Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/602bdbad-4add-3c5e-b46e-9417aedc7e02.roa
File:                     602bdbad-4add-3c5e-b46e-9417aedc7e02.roa (raw, json)
Hash identifier:          U7QxtDK6qGQGbnmwUFc9iJuzN6dwFtApvxs8bF3Aq3A=
Subject key identifier:   4E:A2:FA:A3:35:43:33:3A:6E:48:B8:F5:81:A8:59:A4:76:AE:88:84
Certificate issuer:       /CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4
Certificate serial:       010D0C9F4328584AA42B8DEE3FEBF5D7935B2FC0
Authority key identifier: 5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/602bdbad-4add-3c5e-b46e-9417aedc7e02.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     401190
IP address blocks:        2620:14:2000:1::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:8d:ee:3f:eb:f5:d7:93:5b:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=ddb3025c-3a9a-4424-878c-1cd6fd240f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:c9:1e:c8:de:fb:86:c7:0a:a4:b0:06:8c:
                    39:27:3c:6c:c4:64:a6:69:7f:39:25:fb:d8:4d:9e:
                    ba:47:6d:8b:df:2b:b8:bc:b5:5e:39:c0:58:88:7a:
                    46:3a:90:b1:2a:e8:17:ed:aa:20:d5:1f:68:e5:c1:
                    84:e8:4a:80:e0:70:ed:87:5b:73:c5:6b:d1:5c:df:
                    39:2b:54:a3:a7:e6:88:06:00:56:53:fc:5d:90:4e:
                    a4:6e:2e:7d:3a:24:c6:a9:b1:66:4a:0c:3a:aa:95:
                    a9:59:98:2b:6f:83:40:4d:23:7d:66:52:a8:cb:76:
                    aa:34:6f:21:8f:db:1b:fc:d4:9f:0b:ae:51:17:53:
                    51:9c:31:ba:65:bf:a5:e5:1c:ed:74:0c:d1:2a:92:
                    2d:ad:83:6c:97:10:47:7d:b9:55:9d:03:fd:e8:11:
                    d1:ec:ad:25:d3:68:cd:5c:10:8f:ce:92:a6:c2:c7:
                    dd:b1:07:ee:5c:18:02:38:ce:d1:56:52:40:be:5a:
                    6a:19:5e:7c:7f:c9:3f:7b:c6:dd:bf:da:4a:b1:8d:
                    34:cb:c6:62:b2:aa:52:8a:30:bc:6a:ce:c7:a0:56:
                    76:0f:2c:e8:ec:c4:97:0e:be:28:71:dc:40:d4:98:
                    60:29:ce:c2:23:19:73:65:5d:c1:0d:5b:be:15:ac:
                    c8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A2:FA:A3:35:43:33:3A:6E:48:B8:F5:81:A8:59:A4:76:AE:88:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/602bdbad-4add-3c5e-b46e-9417aedc7e02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.crl

            X509v3 Authority Key Identifier:
                keyid:5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:14:2000:1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:0b:9f:36:6c:dd:11:ad:b2:2e:00:e9:95:6d:bb:74:b5:35:
         09:e1:04:aa:0d:68:f9:51:cc:7e:ee:1c:04:5c:ea:1e:1a:2b:
         88:41:74:45:38:00:d6:de:61:8f:7c:ce:1a:c4:36:91:60:42:
         14:aa:1a:94:06:f0:d2:ce:26:29:fa:31:6e:9a:25:c0:b9:4c:
         ef:14:7f:53:96:76:3e:a5:25:ba:74:22:46:48:49:e4:a9:4c:
         25:b5:09:70:f1:be:fc:ad:8e:0a:15:8b:5f:2b:45:6f:88:5c:
         f7:06:4e:69:86:3a:3b:f6:18:be:94:ed:1e:7b:05:5a:be:0d:
         b3:0a:b3:f8:8f:99:69:cd:6b:af:42:82:65:89:87:16:22:ec:
         05:16:15:d4:aa:2b:19:bf:22:2e:88:18:78:2c:70:74:9a:18:
         56:d9:38:68:aa:1b:19:6b:e5:f1:dc:9c:70:95:04:03:37:7d:
         42:4a:5f:32:5f:b5:41:c7:8b:5b:ae:dd:7b:c9:88:df:b2:be:
         ae:e8:89:fb:99:29:bb:44:93:5c:28:a4:4e:e8:ae:79:8f:a5:
         90:d4:5d:f5:5d:68:66:c2:db:d5:d5:b3:a2:a0:8f:13:01:09:
         cb:48:07:ea:29:99:a4:64:69:b6:d8:eb:4f:3f:ed:74:dd:6f:
         84:56:6f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:38:37 2025 by rpki-client