Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/31590441-0124-35e5-b8d5-3eac3f0d6c40.roa
File:                     31590441-0124-35e5-b8d5-3eac3f0d6c40.roa (raw, json)
Hash identifier:          tmjrYLHyI87rKVK1vSjtUPV+hoIY1mjAweFvhFTp+No=
Subject key identifier:   0A:C6:78:F3:F5:E1:79:C7:84:FE:55:3A:43:DD:5D:0E:74:4C:DF:37
Certificate issuer:       /CN=1886e4bb-e8b3-46f4-8d9d-8d226295a982
Certificate serial:       010D0C9F4328584A8B0B6528C0455FC6F93C8200
Authority key identifier: 5B:59:46:55:98:AA:24:33:EC:67:68:B3:2B:CA:BD:F0:78:DF:89:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/31590441-0124-35e5-b8d5-3eac3f0d6c40.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     17290
IP address blocks:        2602:fa86::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/1886e4bb-e8b3-46f4-8d9d-8d226295a982.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/1886e4bb-e8b3-46f4-8d9d-8d226295a982.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:65:28:c0:45:5f:c6:f9:3c:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1886e4bb-e8b3-46f4-8d9d-8d226295a982
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=383d36d7-4471-47ae-94a7-5ca61f7846c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ba:f8:1c:7e:c9:f6:df:98:bf:52:1c:b6:1f:
                    ed:0d:bb:23:74:c6:7a:c2:31:aa:78:6d:b8:67:5b:
                    18:5a:9d:be:b6:07:d2:6a:e8:de:cf:07:b5:0a:89:
                    a4:02:e5:01:a4:e9:c2:36:ff:36:84:67:40:ca:35:
                    08:26:ab:ee:43:17:4a:ea:e0:ff:6f:02:fb:0b:2e:
                    6f:3e:2f:3e:6c:c4:91:f2:ee:dd:ea:31:29:30:92:
                    04:cc:cd:2c:87:5c:f6:f7:9b:e4:fb:1a:f2:fa:d3:
                    d7:ac:2d:f4:6f:a9:f0:8e:25:77:1c:5f:35:f6:48:
                    20:6a:c9:3e:49:5f:3f:1d:3d:c9:94:6d:b6:8c:19:
                    0b:88:a8:67:32:d3:e7:91:58:a1:56:74:47:8e:3f:
                    f3:8f:0d:ca:c9:db:e7:60:ca:51:54:84:db:ee:65:
                    f1:1e:52:15:84:04:7d:2f:85:ce:33:46:02:dd:da:
                    54:b9:c1:46:a2:88:5e:3e:23:5a:49:73:3a:81:9c:
                    9f:6c:4c:88:1b:74:fd:12:4d:2c:72:d0:5f:81:63:
                    a1:1a:33:92:72:33:d1:91:2b:f7:35:1f:a9:3c:87:
                    c9:4e:23:dc:57:f4:56:fc:b6:05:06:44:8f:33:d8:
                    87:e0:d3:e7:cc:71:97:65:7f:93:e3:49:e7:23:33:
                    0a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C6:78:F3:F5:E1:79:C7:84:FE:55:3A:43:DD:5D:0E:74:4C:DF:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/31590441-0124-35e5-b8d5-3eac3f0d6c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/1886e4bb-e8b3-46f4-8d9d-8d226295a982.crl

            X509v3 Authority Key Identifier:
                keyid:5B:59:46:55:98:AA:24:33:EC:67:68:B3:2B:CA:BD:F0:78:DF:89:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa86::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:7f:68:b6:0e:5c:7d:c5:56:e1:4d:87:57:34:de:02:f6:99:
         3b:28:ec:ef:ed:2d:64:0b:14:9e:f3:65:3f:8a:48:72:80:4b:
         f5:25:94:f6:1a:d4:a3:f0:2d:23:4a:a8:59:c3:ec:2d:70:ac:
         f8:97:57:92:09:62:59:65:fc:24:85:4d:12:fa:ec:c0:b2:2c:
         c0:19:0e:4e:6d:03:bb:13:b4:d7:7b:cf:4b:77:65:b9:d1:27:
         67:77:b2:95:a1:f6:72:b2:87:0f:86:b7:23:49:5a:4f:5c:2f:
         10:bd:b0:9b:dc:32:5a:e3:46:6e:fb:cd:06:3e:5a:38:94:fa:
         b0:12:cc:28:2c:18:53:7d:88:82:60:8f:ac:33:aa:22:70:86:
         e1:2e:db:b8:30:62:ed:fc:5f:43:56:73:0b:87:be:c5:f1:59:
         78:ce:b1:a2:91:2a:02:8d:aa:f7:54:0a:e3:26:ce:5c:92:40:
         25:02:09:92:9a:8a:87:83:0e:42:fa:23:1a:6c:58:c3:12:ee:
         d5:b2:dd:bd:f8:43:15:17:09:2c:f3:b4:69:ad:a6:f8:2a:57:
         5c:50:e2:bf:1c:4e:82:ec:fa:f6:6c:7e:21:04:5a:29:2c:d7:
         97:f5:84:be:01:a3:3c:99:42:08:8a:73:b9:2f:0b:16:20:0d:
         66:b5:c6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:36:12 2025 by rpki-client