Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/7cdca630-d3e7-3865-840b-973e14ba9d60.roa
File:                     7cdca630-d3e7-3865-840b-973e14ba9d60.roa (raw, json)
Hash identifier:          o2KwsANg3zJ7FzLtRG9gA0tjqbuWRLJW13RjtezBA7U=
Subject key identifier:   3D:F0:47:5A:92:AE:FC:06:27:CD:1D:34:3C:2D:AE:BB:F8:21:50:8D
Certificate issuer:       /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e
Certificate serial:       010D0C9F4328584A74B5E328209ECDA90753B180
Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/7cdca630-d3e7-3865-840b-973e14ba9d60.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     23404
IP address blocks:        2602:fbbb::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:e3:28:20:9e:cd:a9:07:53:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=ed2dea02-08a5-43f9-82cb-046934af2462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6f:88:c0:a2:47:d4:53:0c:c5:a4:c9:05:48:
                    9e:86:fd:e8:3c:41:72:3d:61:6d:ec:05:1f:b5:4f:
                    d0:6f:a2:14:b8:60:0a:6d:10:12:d9:f4:6f:58:5f:
                    56:6c:5a:d2:03:1a:13:56:e2:a9:ff:26:2d:88:42:
                    b1:0a:ff:26:85:fb:46:6a:39:d3:13:f8:2b:d1:b4:
                    c5:2d:ec:9e:87:b8:ba:66:5b:4d:88:72:47:2b:cf:
                    4d:4a:8f:82:c8:c1:74:db:f3:e5:cf:7f:98:9a:12:
                    27:c7:51:84:75:7d:b8:f7:aa:cd:18:c5:af:94:59:
                    7d:c2:bf:6b:86:ea:17:e9:ce:1b:c6:17:5b:9b:4e:
                    e0:9f:d5:22:fe:53:f7:7b:59:6f:62:d5:5d:46:82:
                    55:37:e0:4c:9e:ee:79:47:ee:cf:90:4f:8f:16:4a:
                    4c:11:fe:09:0c:1d:36:e9:32:60:66:9b:db:29:15:
                    ec:c1:3d:59:44:96:98:ca:4d:10:32:4f:9e:0c:cb:
                    a2:16:d8:49:50:af:b6:5a:a8:f6:35:29:cd:ba:e4:
                    67:17:f6:f8:3c:6b:e2:54:94:b4:58:ef:5f:10:74:
                    fa:8a:50:e2:34:db:93:99:42:62:e7:4c:d3:7e:6d:
                    1b:6d:fc:df:b3:8c:33:e3:af:38:0d:96:5b:db:1c:
                    f5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F0:47:5A:92:AE:FC:06:27:CD:1D:34:3C:2D:AE:BB:F8:21:50:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/7cdca630-d3e7-3865-840b-973e14ba9d60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbbb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a1:1b:09:74:2a:73:aa:70:94:e4:e3:1b:b4:f8:5d:22:11:
         36:e2:a2:a7:0d:e5:f0:d0:ef:e2:82:48:5d:1c:cf:83:63:6d:
         60:0b:eb:1c:76:e1:09:73:ec:9d:be:87:7a:f8:c6:01:2c:17:
         46:9b:55:22:18:8e:fd:3c:74:b5:fe:36:6e:38:67:87:01:2b:
         0e:51:72:2e:f6:e1:38:60:4e:34:63:10:fb:9d:e8:c2:29:a2:
         d2:0b:ac:5e:88:5a:c0:ae:dc:2a:0e:6f:26:14:8c:5b:db:66:
         08:e7:6f:2a:bf:11:ed:98:1d:d7:0a:1f:a3:32:ac:55:0c:1f:
         41:40:1c:e6:53:ff:0c:59:20:fa:f1:0c:7d:df:86:92:91:40:
         6b:d0:f3:24:79:f9:ae:3a:85:16:63:32:dd:af:12:d4:0d:8b:
         82:79:0d:24:82:5e:99:03:75:c8:4b:56:21:46:26:d7:d3:20:
         5e:53:50:ba:30:95:b1:d2:41:b6:80:9e:31:53:3d:30:09:06:
         30:57:ea:ec:4b:aa:5b:38:65:46:bf:de:c1:d2:b3:42:c5:9a:
         da:42:ee:db:31:de:0d:2a:e7:60:4b:5c:78:a6:a0:c0:98:a1:
         f5:6c:e2:c5:0f:5e:d6:16:dc:ec:bd:d9:29:44:94:88:33:96:
         e1:cb:e0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:45:17 2025 by rpki-client