Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/3c2c5667-b976-3e02-a7c5-5ce804eb5262.roa
File:                     3c2c5667-b976-3e02-a7c5-5ce804eb5262.roa (raw, json)
Hash identifier:          UimrqUy9IkRU9S0uJ1JUPIycgJubDegmfE6gBmhXiQo=
Subject key identifier:   9C:D8:B2:88:34:26:BE:36:89:E7:B6:08:35:E5:F4:6E:6B:B0:03:21
Certificate issuer:       /CN=53f3af06-68ea-4591-9526-0c1fce331651
Certificate serial:       010D0C9F4328584A9BCB71D692745801AA1A9E80
Authority key identifier: 8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/3c2c5667-b976-3e02-a7c5-5ce804eb5262.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     395611
IP address blocks:        2602:fd53:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:71:d6:92:74:58:01:aa:1a:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f3af06-68ea-4591-9526-0c1fce331651
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=50d36c26-b339-4e04-a3f8-794e7aeb291c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cf:24:a3:e5:10:5b:20:8d:e1:4b:2f:67:65:
                    f4:86:d2:01:42:61:95:6d:40:39:d8:ee:29:9c:52:
                    55:b3:6e:ef:3c:c8:e7:60:40:92:da:26:14:39:2c:
                    44:88:58:58:0c:5a:7d:14:88:59:b2:63:69:0a:73:
                    eb:d2:61:cb:4e:a5:33:dd:1d:74:98:90:cc:16:58:
                    c7:77:33:32:50:bb:36:9f:0d:b3:83:98:bc:3b:55:
                    fc:09:36:8f:f0:aa:e5:3e:bc:19:96:2b:b0:f0:cf:
                    1d:ea:55:70:e5:c9:07:22:6d:af:60:51:f2:7a:b3:
                    f7:ae:3e:c2:f7:1a:30:0a:cc:76:20:be:f1:72:5a:
                    ff:80:b2:e1:28:1c:94:d2:f0:3d:b7:76:64:39:da:
                    9b:ee:7a:b9:fa:24:16:6d:2d:59:03:cc:92:30:94:
                    ad:c1:75:c8:fc:5b:ca:cb:c7:04:41:73:a8:a8:e0:
                    37:24:01:4f:4c:90:f3:b0:9e:7c:2f:39:6a:d2:eb:
                    88:6f:7b:29:45:52:06:02:76:bc:f7:c3:b5:82:50:
                    e4:ee:72:9a:67:5b:1e:7e:40:51:3a:af:a2:47:2f:
                    b0:dc:ee:9b:ef:b4:33:28:70:83:8e:3b:14:65:6c:
                    9a:f8:95:27:1c:0f:3b:bd:eb:36:73:4b:4b:50:44:
                    1c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D8:B2:88:34:26:BE:36:89:E7:B6:08:35:E5:F4:6E:6B:B0:03:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/3c2c5667-b976-3e02-a7c5-5ce804eb5262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl

            X509v3 Authority Key Identifier:
                keyid:8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd53:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:a8:70:9b:c9:94:c9:31:40:71:07:f3:45:c4:1e:b6:b5:03:
         6a:1a:29:63:3c:1f:8e:5e:5e:e9:b6:a6:a2:7d:e9:38:d6:c2:
         7d:c7:70:1a:a5:f7:05:bf:27:63:bd:8f:9d:e2:6f:16:c6:4e:
         3e:92:17:9a:d4:b0:95:17:92:68:2f:c8:02:20:14:ed:3e:4b:
         b1:01:76:5c:7e:8c:f6:31:a2:59:47:c7:b5:03:be:42:9e:2c:
         0d:09:65:88:e4:e5:c2:c7:9f:7b:4d:cb:58:66:cc:5c:ee:82:
         b6:a3:a5:84:7c:35:92:6b:22:a5:9c:b7:21:f1:49:29:55:95:
         40:36:7e:7e:c4:89:69:a0:e4:c4:c7:e9:36:f5:ab:1c:34:44:
         d9:84:50:a8:a2:eb:77:5a:27:ea:e2:22:28:4f:e0:c4:d8:88:
         f3:47:9a:3c:25:79:63:c8:bc:fe:6f:ed:90:14:7e:e2:1a:b4:
         23:ee:44:16:02:d2:b2:35:c0:86:cc:6e:9b:57:41:71:92:f2:
         5b:9d:a2:38:a4:dd:43:2d:bb:e4:b5:35:5b:de:e2:59:56:4f:
         4e:88:03:06:d7:94:3f:c0:0e:07:fa:c5:3f:61:b8:04:77:01:
         64:85:36:a4:2c:ce:ba:48:ec:84:bc:ce:3c:bc:48:85:59:ad:
         c1:c0:da:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:47:14 2025 by rpki-client