Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/60cd37ae-cd80-39f6-ac6a-bca5d115faff.roa
File:                     60cd37ae-cd80-39f6-ac6a-bca5d115faff.roa (raw, json)
Hash identifier:          yD/5YHcTIxlV/l7oAdRdhQZlbuW4eh6kEhvO1Id/pUQ=
Subject key identifier:   E2:A7:6B:CF:46:DE:C6:56:08:1B:61:30:87:64:B8:7C:81:42:05:26
Certificate issuer:       /CN=1cce0e4f-1927-4581-821f-686f4e5fd6be
Certificate serial:       010D0C9F4328584A8DD5F98C358B932AED33E800
Authority key identifier: EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/60cd37ae-cd80-39f6-ac6a-bca5d115faff.roa
Signing time:             Fri 18 Jul 2025 01:00:48 +0000
ROA not before:           Fri 18 Jul 2025 01:00:48 +0000
ROA not after:            Thu 16 Oct 2025 01:00:48 +0000
asID:                     7837
IP address blocks:        2602:f800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:d5:f9:8c:35:8b:93:2a:ed:33:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cce0e4f-1927-4581-821f-686f4e5fd6be
        Validity
            Not Before: Jul 18 01:00:48 2025 GMT
            Not After : Oct 16 01:00:48 2025 GMT
        Subject: CN=d886f847-41a9-48d8-ab02-267db981357c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:e2:df:25:f1:e0:8c:5c:e9:fd:22:69:bc:
                    a5:17:42:25:7a:23:0a:86:a6:8a:ff:fc:3d:6c:c5:
                    00:10:4f:8f:32:3a:28:b5:01:26:7b:d3:53:fe:75:
                    2b:d6:97:c2:bd:01:54:24:55:d1:36:f6:d6:08:cc:
                    d4:72:ed:57:67:37:71:51:30:55:62:aa:f2:5c:31:
                    a9:90:e1:ec:63:ea:b0:c9:98:20:6f:e5:d7:a3:28:
                    3e:96:c7:ce:d1:9c:25:03:20:7b:01:3d:90:96:d9:
                    10:46:1d:aa:2c:32:40:81:12:16:f8:f0:99:1d:e5:
                    d8:cc:11:f7:9c:83:03:43:75:a3:5f:d5:e5:f0:ea:
                    a5:b5:a1:de:22:5e:e5:f1:04:54:e4:f9:c7:06:63:
                    ae:6a:a2:3b:cf:d4:56:7d:b9:34:ca:5d:1d:c3:b4:
                    d7:fc:62:08:9e:22:db:24:98:39:23:16:85:2c:92:
                    0b:9e:7c:2f:5e:b6:65:ad:da:b8:3b:63:e6:7d:d5:
                    9f:0e:3e:3a:8d:af:5b:cb:7b:e7:bf:95:b5:61:d9:
                    d7:85:dd:de:e7:7b:99:6f:b5:da:b1:72:be:95:bb:
                    4c:85:3b:04:3c:45:08:4d:98:ff:2c:09:ee:c6:d6:
                    fd:bb:8d:3b:97:73:7b:9c:bf:be:52:13:4c:7a:03:
                    7a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A7:6B:CF:46:DE:C6:56:08:1B:61:30:87:64:B8:7C:81:42:05:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/60cd37ae-cd80-39f6-ac6a-bca5d115faff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.crl

            X509v3 Authority Key Identifier:
                keyid:EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:5d:ad:ab:86:3c:07:ab:ad:eb:9b:1e:17:02:8c:d8:9f:2f:
         3e:b3:73:11:4d:2f:08:8d:ed:11:90:ca:2c:1e:60:ed:00:8a:
         a0:42:5b:6d:91:22:9a:77:a0:85:bd:f4:64:0e:00:26:c8:e4:
         a4:26:bf:03:08:a1:37:66:19:e7:91:ca:ab:98:56:50:cf:c9:
         51:43:71:cd:b2:67:b3:ed:64:d1:d2:da:ba:af:6c:89:19:e4:
         ca:b3:b6:9a:4e:6c:0d:97:a5:5d:26:53:29:a3:03:a1:ae:21:
         56:12:f8:1f:42:73:e0:3a:3b:4e:3c:9d:d4:f6:5a:51:9a:00:
         6d:77:e9:cc:f4:0f:df:4f:80:50:e8:61:5a:4f:54:26:4f:07:
         bb:e8:15:c8:97:a9:df:bb:e1:b2:d9:da:21:67:ed:fb:74:33:
         bd:e3:1a:de:07:f5:43:45:34:fb:fa:42:53:71:2a:a1:0c:30:
         23:a3:da:c3:d2:c8:cf:3f:53:17:6b:f1:ff:a1:22:d5:98:68:
         aa:fc:d2:14:9d:12:6c:42:9d:8f:de:32:32:6a:47:7c:fc:98:
         95:bc:f7:2c:f0:a2:52:24:26:ac:ae:af:25:45:51:ac:47:cb:
         d3:3c:ff:a8:bf:35:6c:04:a1:e1:a1:72:99:d7:92:94:89:ce:
         41:a1:52:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:39:08 2025 by rpki-client