Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/c2a562db-42ea-3a86-a65b-ea881ed2635d.roa
File:                     c2a562db-42ea-3a86-a65b-ea881ed2635d.roa (raw, json)
Hash identifier:          TN4azjMFnemA8/NgwX6/RDpe9VZB3dYPmleTfD8eWrI=
Subject key identifier:   77:8D:59:0A:88:19:64:D4:73:30:DC:20:38:CA:27:95:57:77:5A:AF
Certificate issuer:       /CN=c06ac08c-95d5-455d-921a-f5ac8059e8ad
Certificate serial:       010D0C9F4328584A90A0A7D12B1F5942ED036580
Authority key identifier: C2:91:EE:19:B9:63:E0:61:BF:27:F7:15:B9:F3:51:BA:E2:80:F3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/c2a562db-42ea-3a86-a65b-ea881ed2635d.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        2602:fb0b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/c06ac08c-95d5-455d-921a-f5ac8059e8ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/c06ac08c-95d5-455d-921a-f5ac8059e8ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:a7:d1:2b:1f:59:42:ed:03:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c06ac08c-95d5-455d-921a-f5ac8059e8ad
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=1f9b5022-eee1-493d-8a5d-166f7c4e0955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0b:d0:16:f3:34:96:17:a1:bd:51:0e:e2:5e:
                    27:1b:d9:ba:d7:b3:6c:2e:d7:df:f0:ff:ff:9a:4f:
                    a2:f4:ee:d9:d4:28:aa:6d:af:f4:c8:bf:2f:bf:1b:
                    83:fe:a1:f1:86:08:cf:ac:25:9b:f9:e2:12:c6:b6:
                    a7:55:98:84:84:da:a4:13:70:a4:2a:42:14:b6:3f:
                    bb:85:9b:3d:e8:2f:39:1d:ca:10:08:9c:d2:e6:67:
                    73:87:c1:99:ff:df:37:d8:85:7a:32:7e:bf:de:b6:
                    a2:11:99:96:3f:95:a9:70:27:e6:b4:e8:6b:49:29:
                    65:5c:43:b7:00:a8:cf:62:1c:53:0a:cc:fe:7c:d6:
                    38:88:9e:b3:9f:68:f5:14:f6:5f:63:0a:76:45:cc:
                    8a:3a:a3:27:d1:53:2d:ce:92:a9:71:88:99:93:75:
                    6a:75:21:09:dc:a6:d0:a1:1a:0f:27:e2:8e:1b:5a:
                    90:27:e6:31:68:94:f3:fe:3b:ff:f0:97:53:20:43:
                    d1:4d:32:24:24:4f:01:f6:02:12:df:27:9b:2e:1b:
                    74:37:96:47:f1:5b:56:cc:aa:86:7b:a7:3c:97:47:
                    0f:8a:7a:9c:aa:7f:c6:40:8e:be:3d:b3:01:4b:13:
                    67:51:eb:05:05:98:77:a0:78:86:fc:2b:74:0c:d7:
                    ef:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8D:59:0A:88:19:64:D4:73:30:DC:20:38:CA:27:95:57:77:5A:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/c2a562db-42ea-3a86-a65b-ea881ed2635d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad/c06ac08c-95d5-455d-921a-f5ac8059e8ad.crl

            X509v3 Authority Key Identifier:
                keyid:C2:91:EE:19:B9:63:E0:61:BF:27:F7:15:B9:F3:51:BA:E2:80:F3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c06ac08c-95d5-455d-921a-f5ac8059e8ad.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb0b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f5:24:d0:38:1c:66:01:2d:82:fb:80:7a:3c:e5:e0:7c:46:
         b0:fa:5e:36:e9:6d:05:ff:d4:81:29:be:4e:ab:7e:4a:e0:67:
         d7:98:da:ba:26:e2:8a:48:a3:30:d1:4a:91:62:8a:22:ed:a2:
         1c:84:86:22:32:1e:1d:60:9c:78:32:67:bd:7e:7c:97:e6:88:
         59:21:1f:41:8c:2b:34:0b:55:bb:a8:4a:de:c8:31:ba:6a:9f:
         84:5f:d7:ff:36:50:58:ce:e3:35:ab:47:93:0d:57:2c:1e:76:
         da:5d:8d:ea:df:0b:58:ae:40:fa:41:fe:dc:ae:39:c4:df:d2:
         1a:2a:de:ed:0d:ab:4b:a5:a3:b7:21:a7:e2:ef:b6:86:d1:55:
         5b:49:30:59:8d:a4:e2:fe:91:77:df:0c:90:62:5a:b8:1d:da:
         ef:94:4a:91:e4:47:a8:99:e9:4d:f6:82:df:e6:f3:cc:14:4d:
         45:27:b4:3a:e2:09:47:5e:bc:73:db:c7:74:d1:24:3f:af:78:
         34:9e:5e:a9:73:21:03:0c:6e:c0:4d:c9:57:2d:94:df:79:04:
         17:da:51:1c:a7:49:b8:73:7d:bb:fc:1f:40:43:f0:d3:e2:8f:
         03:6f:8b:e8:24:03:ee:fa:83:ff:9c:38:03:11:db:cf:d6:c5:
         fb:f4:29:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:24:45 2025 by rpki-client