Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa
File:                     68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa (raw, json)
Hash identifier:          ZSqPJa7Y1a8ZBKiQGfaX8GXNzCzoBHkI9r7ecC9Fgsg=
Subject key identifier:   0D:4C:49:37:BD:4C:6C:9F:C2:81:A7:35:BC:DD:A3:8F:CF:50:F3:83
Certificate issuer:       /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial:       010D0C9F4328584A6C55E35D148D86C3135C95C0
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     399870
IP address blocks:        2602:f7a5:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:e3:5d:14:8d:86:c3:13:5c:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=8febcb6b-ce9b-4588-bb04-b43102274fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c0:6e:1a:d9:c4:2c:14:fb:f1:3e:a8:da:78:
                    8e:91:78:9f:1a:b0:29:83:24:03:68:ab:98:77:c9:
                    3e:81:9d:5c:af:3c:32:6e:01:c2:e8:34:64:36:32:
                    d6:bc:25:e7:b9:87:da:00:7c:c0:ee:e7:67:34:85:
                    b3:32:ad:0e:a1:40:58:c4:dd:1b:51:a6:74:4a:ca:
                    0e:af:35:74:5a:37:ea:a6:f5:45:74:76:2f:92:37:
                    21:74:ff:21:b3:9f:96:2f:da:23:db:d6:b0:22:3d:
                    eb:9e:ec:9f:67:6a:32:41:ea:22:77:aa:15:79:5b:
                    2b:0d:97:f2:83:a2:af:76:2f:5a:87:e7:a0:c4:85:
                    f4:ec:ca:78:f2:c0:a5:b6:c1:c3:4a:11:e5:09:70:
                    8b:d1:51:b2:7c:79:95:b9:3f:21:9d:d9:91:5e:d0:
                    76:b9:e5:b1:1f:f0:f4:ad:77:79:9f:81:d7:b3:c6:
                    3d:84:f6:e3:22:0e:9a:d8:03:84:12:c0:a9:1f:7f:
                    0d:77:66:4c:54:57:42:2f:08:ac:57:3c:88:96:93:
                    da:89:c6:f2:b7:21:60:ec:60:9f:d4:8e:43:97:5c:
                    42:da:f2:64:50:54:3d:b9:26:7d:44:bd:1f:5d:28:
                    d5:61:0d:8d:59:a1:71:f8:b6:d6:cd:1f:eb:0b:b1:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4C:49:37:BD:4C:6C:9F:C2:81:A7:35:BC:DD:A3:8F:CF:50:F3:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/68e5cf7b-bf41-3e2f-be15-9e8f9640b83f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a5:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:98:26:a0:c3:32:14:dd:bc:c9:b8:60:53:a2:0f:49:9b:43:
         9e:ff:a2:e2:bc:d0:c9:dc:39:98:d7:ec:e5:30:aa:d1:38:83:
         38:8d:e4:ea:0c:9b:c3:4a:25:5f:be:79:c9:63:f8:89:79:62:
         c8:76:1a:ac:24:ac:c6:c0:06:40:a7:0d:b0:21:40:43:e3:85:
         10:3d:50:85:4b:59:09:a4:df:64:3f:b3:11:07:cc:61:37:40:
         63:2e:2d:18:d4:14:a4:8f:4d:fc:87:54:df:91:fd:06:d4:87:
         91:b7:b7:86:32:00:35:20:6b:4f:c9:27:21:36:61:3e:d5:eb:
         5b:15:26:a2:99:06:74:5e:32:e7:38:2d:a6:d8:6c:85:ad:12:
         8c:69:9f:2b:b7:3a:06:fd:31:20:05:7c:db:24:85:27:02:18:
         38:3a:6c:77:86:ce:51:f0:f7:cb:45:94:75:09:3c:6c:ff:5a:
         6b:ab:12:57:f3:07:6d:f0:73:be:75:d8:60:86:4d:de:6e:75:
         06:1c:84:a6:0d:99:08:a0:5c:38:a8:b1:cf:10:56:85:b3:88:
         3c:ee:0f:f2:2d:94:04:27:06:02:ad:d2:84:a6:0d:a2:8d:1d:
         6c:ce:9f:00:7c:e0:a9:ab:6d:b6:b8:a5:8e:71:50:e8:bb:fc:
         d7:0f:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:11 2025 by rpki-client