Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/1f33de04-fa68-3cd3-a8b6-dd54a58d6e7f.roa
File:                     1f33de04-fa68-3cd3-a8b6-dd54a58d6e7f.roa (raw, json)
Hash identifier:          ssvC6wnmtGgNZfFnOv8vPZFuWPgASN3l0VP0OmDHh4c=
Subject key identifier:   A1:D6:22:5D:03:99:6F:E7:EB:47:E1:42:9C:1A:AF:86:6D:1E:35:1A
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584ABBE635C90FD272090377D000
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/1f33de04-fa68-3cd3-a8b6-dd54a58d6e7f.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     63150
IP address blocks:        2602:f988:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:35:c9:0f:d2:72:09:03:77:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=190ad167-584f-4df0-9451-92710f7f3519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:6c:ab:ea:b2:6a:5d:fa:e1:2c:77:db:dc:b9:
                    31:8c:7f:3c:26:03:b4:41:cc:01:81:c4:ad:37:73:
                    25:e1:dc:22:69:2e:a1:30:17:99:00:6a:5a:6e:1a:
                    ed:db:84:31:99:f1:57:97:15:0a:9b:c8:e0:cd:fe:
                    ff:b7:ae:64:89:17:1e:d6:61:24:3d:e3:7c:d7:01:
                    6d:22:81:5e:9c:c9:db:df:76:70:7b:2d:51:62:c6:
                    af:50:4c:b8:0e:32:af:31:2c:42:d0:ff:4f:eb:f4:
                    65:f9:77:5e:5c:4e:a3:db:b4:5b:f2:ba:f5:e4:34:
                    cb:12:f0:94:b7:ae:e6:c5:bc:53:60:15:ed:07:75:
                    52:19:98:32:5c:b3:79:7f:d1:ab:15:51:19:2a:03:
                    be:20:b8:6a:f8:22:4c:8e:89:0e:74:36:f0:ba:0e:
                    01:a5:b3:a5:24:fe:dd:c8:19:cb:46:8a:f5:c4:6a:
                    82:13:4d:31:a1:ee:e3:70:b7:96:84:2a:2d:b2:b3:
                    81:84:2a:08:e3:2e:c6:c6:88:c8:40:19:db:b3:d0:
                    0e:c2:c1:31:fb:39:1f:d0:54:f4:2e:1e:24:7e:be:
                    66:b8:df:3a:16:31:f0:55:f3:df:77:e8:a9:9f:79:
                    b4:9d:5c:c0:03:38:d8:c1:57:42:21:0d:f0:3c:4e:
                    48:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D6:22:5D:03:99:6F:E7:EB:47:E1:42:9C:1A:AF:86:6D:1E:35:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/1f33de04-fa68-3cd3-a8b6-dd54a58d6e7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:cc:95:86:e6:4c:3e:c9:3a:a3:4e:50:fd:1b:0c:50:5b:48:
         e1:79:46:0c:b7:4a:56:f7:d3:37:86:c5:8a:a0:b4:cc:36:9e:
         5d:c7:a4:c1:66:55:04:47:0c:44:e2:f9:b1:3d:de:e5:72:b0:
         0f:05:02:1a:24:ea:7e:4a:cf:5d:e6:ec:ec:72:1a:fd:5d:50:
         4d:f9:f7:bf:c7:f7:ee:a5:a1:ee:c5:60:b2:62:c6:b2:54:a5:
         27:61:02:3c:e8:5e:11:53:c9:ce:ba:d5:29:42:45:27:33:a6:
         da:13:e1:bf:ab:e7:0d:4d:14:e3:92:32:7b:4a:60:00:16:22:
         cb:47:fe:e9:cc:92:2b:ae:8d:e2:62:9b:af:d9:1d:85:5f:3b:
         ff:d3:d1:80:b8:51:f5:ab:43:d2:a3:70:bc:1d:77:f8:1c:dc:
         12:54:fd:12:12:ea:e3:c2:42:3c:14:f1:98:10:6a:1c:91:d5:
         dc:26:4f:1b:25:bf:ed:ab:6d:cc:4e:28:4b:b4:e6:a9:a4:e1:
         b0:7e:55:ac:9e:f0:88:55:dc:91:82:98:7c:90:c2:b7:51:62:
         7e:49:0e:c4:5a:aa:9c:57:e4:9f:6e:44:f7:d3:e5:86:1b:5d:
         47:ba:f2:eb:50:9b:78:9c:9d:df:36:50:e7:eb:95:af:12:98:
         0a:8a:1a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:17 2025 by rpki-client