Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/82929927-aeae-3a6f-867f-694f2e45a249.roa
File:                     82929927-aeae-3a6f-867f-694f2e45a249.roa (raw, json)
Hash identifier:          AycTT0jjRpL+Qd2kAZCFIx2puhV9gokmg05b/rdTi08=
Subject key identifier:   E2:9D:3E:63:9E:90:33:E8:86:35:B4:DA:CB:3B:AD:FD:58:B8:D9:CF
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584ABBE62E1BEC417C95647C1025
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/82929927-aeae-3a6f-867f-694f2e45a249.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     62240
IP address blocks:        2604:fc80:3600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:2e:1b:ec:41:7c:95:64:7c:10:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=36c2a56b-3a96-4cec-8240-2f4e66185827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2e:b5:78:57:8d:39:fe:3c:1a:3e:b1:53:28:
                    95:d9:81:0a:0f:b0:fb:ce:87:8c:9d:17:4f:af:17:
                    22:4d:3c:4b:ca:03:74:e2:9d:db:e2:3b:c7:e9:19:
                    23:17:c4:19:f0:db:f2:ae:e9:a4:0c:90:ae:15:c5:
                    b6:87:a5:f5:89:c6:c9:0e:d1:59:52:75:5a:86:bc:
                    0d:83:43:0f:9e:18:19:f3:49:5c:de:1a:6e:f0:b1:
                    34:1e:32:f6:c1:64:82:4b:53:4c:c8:dd:89:3c:cc:
                    40:84:3e:63:c4:40:e4:0c:41:9c:11:9f:69:2c:50:
                    c4:a4:23:64:9f:0a:fe:12:14:8a:20:00:b8:9b:e3:
                    48:74:02:0d:c3:39:9b:8a:ec:b3:10:68:d9:a1:58:
                    e7:06:24:a5:fc:a9:68:58:05:dc:54:21:4b:a6:ea:
                    d7:7d:cd:7e:a8:3b:1d:e7:d9:a3:78:1c:7d:7c:0b:
                    ac:47:ea:5d:a4:08:56:53:fe:a9:f7:79:c1:8a:1e:
                    1a:a0:a8:dd:45:87:e7:f5:28:80:cf:1d:47:a1:5d:
                    c3:88:23:ac:1c:a8:c4:fa:ac:b4:24:5a:21:b6:5d:
                    15:5c:e6:76:dd:11:ae:34:98:03:a1:cb:c9:a5:d0:
                    8f:97:72:48:66:31:9c:c3:f9:59:7d:94:ba:82:fb:
                    23:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9D:3E:63:9E:90:33:E8:86:35:B4:DA:CB:3B:AD:FD:58:B8:D9:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/82929927-aeae-3a6f-867f-694f2e45a249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fc80:3600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:95:6b:c7:6b:49:0a:d7:e9:7d:29:aa:fd:02:90:4b:08:a2:
         dc:43:b2:3c:e1:2b:14:1d:ff:e8:93:34:a6:2d:3b:c7:b7:75:
         49:57:55:1c:a7:ff:66:d0:ba:a1:d1:a5:3d:12:d8:14:4d:b4:
         03:c5:3d:7c:b6:5d:36:54:d0:5c:6b:e8:6b:34:10:fc:b2:2e:
         82:da:d7:ad:19:55:70:1c:b1:4a:f3:51:fa:95:a8:1e:9d:97:
         8d:fe:d9:77:39:c0:0f:14:80:b7:be:59:56:30:f0:7f:38:91:
         77:0b:44:7e:18:c9:78:cd:28:95:47:22:21:c1:a6:06:56:6f:
         51:69:75:15:de:bc:07:67:66:b2:8c:d1:69:04:05:c6:bc:ea:
         ac:85:31:7b:b6:86:72:e4:e1:3d:d9:42:0c:09:54:cd:91:d8:
         52:e4:e7:88:84:6e:ec:27:1e:c7:ea:df:8b:49:db:f4:0a:79:
         cc:6e:c5:dc:5f:85:8a:b0:92:01:3f:48:50:79:a2:a0:98:32:
         f2:7a:da:af:80:b1:24:0f:b5:5f:4b:9d:07:eb:51:bc:0f:6e:
         7a:4f:42:1d:74:3b:17:2f:85:9d:7d:4b:84:26:4d:64:41:8c:
         f7:08:d2:09:80:20:bf:2d:15:72:13:ef:86:54:c3:58:86:29:
         d3:5e:d0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:10:16 2025 by rpki-client