Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/52e44aaf-a924-372c-9c6a-97e3db3be55c.roa
File:                     52e44aaf-a924-372c-9c6a-97e3db3be55c.roa (raw, json)
Hash identifier:          T1mHggIse/evVAfKdoUUg0V0PtHu/J0wDQhCdshKIiA=
Subject key identifier:   B4:CB:68:8C:B8:CD:DA:C4:1F:D4:04:FC:E0:14:2D:F0:6E:DD:CD:41
Certificate issuer:       /CN=41415190-afe9-4f90-902f-9102f69180fb
Certificate serial:       010D0C9F4328584BA6679F0C726E971AC52D8900
Authority key identifier: 9D:32:13:D8:0E:43:8D:3C:78:6F:3D:1C:D7:25:FA:9C:22:59:69:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/52e44aaf-a924-372c-9c6a-97e3db3be55c.roa
Signing time:             Sun 26 Oct 2025 13:00:38 +0000
ROA not before:           Sun 26 Oct 2025 13:00:38 +0000
ROA not after:            Sat 24 Jan 2026 14:00:38 +0000
asID:                     0
IP address blocks:        2602:801:30ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a6:67:9f:0c:72:6e:97:1a:c5:2d:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41415190-afe9-4f90-902f-9102f69180fb
        Validity
            Not Before: Oct 26 13:00:38 2025 GMT
            Not After : Jan 24 14:00:38 2026 GMT
        Subject: CN=683b2ce2-0614-48e1-bf01-4e36fa50751f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:30:fc:b7:56:e3:44:e8:e3:a2:04:dd:61:61:
                    78:cc:ef:e9:7b:4d:0f:13:4b:fa:98:de:f4:73:84:
                    26:52:0a:71:31:38:80:7f:c7:fd:b8:cd:ab:bf:7b:
                    d0:7f:4d:51:59:3b:4c:47:68:b5:c3:28:7a:d0:43:
                    d3:bf:10:64:4b:70:79:0c:0a:ef:46:89:d3:38:a6:
                    13:4d:eb:86:ab:30:24:c9:73:f4:90:f2:01:e9:bd:
                    f9:78:c9:f9:52:a1:ed:b9:8f:55:7b:5d:47:b1:1c:
                    70:ff:1a:8d:51:8d:b0:c1:3d:df:ab:a4:bb:74:72:
                    22:74:c5:2e:d2:b0:98:e5:a3:c6:1f:dc:a8:c7:38:
                    b3:fc:bb:ca:e5:7f:af:67:3c:c4:3b:ba:4f:92:13:
                    c0:cd:11:11:dc:e4:5f:dc:31:75:be:ca:23:d5:9a:
                    76:18:97:97:fb:dc:ed:8e:e9:58:8c:9e:14:8d:70:
                    87:9e:57:92:7e:2a:e1:95:37:55:8d:ba:7d:c0:a4:
                    67:ba:3c:f5:da:dd:a1:9f:3b:64:e2:a3:46:88:61:
                    d6:72:c7:30:94:4c:71:55:e8:c9:cd:a3:d2:83:8c:
                    bf:36:93:48:8d:86:9d:1c:71:67:d7:19:e6:f5:ac:
                    cb:74:ac:ea:e9:b5:d3:78:90:2f:f2:6e:d7:7e:9a:
                    f9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CB:68:8C:B8:CD:DA:C4:1F:D4:04:FC:E0:14:2D:F0:6E:DD:CD:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/52e44aaf-a924-372c-9c6a-97e3db3be55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb/41415190-afe9-4f90-902f-9102f69180fb.crl

            X509v3 Authority Key Identifier:
                keyid:9D:32:13:D8:0E:43:8D:3C:78:6F:3D:1C:D7:25:FA:9C:22:59:69:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/41415190-afe9-4f90-902f-9102f69180fb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:801:30ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:1e:97:b6:9c:84:b6:d8:50:3b:0d:d8:44:78:8c:ae:97:cd:
         cb:bb:cc:fd:34:66:ab:83:80:50:21:67:9f:bb:82:1b:35:01:
         0f:85:a3:29:2b:8b:c0:6c:de:5f:ab:49:0d:c3:8a:7c:25:41:
         60:a5:7c:5c:6b:47:67:6b:04:95:35:4a:95:31:a0:95:23:20:
         68:62:05:ee:e6:60:c5:c8:ea:ab:ef:aa:94:60:d7:84:d5:81:
         da:5a:e0:1a:61:68:b2:a5:52:9b:90:6a:e6:1d:f0:a5:5b:ea:
         92:3c:34:28:a0:15:88:38:c4:8e:dc:a0:06:ee:67:9c:57:40:
         f6:2d:10:be:29:fb:8f:e6:55:39:1f:f0:bd:d3:91:c4:bd:70:
         f6:01:0d:d3:f7:ea:0c:a3:1c:49:a9:ab:b6:2a:f6:a3:53:5b:
         e3:ae:05:23:f6:2a:dc:0a:66:22:bd:90:f7:ea:f4:70:5b:a4:
         40:28:7d:62:8e:5f:37:33:55:e3:2a:3a:76:24:6c:2d:1b:f8:
         85:4b:8e:40:15:0c:86:ff:89:cf:eb:80:16:a2:a0:ae:04:cf:
         5d:f4:6a:a9:45:f9:68:03:01:72:29:ba:38:94:66:56:cf:ff:
         81:99:88:8f:74:6b:18:8c:ab:82:c8:46:24:f1:90:31:9a:ba:
         17:8b:4d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:00:07 2025 by rpki-client