Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee/cc5f07f6-3ecc-3e51-8e2d-70e39fa53b81.roa
File:                     cc5f07f6-3ecc-3e51-8e2d-70e39fa53b81.roa (raw, json)
Hash identifier:          9TwNrxW4fHN9FP1rK3SPr35w9MAoS09bL1VP8wnXjIA=
Subject key identifier:   6A:49:2E:49:3F:D9:A7:E5:21:EA:86:A9:F9:ED:92:26:32:96:D8:DD
Certificate issuer:       /CN=e0b025a6-f810-4886-9422-6feaed3df1ee
Certificate serial:       010D0C9F4328584AA343E6EF52D34731EAF27480
Authority key identifier: 70:7E:CE:FE:E7:9E:FA:12:C6:B8:64:19:94:18:5C:91:01:5C:D0:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee/cc5f07f6-3ecc-3e51-8e2d-70e39fa53b81.roa
Signing time:             Fri 25 Jul 2025 17:14:20 +0000
ROA not before:           Fri 25 Jul 2025 17:14:20 +0000
ROA not after:            Thu 23 Oct 2025 17:14:20 +0000
asID:                     63311
IP address blocks:        2602:20c::/40 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee/e0b025a6-f810-4886-9422-6feaed3df1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee/e0b025a6-f810-4886-9422-6feaed3df1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a3:43:e6:ef:52:d3:47:31:ea:f2:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b025a6-f810-4886-9422-6feaed3df1ee
        Validity
            Not Before: Jul 25 17:14:20 2025 GMT
            Not After : Oct 23 17:14:20 2025 GMT
        Subject: CN=4329afcd-aed3-446a-9f80-de4909281428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:9e:d9:92:3b:71:bb:46:4a:80:12:db:a4:
                    1c:8b:32:f3:76:14:a4:fd:ce:1d:19:94:ab:64:85:
                    42:a2:8a:47:24:3a:4f:fc:91:2e:f4:02:d4:aa:83:
                    23:9d:77:02:f8:70:cf:ba:24:08:04:99:62:5b:50:
                    ab:6a:b0:e0:6f:c7:ef:da:ad:f7:cf:a4:ee:72:88:
                    99:5e:bf:b2:30:9a:3b:44:ae:39:ab:99:1a:8b:26:
                    fe:a5:59:e9:58:a3:9d:1c:13:af:b1:2e:c4:d4:a3:
                    33:26:98:1d:51:60:c2:0e:ad:8e:09:0e:ae:51:58:
                    fe:ca:ac:ca:e6:3b:7d:67:21:98:a0:cf:1f:cc:7d:
                    63:5b:ed:dd:c1:83:56:f3:d3:9f:44:db:5a:e7:3c:
                    fc:67:0e:aa:03:74:94:d2:e6:b5:f1:2c:67:d4:34:
                    7c:af:db:e7:d3:21:42:83:27:c6:94:51:09:bd:9e:
                    ec:f4:3e:2a:40:c3:60:7a:3e:3f:ab:4b:d4:d4:54:
                    ab:e6:be:1b:8e:78:99:2b:43:d5:07:3c:88:f1:53:
                    79:6c:f1:a8:89:64:3e:a2:39:7e:24:6c:17:01:87:
                    c8:41:d2:06:60:4a:b8:51:a1:e4:33:3a:67:2a:07:
                    e3:9c:f9:a2:2a:0d:9d:14:15:44:8b:30:74:ef:09:
                    f9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:49:2E:49:3F:D9:A7:E5:21:EA:86:A9:F9:ED:92:26:32:96:D8:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee/cc5f07f6-3ecc-3e51-8e2d-70e39fa53b81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee/e0b025a6-f810-4886-9422-6feaed3df1ee.crl

            X509v3 Authority Key Identifier:
                keyid:70:7E:CE:FE:E7:9E:FA:12:C6:B8:64:19:94:18:5C:91:01:5C:D0:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0b025a6-f810-4886-9422-6feaed3df1ee.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:20c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:38:6f:1f:ff:e5:78:1b:02:0f:e0:c0:c9:81:b0:12:13:5b:
         36:f9:21:6e:cb:a9:bd:36:16:fa:b8:33:87:09:a2:84:e5:77:
         3d:9f:d4:fc:87:01:03:15:26:2c:80:6a:1e:64:7c:d4:a0:81:
         0d:1e:61:0f:48:e4:11:ef:49:5c:7b:a9:75:c4:4c:08:39:3a:
         88:e7:62:30:32:d9:83:ce:82:3b:4c:31:18:45:54:d4:a3:b4:
         ea:84:84:dd:08:30:43:bf:00:02:43:ca:06:4b:48:47:38:c3:
         ce:40:8e:7a:d3:79:54:44:4e:40:72:81:9d:ca:51:49:f1:a7:
         3a:c3:46:1f:c9:6e:64:5d:25:cd:45:ce:c5:69:c2:61:1a:7f:
         44:4a:36:04:a2:7f:0b:71:32:ef:35:a8:e7:a5:b1:c3:4c:ad:
         e9:c0:e2:70:e1:6d:1f:6c:dc:34:b6:05:37:26:b1:58:ab:86:
         ef:66:26:ee:d3:2e:35:4a:c7:50:17:16:7e:68:8e:31:3d:2c:
         d6:ae:6d:1e:88:09:bf:f1:3e:bc:2d:81:c5:6c:5b:b5:da:86:
         36:46:53:0d:f4:b7:74:bb:4f:d7:0a:d5:e5:6c:1d:4b:6f:c4:
         a7:86:4e:1a:27:e9:6c:87:4a:29:9a:c5:46:b8:b7:75:51:ca:
         f1:45:89:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:22:39 2025 by rpki-client