Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/91a1f677-3c17-320d-920c-7a6755bcf4dd.roa
File:                     91a1f677-3c17-320d-920c-7a6755bcf4dd.roa (raw, json)
Hash identifier:          OqKFnorsFf9pwhrPDYteknORfRFJbyjj+xop0b3c1IQ=
Subject key identifier:   62:F6:F6:69:7E:E2:09:05:1F:08:46:17:50:F4:A2:E2:86:05:93:7B
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F4328584AA85B9E101001CED941905E00
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/91a1f677-3c17-320d-920c-7a6755bcf4dd.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     62707
IP address blocks:        2602:fe12::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:9e:10:10:01:ce:d9:41:90:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=1083b684-8ec6-4aeb-9079-b621f173590a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ae:ca:70:f3:ea:9a:a5:e6:f9:cb:d3:20:c3:
                    ac:2b:70:34:f3:99:5d:1b:4b:14:1a:56:f1:6b:9e:
                    76:2d:06:da:72:09:b8:ce:cc:20:1a:af:5d:b7:ae:
                    0f:6e:cf:24:8b:25:d5:6d:b2:a2:46:90:aa:47:49:
                    09:4b:bb:0f:83:41:33:ae:3b:c0:fc:66:b5:7b:58:
                    7f:36:d1:05:23:74:42:2b:ec:ea:d3:ac:67:d4:54:
                    72:8b:70:9e:77:6b:ff:23:24:cb:d6:88:ce:63:c3:
                    ba:84:e3:ba:29:e9:31:aa:d1:2a:dc:5d:6e:22:a9:
                    16:ac:81:e6:2a:27:8e:0c:be:5e:74:b9:6c:0f:1c:
                    a7:09:c7:37:36:11:ed:83:37:f2:03:c3:a8:9e:4c:
                    45:d4:61:48:98:01:be:3d:14:ff:00:f0:76:ea:38:
                    cf:6e:44:29:d0:66:1e:5d:35:76:c3:b2:db:e0:80:
                    a6:39:22:ff:8a:7b:be:6b:94:5a:03:b5:d2:ab:4b:
                    8b:96:20:96:1e:b1:b9:02:d8:ae:48:44:e3:7e:3f:
                    e9:8e:77:ca:2f:c2:43:d6:66:03:da:c6:3c:d1:36:
                    85:1c:c0:00:8c:9e:c7:bf:f0:67:22:69:d1:51:41:
                    cb:9d:4c:39:71:90:40:ca:68:7e:5d:d8:74:9e:84:
                    39:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F6:F6:69:7E:E2:09:05:1F:08:46:17:50:F4:A2:E2:86:05:93:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/91a1f677-3c17-320d-920c-7a6755bcf4dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe12::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:9a:16:93:56:8c:1f:37:d4:42:60:d7:98:0c:64:4a:b3:1c:
         59:4b:6b:55:6d:f8:a4:9a:15:97:0d:4c:ac:8e:3c:5b:76:66:
         cf:87:eb:03:30:13:19:b0:b8:c0:2d:fc:4e:cb:9f:44:55:5b:
         85:6f:a6:94:48:84:92:d5:8b:c4:fb:08:6f:ba:0b:aa:9c:3c:
         50:5a:1e:8e:fe:8a:39:5e:59:56:30:5b:9e:b2:29:22:93:89:
         95:78:ea:38:e2:b2:33:2d:41:63:aa:d4:f8:89:d0:f8:e3:95:
         04:04:a5:b4:2e:38:23:03:b6:76:16:0b:de:69:e2:49:3d:f4:
         9a:9c:e0:03:68:2b:c1:a2:61:42:00:58:5e:68:9f:f0:b7:14:
         0c:26:70:e3:2b:2a:79:c3:fb:8e:63:87:ce:ff:dd:91:18:e3:
         b4:d9:17:37:2b:0c:2d:10:07:69:39:96:96:7e:2c:2e:24:50:
         f9:cf:61:8d:1a:e4:23:c2:d4:02:23:78:20:0f:01:f7:1c:60:
         93:0b:6c:48:88:3b:a7:cc:e9:bb:15:0a:d5:4f:f9:33:8f:74:
         f4:da:fa:af:9e:d2:05:fd:c5:01:bf:68:16:68:b6:59:98:a6:
         bb:20:03:51:96:f8:9e:38:88:5b:b9:bb:bf:63:13:2a:d2:13:
         a5:0d:59:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:26:54 2025 by rpki-client