Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/c5f3f466-3b7b-3b78-aa89-43102de4b9d1.roa
File:                     c5f3f466-3b7b-3b78-aa89-43102de4b9d1.roa (raw, json)
Hash identifier:          ot63fqdUGuB6dSwdfDJCCZPYJGHU1JZ1894snB8h8Ow=
Subject key identifier:   3E:D7:1B:50:51:80:FF:35:7A:4A:01:FB:0C:2C:A8:21:4C:78:50:86
Certificate issuer:       /CN=058a49b1-635c-42be-b1a3-1465228f2130
Certificate serial:       010D0C9F4328584A936B60DFAED3623F1B44FF80
Authority key identifier: 68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/c5f3f466-3b7b-3b78-aa89-43102de4b9d1.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     26682
IP address blocks:        2602:f795::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:60:df:ae:d3:62:3f:1b:44:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058a49b1-635c-42be-b1a3-1465228f2130
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=310ac0fb-a512-45a0-85cc-8a8ab64b53b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3c:c8:bd:fe:30:f4:ca:e5:1e:99:3d:ab:15:
                    d2:5b:dc:5d:41:a3:ed:90:35:b8:23:fa:f0:ab:c6:
                    49:d2:49:67:6a:ff:59:84:e9:4d:b0:31:2f:c3:82:
                    66:d3:d9:01:31:ae:40:b8:e7:9c:db:57:42:4d:f6:
                    05:b4:0a:f2:5e:cb:9f:61:44:d2:35:c3:fa:c0:fc:
                    74:de:8f:e3:a1:01:f0:4c:43:80:62:95:ba:b7:ae:
                    a7:0b:85:e4:f4:07:52:1d:e2:c7:24:f5:30:c1:6d:
                    60:e2:23:96:7a:d9:46:7a:e3:ba:95:c2:42:a2:ad:
                    30:ea:86:bd:10:26:52:e4:8b:a3:b9:0a:77:fa:1d:
                    d5:84:5e:0e:fd:96:00:61:17:02:14:81:b7:d3:27:
                    31:b3:37:a1:e3:40:a4:44:e9:31:da:84:6c:7e:e8:
                    a4:63:b1:f9:95:13:e9:57:0d:2a:5e:a9:00:a4:17:
                    30:ca:03:25:53:d8:79:da:44:ea:20:5b:c1:40:cf:
                    b9:0c:da:13:ca:79:50:10:ba:7d:bb:6d:5b:c6:c6:
                    ce:1d:8b:8e:42:e4:76:be:65:81:09:f5:11:13:f0:
                    c7:0e:2b:82:a2:27:18:c4:da:bc:5e:32:46:85:9c:
                    e9:04:60:8f:cc:10:6b:9b:4a:80:28:e1:ba:0a:72:
                    37:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D7:1B:50:51:80:FF:35:7A:4A:01:FB:0C:2C:A8:21:4C:78:50:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/c5f3f466-3b7b-3b78-aa89-43102de4b9d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl

            X509v3 Authority Key Identifier:
                keyid:68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f795::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:23:5c:07:d3:2a:fd:90:47:d5:6e:dc:97:a3:1b:f2:d8:e6:
         f8:2c:75:92:de:a7:c0:5c:94:72:2a:a3:95:f7:8f:fb:30:ca:
         6e:78:ae:56:29:a7:60:5c:24:96:74:5b:35:e8:da:14:0d:75:
         03:f3:a7:2d:73:1c:f3:26:0a:bb:b6:b1:b5:01:25:9d:a7:72:
         10:3b:f4:36:18:1f:3f:ac:e3:6c:f8:48:55:b1:bb:7c:3a:ca:
         f5:93:c8:a0:b5:28:04:83:8e:8a:a9:39:09:da:4e:f5:4c:2c:
         be:3f:b1:39:8f:5e:d9:75:e4:03:98:d3:f1:ea:4d:26:a4:89:
         6b:86:e4:74:0f:a5:a0:c1:3d:f7:75:9a:09:79:54:a3:a2:df:
         92:ea:f0:23:b1:3d:c0:de:fc:08:f7:25:6f:07:50:6f:93:84:
         3b:89:58:79:07:b1:3a:01:f0:6f:f3:53:1e:e7:ef:03:13:e5:
         39:96:16:80:e3:77:b7:2f:b5:79:14:d9:5c:30:95:16:df:8d:
         ca:b5:6a:5b:1b:d8:b3:5e:46:4a:0e:cf:b6:94:b2:4a:4d:7a:
         99:22:2e:26:8a:7f:2e:55:fe:36:ba:38:30:85:74:b4:35:ec:
         9e:21:4c:a8:3b:31:91:ed:7c:49:d5:8f:34:6d:6d:94:ff:ca:
         01:bf:87:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:26:34 2025 by rpki-client