Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/3ddab41c-bfeb-30e6-b0d8-efee9690e39d.roa
File:                     3ddab41c-bfeb-30e6-b0d8-efee9690e39d.roa (raw, json)
Hash identifier:          057usEAc4QdqCrrfMiti0bYnM3xdDRFloPiBNch7FdE=
Subject key identifier:   F3:50:92:AD:3E:ED:83:17:3D:8D:A9:5D:DB:73:E2:21:D2:83:D3:A4
Certificate issuer:       /CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d
Certificate serial:       010D0C9F4328584A9FFBA16F7D8503EB50499980
Authority key identifier: 33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/3ddab41c-bfeb-30e6-b0d8-efee9690e39d.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     394346
IP address blocks:        2602:ff25::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a1:6f:7d:85:03:eb:50:49:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=d0ed5923-df54-41ae-ad8c-cca8cdb708be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:73:8f:8c:17:f5:70:35:e6:ee:1e:a1:87:23:
                    fd:34:36:37:6c:6c:9e:46:86:d7:b4:88:a4:05:30:
                    fa:68:87:cd:c4:3d:be:39:8d:13:65:24:bd:66:7f:
                    ba:c9:0d:dc:46:ba:42:60:4e:0f:e7:6d:48:b5:65:
                    e4:b8:ad:08:1f:dd:73:d2:5c:10:78:d1:04:10:2b:
                    5f:84:14:a8:62:3e:e4:31:46:bc:a0:97:e3:6b:1f:
                    4b:1a:f3:48:82:2d:00:71:81:19:ec:5c:82:1f:c3:
                    9f:b5:77:02:1f:7c:a5:6b:25:1d:e0:ec:45:05:d5:
                    99:fd:3c:9f:78:9b:e0:c6:ec:2b:f5:c3:d7:5d:78:
                    a3:94:7c:ce:f9:75:98:6b:71:43:2b:ee:51:55:68:
                    9a:34:88:49:cb:94:28:99:5d:8c:0b:18:ac:40:60:
                    50:9b:7f:7e:02:a4:cc:15:56:fb:2c:ad:ae:ad:26:
                    2b:29:f5:50:34:4b:28:1a:53:c0:aa:0c:b9:12:86:
                    19:20:d1:22:59:7f:60:2f:4e:e9:ca:b8:0b:ec:bc:
                    8d:58:af:b9:a4:65:64:2b:01:59:74:9e:06:7f:36:
                    a0:07:bb:e6:b1:0d:05:42:a2:f7:2a:00:33:34:6c:
                    95:27:97:d4:98:9f:8b:38:e8:1b:87:29:fb:1c:1b:
                    1c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:50:92:AD:3E:ED:83:17:3D:8D:A9:5D:DB:73:E2:21:D2:83:D3:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/3ddab41c-bfeb-30e6-b0d8-efee9690e39d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl

            X509v3 Authority Key Identifier:
                keyid:33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff25::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:7e:61:1d:d4:75:6e:4d:1e:ef:17:7a:20:8d:51:ea:60:a3:
         f4:db:02:04:d2:bd:20:74:ee:8e:fc:a9:2c:60:aa:35:bd:0d:
         24:4d:5e:9c:b3:bc:d5:b8:57:16:c5:82:b2:ed:93:5b:11:b0:
         e2:72:c9:d1:8e:88:28:41:24:80:1c:ad:51:0f:0b:7c:3f:9a:
         50:41:a9:af:83:ea:b4:95:6f:20:c2:04:5b:0e:be:43:ce:bd:
         f0:79:2e:be:ef:e5:0b:be:36:fd:78:21:0b:9d:7a:0b:e2:20:
         11:8a:73:67:a3:1e:e7:c7:e6:c7:be:2e:b2:13:4a:fa:4b:e5:
         11:9a:0e:e7:ea:e3:14:e6:9b:09:6a:cf:3e:2e:e1:a2:aa:e4:
         4a:59:03:68:46:70:a4:18:03:1e:ca:9e:ee:c8:6c:13:de:64:
         2d:23:46:de:3b:36:ca:e0:8c:7f:76:b2:af:ca:37:c5:dd:e0:
         d3:a7:37:90:57:28:68:4e:e7:a9:4e:68:a6:fa:ae:59:a7:7a:
         b8:46:11:23:72:39:47:8c:e9:51:dd:ad:55:7b:96:69:dd:8b:
         70:44:15:cf:7d:6e:69:85:53:94:18:80:5a:f9:96:fd:9d:6f:
         05:be:42:5d:d4:3c:c0:5d:e8:30:e6:06:7f:fd:99:74:01:12:
         c9:98:70:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:15:04 2025 by rpki-client