Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/2fd901f8-9de2-3fbc-b533-5dfc9694bcb5.roa
File:                     2fd901f8-9de2-3fbc-b533-5dfc9694bcb5.roa (raw, json)
Hash identifier:          whQTCXZYl7ryrbYLNFU0LduuATIFd8T1GdXnjAw5gGw=
Subject key identifier:   34:DF:2A:55:FB:F1:1E:98:48:1A:71:34:C7:DE:FC:6F:B7:C6:83:8B
Certificate issuer:       /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
Certificate serial:       010D0C9F4328584AAB26458CB408BA08AEFDC880
Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/2fd901f8-9de2-3fbc-b533-5dfc9694bcb5.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     215530
IP address blocks:        2602:f96c:c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:45:8c:b4:08:ba:08:ae:fd:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=d09d5cee-93a1-4e7b-a91b-a1a8182b0413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a5:75:b5:6b:5e:05:6e:63:e9:75:09:cf:50:
                    1f:24:b9:af:bb:da:48:e5:d9:00:66:44:45:b3:36:
                    a6:84:ac:55:0e:c8:25:8a:25:ee:6b:45:d3:56:82:
                    08:37:0d:35:a0:01:e5:fa:7f:e1:27:1a:15:a5:b4:
                    99:ad:72:05:cb:c9:cd:7b:8c:eb:4c:c6:2e:07:b5:
                    c6:7d:f0:6c:33:a7:f8:86:9a:d2:e9:3a:e5:fe:41:
                    ce:a3:0c:3b:33:b0:31:d3:25:2d:ae:90:22:e0:32:
                    f3:29:ff:52:aa:95:83:11:71:b1:e1:9e:8f:ea:dd:
                    1c:44:61:53:33:e9:c4:f5:90:57:2f:99:3e:f6:b0:
                    f3:14:db:11:90:bb:04:8f:72:5f:c3:40:0a:44:59:
                    46:05:6b:10:e3:02:cc:10:26:5d:bd:58:ab:88:46:
                    bb:26:81:88:0b:0d:e3:09:00:ed:b5:5a:0b:48:77:
                    b8:00:80:d1:af:e7:9b:c0:13:d0:a6:ac:5f:c4:0f:
                    4a:81:a6:41:f9:3f:c5:af:e0:59:9c:e0:b1:44:b5:
                    c3:7b:69:4b:d7:a3:6b:fe:aa:88:7d:b2:21:c7:8c:
                    c7:2a:7d:16:02:f6:47:83:ef:07:db:21:2f:f9:30:
                    b8:2a:45:c9:c4:23:f9:d1:05:87:0c:93:39:91:4d:
                    55:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DF:2A:55:FB:F1:1E:98:48:1A:71:34:C7:DE:FC:6F:B7:C6:83:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/2fd901f8-9de2-3fbc-b533-5dfc9694bcb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl

            X509v3 Authority Key Identifier:
                keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96c:c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:82:18:3b:cc:cb:99:8e:7c:4f:71:92:70:39:d3:14:2b:bf:
         59:1a:1c:57:1e:9b:5f:ce:7d:90:45:7e:d1:22:cd:f2:9c:b4:
         ed:33:d1:90:b1:94:cc:b3:ff:2d:db:1f:d4:cf:c8:7e:c1:7d:
         a1:5f:36:fd:27:00:7a:12:a1:1f:b5:7c:5d:47:57:bd:e8:4f:
         94:54:66:5f:29:9b:22:31:43:57:77:63:e8:48:1d:04:88:9f:
         1e:c7:65:a7:1e:e3:18:a5:73:aa:0b:48:20:15:b7:93:dc:6c:
         28:fd:e7:3a:4b:51:8a:79:30:e8:7c:10:c8:39:23:56:d5:4b:
         5f:9a:d9:6a:39:89:c1:1e:ab:37:43:be:b5:01:06:9d:7f:70:
         3f:98:ef:6d:9e:e8:87:89:91:0f:a2:4e:ce:2f:72:25:04:35:
         20:30:4e:d4:66:6e:33:b5:e4:00:db:40:c2:b3:b6:43:57:f5:
         91:c2:a4:1e:3f:0d:6c:a8:58:f2:fc:b1:22:a7:f5:73:50:68:
         0f:49:ba:b2:b9:8d:63:57:c9:96:d7:64:56:e9:55:c9:35:96:
         a3:fd:01:ce:b3:95:bf:a9:d5:01:51:ee:48:a1:d7:7b:50:bd:
         31:cf:61:41:56:34:21:a3:77:1d:72:e8:09:1f:66:f8:c3:b0:
         b0:09:01:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:37:29 2025 by rpki-client