Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/08077cc6-604e-37fb-a79b-e8349fc4dbdc.roa
File:                     08077cc6-604e-37fb-a79b-e8349fc4dbdc.roa (raw, json)
Hash identifier:          U9xf1cZ7GggT0rBpEOwpbHctY69/zmQaZncGIMsc+W8=
Subject key identifier:   AB:51:D6:1D:3C:5B:FE:1F:29:85:D6:71:2F:C7:85:5E:84:84:BF:EA
Certificate issuer:       /CN=38f0cd1a-37b5-4e21-a451-606bf424f495
Certificate serial:       010D0C9F4328584AA6F62C343AB3CDE14B5F9580
Authority key identifier: 9B:CC:FC:21:D7:E0:11:6F:6F:A1:88:BB:54:69:B2:C7:89:E1:64:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/08077cc6-604e-37fb-a79b-e8349fc4dbdc.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     26737
IP address blocks:        2602:f894::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/38f0cd1a-37b5-4e21-a451-606bf424f495.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/38f0cd1a-37b5-4e21-a451-606bf424f495.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:2c:34:3a:b3:cd:e1:4b:5f:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38f0cd1a-37b5-4e21-a451-606bf424f495
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=06a98d42-dfe9-4ba9-b07c-ad275e57f756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:9c:f6:40:8f:12:40:51:c3:63:d4:c5:58:
                    81:01:f5:ee:74:2a:69:a1:d8:8a:39:31:a0:e6:f7:
                    18:1e:02:28:3b:d6:11:8e:66:1d:69:c1:61:a2:70:
                    f2:ba:47:2b:01:22:69:58:0b:8c:dc:68:da:50:0e:
                    3a:e2:b2:f4:52:d2:b5:b8:0c:0a:b8:0f:8c:2b:5f:
                    9b:15:3d:56:55:6f:32:60:d8:3a:14:1c:5a:f3:e9:
                    73:5a:04:fb:05:58:87:b6:8a:a4:20:c4:5b:63:65:
                    66:cc:ff:3b:5c:73:dd:84:bf:92:e0:83:b0:2a:33:
                    54:46:6d:cf:bd:9b:2e:9a:99:a5:d6:78:fc:d3:25:
                    5b:0f:6a:9f:5e:b0:8f:15:92:d2:46:43:af:ea:0f:
                    ff:86:ba:10:97:47:27:0e:bd:a4:12:09:5d:aa:b1:
                    0b:26:df:79:35:d9:6b:0a:a1:df:18:c0:4c:51:10:
                    c5:81:7f:cd:40:48:27:bd:54:38:73:2a:81:8d:2a:
                    96:ef:13:de:bb:03:24:21:78:b5:14:4b:46:64:f9:
                    85:f6:14:43:61:c3:6c:5f:e1:c2:26:e8:e6:d1:4c:
                    3c:1e:88:d6:52:5b:64:39:52:6b:c2:8a:10:52:dc:
                    2b:d4:9d:ca:a2:82:c4:d6:a3:41:d2:c0:71:85:83:
                    20:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:51:D6:1D:3C:5B:FE:1F:29:85:D6:71:2F:C7:85:5E:84:84:BF:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/08077cc6-604e-37fb-a79b-e8349fc4dbdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495/38f0cd1a-37b5-4e21-a451-606bf424f495.crl

            X509v3 Authority Key Identifier:
                keyid:9B:CC:FC:21:D7:E0:11:6F:6F:A1:88:BB:54:69:B2:C7:89:E1:64:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/38f0cd1a-37b5-4e21-a451-606bf424f495.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f894::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e6:d1:95:4e:3a:e5:1e:9d:63:c2:8b:1c:49:22:0b:da:c8:
         66:3b:f6:b5:9c:7f:80:b8:4f:05:02:99:07:ab:71:81:19:18:
         98:4f:b4:b4:68:51:a4:e6:91:cf:31:b8:55:8b:3e:b9:98:21:
         02:bf:03:ae:cc:34:44:83:bc:42:3b:15:79:83:26:dd:f4:24:
         ae:87:e3:4e:0c:2e:e8:1a:6f:5a:20:5c:eb:5d:96:c1:6e:bd:
         c3:b8:d1:18:2b:85:27:33:dc:9a:59:3e:41:2a:09:88:d5:e8:
         9e:f5:7c:c3:9f:81:23:de:d8:d9:31:a4:6e:dc:3c:f1:bc:01:
         4e:96:a0:2f:f4:8e:ce:c5:c5:e4:d2:42:9c:2f:88:d4:30:16:
         58:c2:30:55:77:11:6f:26:71:ac:4e:06:1f:a9:e8:df:61:d7:
         aa:98:66:d6:a4:b5:e6:85:38:0b:59:b8:d1:80:33:38:f3:26:
         34:74:cb:ba:07:14:aa:32:fc:10:4f:b8:a0:bc:9e:b4:3b:93:
         94:29:e5:dc:84:77:de:31:df:c7:c8:ee:38:9f:ac:a5:0b:0a:
         a5:72:80:c0:2f:59:56:3e:2d:e1:ed:fe:0b:ed:e4:be:ab:7e:
         b3:ed:ed:ff:67:04:91:73:99:66:da:f6:b8:9f:f5:da:1a:74:
         5f:4a:24:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:01:12 2025 by rpki-client