Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56/f9cdb26a-2b61-3ad7-a7ab-c9199ec85a75.roa
File:                     f9cdb26a-2b61-3ad7-a7ab-c9199ec85a75.roa (raw, json)
Hash identifier:          28i2GhvUkPMHszsfqcGqi1xoBfadn5SF/X9xw6WQCx8=
Subject key identifier:   A2:29:0D:7A:D3:3A:9C:F4:16:C1:64:77:B1:7C:47:33:37:F4:E7:2D
Certificate issuer:       /CN=05e336d7-fd68-448f-97a9-1e062f1a6b56
Certificate serial:       010D0C9F4328584ABD4BA0AE7601836BE823D640
Authority key identifier: F0:6A:81:19:4F:8E:3A:C2:D0:9B:49:21:60:40:EB:81:4C:2F:00:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56/f9cdb26a-2b61-3ad7-a7ab-c9199ec85a75.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     31898
IP address blocks:        2602:f960:d0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56/05e336d7-fd68-448f-97a9-1e062f1a6b56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56/05e336d7-fd68-448f-97a9-1e062f1a6b56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:a0:ae:76:01:83:6b:e8:23:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05e336d7-fd68-448f-97a9-1e062f1a6b56
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=9ee73cd3-c271-4972-b53a-a4832093610f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9d:fd:46:94:b2:67:c4:30:94:0d:f2:31:25:
                    c0:19:4a:c2:c8:45:ec:d3:31:b8:64:3a:4c:15:50:
                    41:b2:06:b7:76:02:7f:5c:82:d8:f8:93:51:20:e3:
                    f4:06:cc:0d:e5:03:6b:80:93:f9:fd:cb:b9:33:1c:
                    8a:f0:47:84:eb:04:b5:c7:a4:32:e8:5e:5f:15:af:
                    b4:cb:7e:c0:46:0c:b4:b5:c5:fd:7c:fa:87:fc:6d:
                    2d:4e:ce:28:c0:10:b7:e8:a3:c6:94:08:47:0f:74:
                    f3:e1:59:6c:89:65:05:75:1d:37:93:18:56:18:18:
                    db:17:ec:cf:dd:6e:c8:05:bf:ae:63:e5:e0:62:ba:
                    fd:13:49:67:76:d5:9e:41:c3:d6:43:22:b6:61:8e:
                    22:5a:96:77:58:4a:6c:7a:69:d1:d1:2c:d6:da:14:
                    75:90:cc:d4:be:d8:46:96:34:2f:70:1b:60:b7:92:
                    99:65:82:66:20:87:81:5a:a9:8f:9b:b3:00:09:6e:
                    10:c9:f2:03:97:0e:8a:e9:94:e8:0a:c0:29:34:74:
                    68:92:d2:bf:8e:6a:c4:71:ec:ed:f7:5a:85:55:72:
                    ad:a0:88:95:5d:44:ff:29:db:c8:2c:47:e1:0b:de:
                    91:cd:ef:f2:fe:a8:02:d2:c6:84:a3:1d:05:7f:66:
                    f3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:29:0D:7A:D3:3A:9C:F4:16:C1:64:77:B1:7C:47:33:37:F4:E7:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56/f9cdb26a-2b61-3ad7-a7ab-c9199ec85a75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56/05e336d7-fd68-448f-97a9-1e062f1a6b56.crl

            X509v3 Authority Key Identifier:
                keyid:F0:6A:81:19:4F:8E:3A:C2:D0:9B:49:21:60:40:EB:81:4C:2F:00:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f960:d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:1c:06:8e:52:da:5f:43:97:7c:d4:ce:21:70:b8:5f:f7:d5:
         37:c1:1e:dd:dd:6e:d3:c6:99:d3:ac:57:3a:1b:20:46:f5:44:
         ef:5c:e4:c5:fc:e4:48:2d:b2:5b:47:04:45:8e:13:86:3b:cf:
         6d:bb:6f:4a:62:1d:45:8b:eb:07:64:7d:07:b6:64:a6:99:b1:
         b2:ca:55:a5:30:44:8b:1c:95:ef:2a:22:8f:34:d9:5c:ab:3e:
         b4:2e:73:2a:a6:e4:f2:aa:ad:0b:bb:3b:43:4b:4a:e9:0c:48:
         c5:fc:db:2a:b8:06:c9:d9:d4:ff:92:94:91:4c:1c:df:35:ae:
         d6:a2:9e:f7:74:7c:c8:d7:b4:f3:a1:9e:83:71:5e:59:88:26:
         dc:19:ed:93:bc:ce:91:92:5f:dd:b6:55:80:59:8d:05:73:b7:
         62:76:44:3f:1b:5a:42:18:c3:4f:3a:ff:ec:ce:9d:1f:7a:4d:
         51:23:9f:cd:88:59:4e:56:96:c5:20:2a:92:ff:01:70:98:50:
         d1:17:b9:a1:d5:04:a5:4d:33:ab:dd:4d:f1:20:f2:02:fd:20:
         f8:ad:6b:60:b2:c3:47:b1:36:e7:e8:aa:4a:36:a4:1d:70:58:
         4a:dc:ce:e6:83:8a:cd:d1:ea:16:e8:fe:0b:5f:d2:5f:e0:72:
         b6:05:b2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:08:17 2025 by rpki-client