Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/ddb14b73-0add-39a9-a873-adb4dbd277e4.roa
File:                     ddb14b73-0add-39a9-a873-adb4dbd277e4.roa (raw, json)
Hash identifier:          j9Y3tcYd/Ao3oE3rKdPfiT417SRA1L9VYTqYgMGaYnY=
Subject key identifier:   F6:B6:C9:5A:90:81:FA:5A:71:25:84:9C:12:9D:C4:3A:E0:5B:48:41
Certificate issuer:       /CN=bce2ace0-971c-48f1-8361-962ad02d9618
Certificate serial:       010D0C9F4328584A71EB4DEB3F97813276ACC480
Authority key identifier: E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/ddb14b73-0add-39a9-a873-adb4dbd277e4.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     32943
IP address blocks:        2602:f937:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:4d:eb:3f:97:81:32:76:ac:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bce2ace0-971c-48f1-8361-962ad02d9618
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=0d098c6b-5fd8-4b68-8b84-174489ffb014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b9:6a:df:8a:0a:02:83:af:52:a6:db:ef:d9:
                    52:64:92:af:49:46:a3:49:20:74:d1:10:cb:e2:79:
                    4d:fd:39:e6:92:cb:ef:db:a8:c6:53:24:2b:76:01:
                    eb:6b:75:29:38:04:50:07:33:d9:0c:d2:0f:e9:f0:
                    3a:c6:1c:6a:76:90:4d:09:5d:6d:cc:4f:e7:44:dd:
                    d7:42:fc:4d:d2:c6:b3:e7:bd:bb:56:37:2e:21:4f:
                    2a:98:ec:1c:2d:9a:f9:53:6b:86:b3:78:4e:c0:39:
                    72:39:0a:51:5c:71:25:c0:99:96:a5:29:a6:74:35:
                    fa:a9:21:0c:6d:3d:64:cb:a5:94:3b:0d:53:b6:9d:
                    2e:f9:0f:43:27:a8:24:47:c7:30:42:c6:4c:5e:c7:
                    15:db:ad:23:15:7d:1d:84:ec:f8:66:e1:ba:05:44:
                    c5:0d:52:26:98:b1:eb:b1:34:01:7e:d3:e7:29:4a:
                    7c:f1:0b:9c:6f:d9:17:38:60:a7:a8:19:1a:a7:52:
                    d2:9a:53:02:f5:27:0c:5b:e7:07:ca:c3:7e:ea:f3:
                    63:e3:0b:1c:16:2c:51:63:c8:f0:2c:64:ff:d6:97:
                    55:12:b3:91:fd:0c:09:39:08:36:0b:42:01:58:23:
                    81:9c:cb:8c:a8:a9:0d:7d:68:04:2c:21:46:a0:5c:
                    2c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B6:C9:5A:90:81:FA:5A:71:25:84:9C:12:9D:C4:3A:E0:5B:48:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/ddb14b73-0add-39a9-a873-adb4dbd277e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.crl

            X509v3 Authority Key Identifier:
                keyid:E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f937:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:66:31:18:60:f6:fb:c8:63:7f:6c:89:e6:1a:f8:0d:b3:35:
         16:67:f2:37:00:19:fc:fe:a4:ba:38:9a:d3:3f:f8:31:20:54:
         28:77:fa:24:a2:1a:cc:7e:bb:a1:eb:62:49:f4:df:64:f2:8c:
         a1:69:fb:7e:79:23:52:ad:68:1c:6d:eb:f5:07:df:6b:73:3a:
         73:ed:28:e0:cc:44:f2:55:c3:98:df:4b:3e:83:e2:60:da:47:
         62:8c:3f:78:21:be:63:df:2c:64:58:87:2e:1a:78:ec:ae:eb:
         1c:5f:e1:39:2c:e2:dc:5b:bd:6c:44:82:b5:0f:23:3d:52:de:
         a7:79:1b:f2:f6:b8:6a:44:ef:61:f9:a5:ba:4c:50:86:8c:3f:
         9d:96:cd:1a:24:a7:02:75:03:38:56:01:9f:1e:94:5d:7d:0e:
         84:25:bf:51:1d:3e:5b:e0:b8:12:ac:09:41:15:3b:67:13:8e:
         98:72:51:ff:b4:be:55:ba:cc:f8:b4:bf:ae:08:6c:84:dd:9f:
         0b:25:94:64:2a:4c:2c:f7:09:4e:bd:99:d2:e6:8f:1e:0e:8a:
         35:2f:85:04:5b:db:d8:4d:06:76:36:1e:ed:55:76:ff:e9:72:
         d5:b4:da:bc:05:00:74:b3:51:c1:75:73:2b:0f:e1:41:f5:e6:
         8e:44:5e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:28:42 2025 by rpki-client