Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/060550ce-ebfd-323e-b957-e42515f4f7f8.roa
File:                     060550ce-ebfd-323e-b957-e42515f4f7f8.roa (raw, json)
Hash identifier:          FsdX9d/mZBtnK30cQc1+cUsl2ScNBYNew6FX0gYdv2I=
Subject key identifier:   E8:A8:4B:9B:E0:33:F1:C2:99:75:E9:30:53:35:AC:48:BB:8F:23:34
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F4328584A6825FF3B91DA89E6A77ADCEC
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/060550ce-ebfd-323e-b957-e42515f4f7f8.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     1004
IP address blocks:        2602:fba3:401::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:25:ff:3b:91:da:89:e6:a7:7a:dc:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=20a3d00b-1878-4584-9a75-1ac3935c545a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:d7:df:ae:c7:12:ae:c9:cb:95:5e:18:37:
                    04:08:72:53:71:da:b8:d8:88:3c:ff:5a:05:d7:6a:
                    7e:e3:39:37:20:3e:79:26:46:3a:96:f1:e5:ef:cf:
                    c9:e4:c5:a0:57:72:7d:7f:c4:49:19:d5:36:bc:8c:
                    64:6a:ca:8e:64:16:84:fd:e7:77:6e:ec:93:bb:d4:
                    0e:9f:68:4c:ce:a9:e9:d2:ef:9a:4f:54:64:4e:a3:
                    72:28:0f:f4:06:26:e6:49:c8:42:5f:6c:dc:08:de:
                    cf:05:71:e2:1f:3f:69:34:5c:ba:b5:0a:65:da:60:
                    51:b6:1b:b1:b6:cd:3b:1b:a5:5f:7b:9c:da:a6:5c:
                    b3:c4:9d:d7:77:8b:ea:7e:67:9b:28:92:16:f1:37:
                    81:bd:6a:53:65:c5:69:51:cb:aa:69:b2:53:75:e3:
                    26:bd:df:c9:da:f9:24:89:50:1d:9f:e7:55:a6:7d:
                    ce:5a:4b:d7:4e:49:58:33:47:98:9b:f1:21:1b:b8:
                    9d:a4:12:e7:67:49:9f:10:c4:b0:79:12:af:0e:a7:
                    0d:3f:42:aa:44:30:ff:12:39:62:c6:86:02:de:96:
                    ea:bf:87:f2:d2:4d:f6:1b:4e:3e:8a:25:c5:57:fb:
                    05:01:00:cc:be:79:a9:dd:95:e0:86:5c:a8:22:b6:
                    7f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A8:4B:9B:E0:33:F1:C2:99:75:E9:30:53:35:AC:48:BB:8F:23:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/060550ce-ebfd-323e-b957-e42515f4f7f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba3:401::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:1b:31:24:d0:14:73:da:bf:aa:b6:f4:d5:c6:03:92:40:95:
         2a:77:31:92:df:ac:45:42:66:4b:0b:ef:d3:a6:aa:6d:a2:82:
         89:b7:a6:5f:c9:40:4b:af:6f:29:c9:9a:63:26:c7:2f:75:6b:
         2a:60:30:b5:56:af:a4:05:ec:27:48:76:d6:9e:fa:a7:e5:b9:
         47:3c:e0:e4:f4:ac:6d:fb:4d:f8:df:88:82:1b:3e:98:68:0c:
         9c:e3:16:f0:b4:94:42:c0:35:86:c1:ce:25:52:78:80:2c:4d:
         60:28:d5:e4:aa:5c:35:72:3a:fc:33:6b:44:a0:49:d8:c5:82:
         84:4c:44:b1:5c:0e:e0:cb:85:93:15:f2:24:40:d4:24:8b:a6:
         9e:77:df:fa:26:5c:57:00:f6:67:c9:58:d7:08:4b:74:66:1a:
         6b:32:cb:e6:fa:49:75:60:02:3f:35:ef:55:4d:93:bf:f7:06:
         8e:af:cd:1f:1c:f8:7d:51:49:48:48:90:8f:50:c2:57:b7:e4:
         34:69:57:25:9d:da:bf:c3:13:20:f0:e4:fb:ff:4f:9c:f5:c8:
         bc:2c:75:f3:4e:96:d6:b5:8b:6b:9e:7b:e2:65:8f:e1:55:c2:
         ce:fb:e0:c3:23:16:37:6a:73:c9:0f:f8:24:0f:9e:5b:2a:60:
         07:60:2d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:52:18 2025 by rpki-client