    6f:c6:63:2b:04:ba:e6:37:eb:50:cc:93:65:bb:6a:
                    f4:65:ce:43:95:1b:6a:0b:3a:8b:19:3e:9b:c5:d2:
                    83:7b:df:0e:f4:e7:0c:6e:4e:d5:41:04:1d:fd:67:
                    f5:e4:0f:c4:7c:84:5f:cd:11:f4:af:4f:04:34:2d:
                    52:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:28:21:3F:DC:2C:AB:CC:C7:92:8B:51:C2:24:6A:D6:39:F2:49:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/780dc63e-2eb2-30cf-ae3f-fc79bc3f7173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9df:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:f1:b9:97:f7:41:82:95:6d:ab:09:b0:af:82:89:1b:8b:c6:
         c8:c9:40:99:12:2d:72:c5:ac:2e:1b:83:59:17:a0:45:e8:02:
         0f:4f:a2:9e:38:4d:f0:5d:58:3a:e0:88:c7:25:5e:03:56:5d:
         ec:9d:c9:64:8c:07:f3:db:42:7f:9c:74:6a:7c:a0:ae:db:eb:
         a8:cf:47:85:38:d6:08:b4:c1:07:84:5b:9f:98:69:fc:c3:9b:
         6a:09:eb:f8:8d:59:64:e8:8d:66:7f:8c:de:ea:37:05:ca:72:
         84:1d:d8:29:a2:1c:1a:ab:72:6d:5d:46:ae:c5:bb:d9:f8:da:
         35:25:3e:85:4c:c0:a9:d6:11:ba:30:98:92:3b:1f:4a:2e:67:
         f9:24:88:ad:5f:12:24:71:1c:58:05:cd:e7:b2:6d:53:fc:da:
         4c:02:a8:e3:2c:01:57:86:fc:23:ef:21:7f:87:c3:5b:9f:f0:
         73:c8:ec:52:ac:b2:6c:85:37:e1:25:2f:ac:b6:86:dd:de:e9:
         13:dc:05:52:04:94:88:94:46:27:2f:3a:3f:42:18:5d:d3:30:
         62:30:d6:e3:5f:b2:e5:71:65:51:63:6a:1f:43:d7:c9:f4:a6:
         c3:eb:8f:ce:40:74:46:c9:da:76:63:c9:69:f6:7f:43:08:69:
         f6:84:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 19:37:03 2025 by rpki-client