Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/8fe57f4d-d5c9-3a15-8267-887fa616eb55.roa
File:                     8fe57f4d-d5c9-3a15-8267-887fa616eb55.roa (raw, json)
Hash identifier:          J9rlVPmAdrM4o6G2FAagVFYxYli60RKk00CU/1eIzF0=
Subject key identifier:   A8:39:7B:C9:1A:83:02:CC:4B:D5:D7:48:02:5F:67:39:36:FD:B7:9E
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584A9E961BA92C83FA83C86F5DA0
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/8fe57f4d-d5c9-3a15-8267-887fa616eb55.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     39618
IP address blocks:        2602:fd92:c90::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:1b:a9:2c:83:fa:83:c8:6f:5d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=42702168-2e73-4ae4-ba54-b93418b99de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ed:ba:60:7c:ff:36:24:c3:63:4b:bd:f0:7f:
                    1b:b0:33:82:e8:d8:4c:43:90:f9:75:bb:5e:6b:74:
                    c2:9b:84:86:0b:96:76:f2:2a:ec:a4:ec:5a:d9:69:
                    db:41:76:66:aa:77:5d:5e:72:65:ea:27:73:1c:ef:
                    2d:92:0e:53:67:7f:a0:d0:98:16:5f:4b:11:f6:c2:
                    26:88:f5:a0:9f:6b:eb:3d:69:a0:01:41:72:08:f3:
                    2f:de:d9:b3:01:13:52:b3:fc:cb:f5:57:06:dc:aa:
                    24:31:fa:c9:c0:82:e4:dc:b2:dd:d3:43:fa:a5:26:
                    ec:86:4c:41:9c:c1:4a:f5:41:6d:c9:73:a2:a2:7d:
                    3b:8c:a8:4a:f3:47:99:e2:58:b7:b7:b7:67:23:e9:
                    6c:ee:9b:2c:b8:3e:b5:45:15:c7:b1:9f:0b:74:2f:
                    af:c9:45:bd:66:92:84:78:ae:d1:35:fe:6a:e2:f8:
                    c8:c0:dd:7e:2a:58:01:50:32:f6:91:9b:bf:a3:4a:
                    a7:75:8d:3e:49:43:ba:3e:7c:63:5b:ac:7f:3e:e5:
                    38:be:68:0b:5f:41:b8:70:04:51:01:6c:d1:99:11:
                    a4:f8:2d:42:5d:11:c3:2a:fa:8e:9c:29:bd:23:1a:
                    a6:58:d4:4d:1a:5c:ee:de:10:38:61:42:46:d6:7a:
                    67:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:39:7B:C9:1A:83:02:CC:4B:D5:D7:48:02:5F:67:39:36:FD:B7:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/8fe57f4d-d5c9-3a15-8267-887fa616eb55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:c90::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:ed:ce:91:ba:5e:fc:b3:8e:4b:29:60:47:63:66:ff:9f:0b:
         90:dc:d1:68:85:72:db:7e:43:7b:ed:f1:96:49:a2:ab:1b:90:
         91:41:25:9f:78:11:15:44:74:2f:ca:95:e3:84:c7:dc:6d:24:
         9a:11:8b:b5:ec:c5:bd:0a:f1:96:67:df:db:93:c4:fd:33:bf:
         30:04:c5:fc:c9:f1:2a:1d:5a:47:12:bb:2f:9d:8d:f7:1e:9b:
         ca:32:dd:d6:13:94:ce:96:2b:cb:21:41:59:3c:87:44:e0:38:
         fa:05:9f:92:a5:f3:f0:0a:5e:18:47:3c:c4:5a:70:ec:10:99:
         34:4c:c6:b5:10:12:02:af:91:d6:b9:91:69:04:41:bd:56:c5:
         36:4a:35:ef:ce:f6:0d:85:66:5a:2e:5e:43:14:7f:79:91:3c:
         60:f3:2d:47:84:e6:30:5f:4b:a5:f7:b3:1b:80:2c:ef:c6:68:
         a1:82:65:8b:36:d0:68:24:86:d8:6b:85:50:76:ff:b2:39:7b:
         db:aa:bf:1b:f4:8e:03:b1:b3:df:ae:d0:bd:e4:67:d4:5f:26:
         c5:ec:cb:8a:b7:39:83:12:f9:72:a1:ce:42:ed:a3:1d:35:d6:
         c5:b5:45:a4:14:a1:5f:b0:4a:d4:fe:a8:08:1d:45:1c:c1:71:
         36:b6:b6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:06:32 2025 by rpki-client