Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/8c746254-1ab7-36dc-9361-dab7709e8124.roa
File:                     8c746254-1ab7-36dc-9361-dab7709e8124.roa (raw, json)
Hash identifier:          32RAJW39jIQCc7YbD/A3oPVa9oDmmoj1bVRqYJRSCSM=
Subject key identifier:   FF:C4:74:93:5F:31:9C:5F:59:EF:63:A8:83:E8:19:4A:D5:0C:E4:44
Certificate issuer:       /CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
Certificate serial:       010D0C9F4328584ABD4B918FD7CAF2ECB6738520
Authority key identifier: 0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/8c746254-1ab7-36dc-9361-dab7709e8124.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     400917
IP address blocks:        2602:fba2:18::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:91:8f:d7:ca:f2:ec:b6:73:85:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=146549e2-7aef-4322-b887-333fda3a0e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9b:f9:a9:fc:bb:b5:c6:2a:30:8d:d5:4f:7c:
                    d7:63:7e:e6:db:c3:59:82:6d:87:2e:9b:cb:ef:65:
                    76:b9:6a:03:76:42:28:05:69:a5:50:70:77:29:85:
                    49:33:6c:ca:01:6d:14:26:ce:99:5c:f4:07:11:77:
                    10:45:b4:1f:1e:4c:35:45:38:71:6f:1c:6d:71:3a:
                    9e:fb:f3:47:b1:9f:48:aa:6a:59:16:f3:ad:05:7e:
                    44:f1:66:38:01:93:6e:24:03:5f:4d:52:fc:b7:15:
                    98:13:50:67:20:79:aa:62:89:7a:7c:3e:5c:43:7c:
                    de:ae:2e:95:0b:59:51:a8:a4:a3:fd:3d:16:da:32:
                    88:91:fb:34:83:7d:2a:d6:13:ac:9f:fc:89:28:1d:
                    1c:03:33:1e:70:0c:db:5c:40:4e:74:09:8d:29:79:
                    97:2a:c3:82:cf:37:6a:57:76:a4:e8:7a:72:c7:ad:
                    2a:28:91:17:bf:87:2f:d9:c3:88:ce:53:59:aa:b4:
                    e9:e8:9b:b9:a4:53:ab:59:5c:d6:ac:50:e3:fe:ab:
                    f3:d9:5e:b1:85:a6:64:51:26:52:e7:75:66:7b:78:
                    79:36:46:b6:be:9b:5e:34:f4:c0:b7:b2:16:16:41:
                    ab:36:69:92:68:a0:d7:df:4b:36:7c:09:43:03:b4:
                    38:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C4:74:93:5F:31:9C:5F:59:EF:63:A8:83:E8:19:4A:D5:0C:E4:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/8c746254-1ab7-36dc-9361-dab7709e8124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl

            X509v3 Authority Key Identifier:
                keyid:0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba2:18::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:8a:cb:e6:5d:ea:b0:98:5e:4f:cb:de:e2:c9:13:46:3a:d7:
         d9:30:ed:9d:5a:c9:0d:96:70:bf:10:e0:99:cc:fc:7e:bd:aa:
         fe:bc:ce:80:02:e7:e7:06:0b:9e:60:92:5a:50:61:95:60:b5:
         f0:d9:af:24:65:aa:79:e8:b2:d1:5d:7b:8f:8f:ca:53:71:af:
         18:37:32:69:7f:7b:15:6b:60:6d:dd:e0:d7:0c:17:e2:7a:d8:
         fd:fd:7b:9b:cd:74:57:9d:08:51:76:78:47:00:37:e6:9c:e5:
         81:8a:b8:b0:0e:27:75:e5:25:77:be:0c:9b:a7:da:ab:8e:9d:
         a3:63:27:9e:ec:ad:11:a4:a4:fd:8f:43:d6:67:99:dd:8b:3e:
         66:87:16:ea:5d:74:a3:fa:9d:cc:c5:03:3d:de:46:f9:94:b0:
         f9:a8:94:d2:6a:bf:ff:c1:2d:c5:a1:d9:f5:d9:19:6f:e6:39:
         e5:ae:8e:42:1e:c4:6c:f2:50:6c:bb:ce:e9:26:54:96:a1:4e:
         5a:f7:31:b5:0f:97:07:c7:5a:f2:cc:61:ce:8c:27:99:f6:4c:
         2e:69:ec:4a:34:e2:e2:13:95:e5:2d:f7:aa:2d:87:1d:36:dc:
         e6:d7:61:b7:32:36:6f:01:70:16:56:61:4f:d0:1c:74:6d:63:
         8d:31:06:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:42:36 2025 by rpki-client