Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9/2143b254-1133-32fc-8bf2-b3344b960d76.roa
File:                     2143b254-1133-32fc-8bf2-b3344b960d76.roa (raw, json)
Hash identifier:          uZjCvkQEVKCuwek5qcig/aF/GmuRvoPAVTgyuUAWLVI=
Subject key identifier:   F4:46:3B:94:5D:17:F8:F4:AC:56:BA:44:7D:05:67:27:70:A2:C3:AF
Certificate issuer:       /CN=203e5d2d-6782-4312-b292-20591c5140f9
Certificate serial:       010D0C9F4328584A8910FB7601AB9DFC189B1300
Authority key identifier: 05:1D:C5:7E:AF:CC:A1:41:7C:10:52:33:86:4A:47:E0:33:D3:2C:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9/2143b254-1133-32fc-8bf2-b3344b960d76.roa
Signing time:             Mon 30 Jun 2025 13:25:28 +0000
ROA not before:           Mon 30 Jun 2025 13:25:28 +0000
ROA not after:            Sun 28 Sep 2025 13:25:28 +0000
asID:                     401780
IP address blocks:        2602:f9a3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9/203e5d2d-6782-4312-b292-20591c5140f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9/203e5d2d-6782-4312-b292-20591c5140f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:10:fb:76:01:ab:9d:fc:18:9b:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=203e5d2d-6782-4312-b292-20591c5140f9
        Validity
            Not Before: Jun 30 13:25:28 2025 GMT
            Not After : Sep 28 13:25:28 2025 GMT
        Subject: CN=22bd2510-6fd0-4a7a-9a77-6cf28ebffa4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1c:5f:69:8b:99:9e:57:de:82:d4:2e:56:ef:
                    1b:a3:e3:b0:87:46:1b:a8:8b:2e:58:6c:5f:c4:8c:
                    05:c4:cc:07:96:2a:e0:55:ae:3a:84:46:e9:d8:c6:
                    6b:3c:c9:39:eb:d5:fd:6f:4f:d3:96:fe:1a:0c:d5:
                    20:61:8e:21:24:f5:6d:d3:96:5c:80:81:27:54:be:
                    e4:fa:f5:f4:e0:76:94:72:2d:87:bc:e7:4c:d9:64:
                    83:cd:06:2d:3c:40:1c:dc:13:ec:ee:7c:71:c8:09:
                    c4:6f:ea:de:25:fa:c2:10:1c:82:f1:3e:9b:16:86:
                    bd:ca:f0:84:c4:48:46:b9:e3:1f:b4:f7:9f:9c:14:
                    0f:e1:31:12:a3:64:11:1e:4c:7e:93:28:cd:20:1b:
                    32:c9:9a:ec:1e:f2:a8:11:81:c5:9e:ab:11:99:b4:
                    01:0a:63:b5:92:45:8b:28:51:07:2e:89:cb:e8:70:
                    d3:fc:3d:f9:2a:08:dd:ff:4d:d4:e1:07:e2:84:d1:
                    5c:06:c5:6d:1c:49:95:13:2e:66:2e:6a:15:f1:1a:
                    fc:7e:68:b3:e4:98:63:b2:56:a7:56:e7:81:f6:2b:
                    f0:80:ff:62:0e:27:56:62:97:58:8d:09:c5:b1:0d:
                    21:0e:3e:1f:c6:80:48:83:08:38:cd:36:89:3c:fd:
                    20:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:46:3B:94:5D:17:F8:F4:AC:56:BA:44:7D:05:67:27:70:A2:C3:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9/2143b254-1133-32fc-8bf2-b3344b960d76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9/203e5d2d-6782-4312-b292-20591c5140f9.crl

            X509v3 Authority Key Identifier:
                keyid:05:1D:C5:7E:AF:CC:A1:41:7C:10:52:33:86:4A:47:E0:33:D3:2C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/203e5d2d-6782-4312-b292-20591c5140f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:52:f4:92:8d:3e:aa:65:11:c1:84:0c:3a:d6:cd:52:8b:d1:
         19:4d:62:2a:2a:a9:ed:1e:da:7d:00:8d:67:eb:d3:c2:dd:49:
         5d:9e:f7:e3:59:c6:60:a4:68:77:81:8e:99:9a:b1:06:dd:67:
         13:09:8b:32:4c:b4:be:b4:bf:19:ab:6e:3c:fc:a8:b3:f4:42:
         c5:6d:ae:b8:e7:b9:79:c8:0b:04:17:4e:b7:1d:77:7e:ec:42:
         5e:cb:e3:9c:53:4e:77:03:79:ea:b7:31:62:33:13:9d:df:b7:
         a8:9a:60:07:35:72:18:00:ed:b3:e0:e3:1c:b6:84:58:c0:e6:
         a6:77:3f:ab:f2:e4:5c:4f:8e:b9:09:b9:ac:69:6a:c8:99:97:
         c4:94:ae:e7:1d:cd:86:a6:3b:0a:49:c9:e3:ee:db:c9:b7:65:
         05:7f:91:e1:0e:fa:9a:c0:6d:f6:d1:62:6a:ca:18:bd:85:b1:
         ce:05:3b:1a:d0:44:07:9f:66:f9:81:5a:80:56:69:29:93:f0:
         9b:77:1f:5d:e4:ae:87:66:f5:d4:8c:7f:b3:96:14:55:f7:46:
         21:77:ae:84:57:de:90:23:e3:5a:b0:a0:29:48:78:64:b9:ca:
         e1:ae:69:60:57:67:3b:5d:08:0d:fa:d4:ee:4f:80:b4:4e:1d:
         73:2e:52:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 17:50:45 2025 by rpki-client