Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/a012f434-0893-309d-a03c-6d4dea6c7567.roa
File:                     a012f434-0893-309d-a03c-6d4dea6c7567.roa (raw, json)
Hash identifier:          yyVL13lR3QnMiACRzXuQatHJBa4rxQ8uf1X2TE74OP4=
Subject key identifier:   A1:E6:6D:C1:10:A1:57:12:6F:1A:63:89:F0:26:1D:B9:22:F3:C6:47
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584BBFA599641E403291F547DB40
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/a012f434-0893-309d-a03c-6d4dea6c7567.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     52112
IP address blocks:        2602:fd92:d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:99:64:1e:40:32:91:f5:47:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=bd32868b-5617-4b06-afbb-1e2aa17c9e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f9:bb:10:24:52:a2:86:3b:df:ef:0b:b7:b6:
                    05:4d:2b:2d:0b:ef:8f:98:3a:7c:5f:77:7f:75:6d:
                    8f:54:35:f8:5f:30:e4:f4:36:d7:7a:81:f6:04:d4:
                    6c:f3:fb:7d:fa:43:f9:96:08:76:b0:2d:36:3b:8f:
                    3a:23:82:97:db:08:c1:81:f1:74:67:11:90:2b:13:
                    e2:5d:24:8c:51:3f:a2:1d:0c:c2:b9:ad:25:b6:60:
                    ae:9a:b5:33:ac:ef:c5:27:a9:a6:05:ba:d0:72:32:
                    4e:01:dd:01:64:a4:8d:32:79:7f:ba:81:47:cd:bc:
                    46:62:70:bf:d5:15:be:f0:ca:cd:88:e6:20:0f:ca:
                    46:72:53:14:26:fe:48:70:e6:8d:6f:53:50:d6:df:
                    b8:f7:29:58:98:e9:3d:ba:84:b5:35:ac:72:30:e3:
                    7d:62:85:ad:5b:6f:75:1f:b2:6b:83:d7:60:27:8a:
                    b4:6c:54:10:b7:36:66:e0:7f:44:98:08:b5:84:78:
                    ca:60:30:6f:b4:a4:58:12:cb:6e:9f:47:86:e7:e3:
                    7a:8b:43:ae:28:f8:ec:76:21:ae:3b:29:a6:76:ee:
                    db:7d:22:58:d6:33:76:ae:8a:f0:53:bf:99:3e:77:
                    2f:78:77:fa:38:d0:61:71:35:d4:5c:bc:2f:aa:01:
                    4a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E6:6D:C1:10:A1:57:12:6F:1A:63:89:F0:26:1D:B9:22:F3:C6:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/a012f434-0893-309d-a03c-6d4dea6c7567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:7b:16:5f:66:c1:87:48:db:be:de:3b:11:7d:fb:4c:ad:72:
         64:91:96:37:8d:51:0e:c9:f6:db:30:10:c3:df:d0:49:5d:15:
         e8:be:39:a6:0c:c8:7b:22:70:18:e5:bd:43:26:12:ab:e5:a3:
         f7:d2:32:b3:82:a5:2a:77:2c:e9:a6:2c:49:73:9c:29:fc:c6:
         8f:54:db:e0:b0:9c:b7:f4:89:15:c4:e0:54:d2:18:19:80:81:
         13:c1:9f:c0:ba:da:3e:6f:5f:52:f9:64:72:82:96:00:16:3d:
         de:36:2d:2d:c3:49:a8:c5:42:49:de:f4:eb:c4:0d:fd:8f:89:
         ab:0d:5c:80:26:e6:28:d0:33:6a:18:7f:06:c1:27:ce:ae:b0:
         b0:01:4f:32:43:e3:d6:63:41:9c:48:b9:71:bf:90:79:b6:25:
         84:b8:9e:99:8c:50:37:32:52:fb:cb:33:da:80:62:a0:20:8a:
         ba:cd:75:97:5a:8c:d2:17:56:88:b8:11:28:37:72:af:fb:f9:
         1f:15:da:cb:62:cd:ec:fe:e5:34:73:00:71:38:5f:3e:75:bb:
         79:2b:e4:1e:52:10:13:9d:11:92:ee:cd:98:3c:fc:1b:c8:90:
         ea:63:f3:49:71:e0:28:b5:b0:da:cb:a1:4e:28:ca:cd:fb:5a:
         87:f1:05:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:14:04 2025 by rpki-client