Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dcc40ad0-fed9-3a3f-947c-d057b86edc11.roa
File:                     dcc40ad0-fed9-3a3f-947c-d057b86edc11.roa (raw, json)
Hash identifier:          mcPSX0AdU2kREl6LwZVb3pVmLFTM1QkhCHTSAIwytLQ=
Subject key identifier:   CE:7B:F3:4E:EA:6B:D0:DA:43:D5:CD:7D:12:D1:50:FE:2B:BD:3E:7A
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F4328584BBE404483835A21553AAD0700
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dcc40ad0-fed9-3a3f-947c-d057b86edc11.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     30058
IP address blocks:        2602:fd92:140::/48 maxlen: 48
                          2602:fd92:600::/40 maxlen: 48
                          2602:fd92:b00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:44:83:83:5a:21:55:3a:ad:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=36aa014e-73a0-45de-a9a5-b3eacd55ea56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:27:e1:f5:6c:ac:e7:31:c8:bf:68:0c:fe:ba:
                    94:ff:18:37:60:26:2f:94:6c:9b:44:a7:2b:c1:e5:
                    f1:c4:64:a4:94:0c:93:df:6b:1d:c8:28:3f:b7:e9:
                    e2:e2:ee:4f:21:b6:63:56:d0:60:53:b3:bf:17:72:
                    96:e8:93:28:45:7a:75:c2:1b:4a:80:38:ad:23:76:
                    51:1e:0a:05:09:0f:b4:53:fa:17:bf:4b:8a:8f:78:
                    2f:65:85:b8:1c:23:e2:16:b0:b1:ba:39:74:e3:a5:
                    f4:a6:98:ff:3c:2f:49:c7:d6:f1:2f:25:23:ed:7e:
                    44:f2:62:c1:d2:3c:1a:e1:e7:b2:1f:2a:57:1e:2b:
                    f0:d1:7e:39:4a:84:e9:b2:da:38:1b:32:4c:df:21:
                    65:5b:85:ab:7e:f8:61:3e:19:52:06:53:7c:75:15:
                    a4:f2:f4:c8:3a:0f:a8:98:86:f1:4e:5c:e9:a7:7d:
                    f5:fb:d0:71:d3:d4:89:b1:4c:fc:74:3b:8f:bb:ff:
                    fc:5b:b9:81:74:74:2f:96:0d:cf:63:e0:3e:48:d5:
                    12:54:d2:44:ea:7d:c0:28:4f:bd:11:93:fc:fd:ea:
                    71:0d:72:12:c0:21:8e:f2:94:93:aa:64:c2:e6:8e:
                    54:47:8a:d6:b6:65:19:e0:8f:a0:c2:e3:11:35:1a:
                    9c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7B:F3:4E:EA:6B:D0:DA:43:D5:CD:7D:12:D1:50:FE:2B:BD:3E:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dcc40ad0-fed9-3a3f-947c-d057b86edc11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:140::/48
                  2602:fd92:600::/40
                  2602:fd92:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:4f:e8:7e:85:8d:6f:04:bc:7d:75:e9:c2:a9:17:d8:ca:52:
         ee:1a:2e:9d:a1:b7:b6:e2:6b:9c:21:bb:ec:69:34:87:9d:c3:
         1d:1f:5f:75:46:ae:8b:fa:27:8a:de:aa:67:2b:db:43:2c:b6:
         86:90:15:a2:df:8c:64:b5:39:39:a5:8c:fb:d7:01:2f:50:5b:
         a4:78:4f:62:0c:04:b9:e2:dc:bb:ed:1b:7d:b3:25:dd:4e:dc:
         1d:0e:1a:c2:29:6a:de:35:ac:36:37:2d:f5:58:6e:c9:61:2b:
         e9:81:b7:89:53:de:a3:c0:61:d9:06:d4:6e:05:0e:54:6d:16:
         b5:dd:b6:35:94:ef:07:56:88:7f:36:94:31:80:07:4e:88:40:
         6d:ba:da:32:c3:3c:3c:0f:5d:3b:0c:c6:ee:09:6a:9f:25:62:
         bc:3b:ae:2e:cd:7a:e9:35:fa:cc:4e:0c:51:0f:66:6e:b4:2a:
         7b:3a:cf:3c:f2:b7:6e:d6:f8:5b:62:d6:44:b1:d2:c0:0e:a9:
         92:af:1f:33:e7:fc:b8:6c:cd:9c:8f:36:17:8b:a0:1b:00:d1:
         95:e4:80:f7:53:d2:85:de:e9:c4:02:c5:51:05:af:cb:ef:65:
         21:01:18:97:a7:c8:c7:33:0f:cd:eb:a7:44:2d:1b:07:21:d1:
         a1:4a:16:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:41:59 2025 by rpki-client