Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3404f2a3-3c02-3254-98ed-ee78a25d4f34.roa
File:                     3404f2a3-3c02-3254-98ed-ee78a25d4f34.roa (raw, json)
Hash identifier:          CPA/IYAGepJHpPd20QNOuvjuVT5locPpJCumhGRJDaQ=
Subject key identifier:   A7:AA:BB:0C:37:FD:4F:84:B8:11:13:C3:74:CC:91:32:95:09:13:E7
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F4328584AA2C6440415379ED8FABFE940
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3404f2a3-3c02-3254-98ed-ee78a25d4f34.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     63150
IP address blocks:        2602:f988:92::/48 maxlen: 48
                          2602:f988:93::/48 maxlen: 48
                          2602:f988:94::/48 maxlen: 48
                          2602:f988:95::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:44:04:15:37:9e:d8:fa:bf:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=27b2b09d-ddd3-4734-a948-b1f9dc0ba4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:69:c9:d4:a3:ea:ca:e5:40:bd:eb:ad:74:0f:
                    6a:2a:11:09:a0:3b:f6:ad:13:c0:0a:00:80:c1:6c:
                    d1:9b:a6:d3:51:b9:bf:7e:38:2f:f2:7f:db:96:c0:
                    e1:d7:2b:10:ff:91:28:85:9c:14:75:68:41:0b:69:
                    c5:1f:50:87:6d:38:be:73:7a:8e:4a:d2:bf:34:1e:
                    4d:d2:a2:5e:18:54:af:6c:c5:db:6a:8e:36:e6:58:
                    c3:6e:3b:8e:95:82:75:75:df:30:27:ea:df:0f:13:
                    04:1d:f4:de:fd:1a:88:2f:a1:e5:20:39:ff:28:6f:
                    43:ec:68:c0:84:6c:b0:e3:59:17:e6:73:73:e2:55:
                    8a:f9:7a:0a:b5:a1:e4:11:79:be:13:fb:63:16:09:
                    a1:fc:aa:05:d4:1e:aa:a3:8e:25:43:f6:a3:d2:f5:
                    89:f5:82:c6:43:95:e4:95:e4:82:bb:d4:ac:2d:7f:
                    80:9f:1b:6e:8b:5f:89:bc:7e:dd:39:c4:44:b8:67:
                    16:51:79:b4:fc:ab:f8:6e:95:a3:cf:5d:bb:09:a4:
                    50:07:1d:46:b0:cd:a7:a1:a9:59:33:52:32:b9:24:
                    6a:b8:74:6f:45:1e:24:d8:e1:03:1f:fa:1e:8b:6f:
                    af:72:8d:bd:d3:52:9a:90:0a:cc:48:ae:d9:49:6c:
                    95:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AA:BB:0C:37:FD:4F:84:B8:11:13:C3:74:CC:91:32:95:09:13:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/3404f2a3-3c02-3254-98ed-ee78a25d4f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:92::-2602:f988:95:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:de:36:37:84:6d:b7:df:ce:c2:63:fb:0c:37:20:97:e7:ba:
         ee:09:a1:cf:8f:21:2a:36:e7:87:fe:ba:dc:24:6c:bd:ee:a4:
         a1:f6:e5:18:8a:58:31:b2:88:64:2b:99:ec:cb:3a:a4:b9:c0:
         cc:6d:99:60:1b:b3:2f:12:23:59:f1:53:c3:64:3b:4f:7e:ff:
         c9:8c:0e:e0:44:48:ef:01:f0:ab:ef:37:55:de:ca:29:d0:b2:
         77:3b:9a:08:6f:bc:55:f6:c0:93:6d:99:74:be:53:96:59:2c:
         02:d1:b3:6b:13:76:4a:47:35:a1:94:35:13:f3:4a:74:0e:ec:
         59:36:c5:d8:b7:f9:f4:dd:bc:86:f6:4f:31:b8:69:29:20:9b:
         df:f6:1b:94:04:6b:4d:24:7e:56:db:f0:a1:55:20:0f:08:5c:
         85:36:90:25:af:2b:44:db:f0:ec:0e:ba:19:c8:56:28:12:54:
         93:c8:b2:50:1f:01:3b:45:a5:c7:f5:41:13:e8:8b:31:63:d2:
         6e:f8:0a:b2:b2:4e:ef:cc:a5:32:59:e6:c9:6d:aa:1b:49:c9:
         58:f8:92:a2:59:2f:21:80:7a:6d:fe:3a:af:ea:f5:36:5e:db:
         99:8c:60:1b:66:a0:53:1f:a7:62:5e:83:12:b9:a1:7a:ed:63:
         da:ed:85:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:18:37 2025 by rpki-client