Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/7ee92927-0260-3189-ac5c-a8f84ee0a71d.roa
File:                     7ee92927-0260-3189-ac5c-a8f84ee0a71d.roa (raw, json)
Hash identifier:          6929ytdJQ7iRkdgPYTgLhbXsGZCgDSukNbNwfaidC0A=
Subject key identifier:   BC:33:82:2D:F4:D4:21:5B:0B:71:9B:59:41:EE:8B:BE:18:02:F6:4D
Certificate issuer:       /CN=f4cb39e9-98be-46ba-abb7-91c4edafbe22
Certificate serial:       010D0C9F4328584AB91BB217050148C39D89D680
Authority key identifier: FF:49:33:63:43:FA:30:40:4C:0E:C1:8A:72:82:58:38:85:23:66:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/7ee92927-0260-3189-ac5c-a8f84ee0a71d.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     398852
IP address blocks:        2605:fec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b2:17:05:01:48:c3:9d:89:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4cb39e9-98be-46ba-abb7-91c4edafbe22
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=e56f29f6-354c-4d60-91f4-3b732ad75c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:55:b4:61:f1:6e:91:37:06:71:1d:fb:fe:
                    62:99:d1:2c:be:ec:f6:28:3f:c3:8e:d7:a0:10:0b:
                    a8:7f:55:00:5d:28:8b:89:82:4d:62:30:84:98:b7:
                    4c:ba:27:e6:f6:01:d9:19:1a:b6:30:be:33:92:0e:
                    3d:a8:25:fd:bd:6a:74:2e:fc:68:9f:51:23:44:4d:
                    d4:8c:7b:c4:0a:8c:b1:b1:e9:1e:30:24:b1:55:2e:
                    3f:65:a8:7c:2c:b1:32:fa:89:5b:05:f9:f2:6e:9f:
                    0e:4c:8b:b9:47:68:00:31:d3:ff:5f:0b:fe:13:09:
                    84:1b:ee:8a:a4:30:71:ac:fc:94:a2:a4:63:ec:8e:
                    76:98:ac:3a:7a:6d:f7:aa:16:65:d3:7f:e0:b9:d6:
                    7a:59:e6:1f:9a:34:18:78:cc:12:c5:43:62:7f:9f:
                    8e:cf:d7:f8:fc:36:f3:fb:76:48:c7:d8:b1:42:64:
                    02:99:e1:1d:73:a8:92:e8:a3:9a:8b:ba:34:85:d2:
                    60:17:57:04:28:5e:d7:19:f2:eb:41:78:e9:7a:ff:
                    83:27:a9:7c:ae:34:64:f8:69:a9:6f:9c:ac:9c:c5:
                    a6:0a:a5:70:cd:37:8c:93:fb:ed:0b:2b:30:5e:8f:
                    fe:eb:09:c0:51:57:e1:e7:ff:57:00:dd:fa:e5:3a:
                    67:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:33:82:2D:F4:D4:21:5B:0B:71:9B:59:41:EE:8B:BE:18:02:F6:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/7ee92927-0260-3189-ac5c-a8f84ee0a71d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.crl

            X509v3 Authority Key Identifier:
                keyid:FF:49:33:63:43:FA:30:40:4C:0E:C1:8A:72:82:58:38:85:23:66:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:dc:a0:ba:81:b3:b5:d3:65:6f:9d:b1:55:03:d6:1c:7a:2d:
         36:13:26:25:4b:91:a9:32:db:33:e4:55:4f:37:0c:8b:cc:64:
         c0:cc:36:ff:9b:42:59:9d:50:8e:b5:88:18:20:42:5f:3f:35:
         30:e4:78:02:8c:7d:3f:70:b3:e2:cc:4d:85:a7:a9:9e:26:b8:
         d1:69:39:e5:9e:7e:b5:a1:2f:6f:84:e9:77:05:bb:86:69:82:
         a7:df:5b:66:83:8a:08:71:13:b7:df:dc:a9:d0:d5:99:68:2a:
         08:fb:64:30:8d:0d:2c:82:75:18:5c:a8:83:67:d5:70:1b:76:
         ec:2f:a2:8d:4f:f4:42:e5:24:20:01:6e:07:00:53:a1:4f:58:
         9b:01:72:dd:6d:bc:e9:5c:4a:38:f5:b6:e0:c7:5c:b0:ab:48:
         9b:83:85:bc:96:ed:2f:f0:6d:91:cb:8f:a8:84:d4:59:25:c5:
         84:dd:98:3f:cd:5f:0d:c7:8e:47:34:e4:0c:8a:48:8a:12:3c:
         1e:42:89:02:c0:96:3d:67:29:58:b5:12:de:c9:52:f2:e2:24:
         e2:a9:9f:37:4d:c4:50:70:14:34:5a:c2:7f:40:35:30:76:60:
         07:7c:04:c2:67:8c:40:9d:74:a7:a9:3b:63:c3:dc:91:9c:64:
         63:89:a1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:40:28 2025 by rpki-client