Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/a113376a-69b4-3631-b2a6-f93305a0611a.roa
File:                     a113376a-69b4-3631-b2a6-f93305a0611a.roa (raw, json)
Hash identifier:          EmUhl06oi1z3RUb2SAIPNeUeGkeFqvhUk0NoB7XgRCo=
Subject key identifier:   6F:B6:10:7A:9C:6F:B4:93:B7:D3:35:10:51:F4:1B:46:F4:7C:F9:A8
Certificate issuer:       /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Certificate serial:       010D0C9F4328584ABC16CBCB8EDC8E2898DEAF00
Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/a113376a-69b4-3631-b2a6-f93305a0611a.roa
Signing time:             Sun 03 Aug 2025 14:38:40 +0000
ROA not before:           Sun 03 Aug 2025 14:38:40 +0000
ROA not after:            Sat 01 Nov 2025 14:38:40 +0000
asID:                     206434
IP address blocks:        2602:f7a7:20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bc:16:cb:cb:8e:dc:8e:28:98:de:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
        Validity
            Not Before: Aug  3 14:38:40 2025 GMT
            Not After : Nov  1 14:38:40 2025 GMT
        Subject: CN=7c205f41-0633-4757-9b6e-194b1f0de422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d9:c7:27:9e:dd:7c:9e:6b:6a:80:46:46:88:
                    b5:88:2f:93:dd:03:04:0b:81:cf:e4:25:a2:3c:d5:
                    e0:2a:8b:1a:76:58:a6:ce:a4:58:12:f7:a1:71:1d:
                    93:27:f9:26:00:33:5c:a1:88:6f:1c:1c:bf:7d:ba:
                    32:f6:b6:3c:d5:49:58:22:50:b2:ea:34:d6:04:6b:
                    c5:66:07:e4:6d:5f:c9:ae:5f:55:82:a2:66:03:fa:
                    c1:65:47:7c:d0:3d:4d:47:e0:32:7f:49:b0:38:1e:
                    3b:f4:f5:4c:6c:40:75:2d:f5:c4:f9:32:9e:b6:fa:
                    9f:6a:78:cb:85:85:49:5f:58:59:b1:c1:93:a9:17:
                    96:52:1d:11:e5:c6:d5:17:33:60:46:12:21:a6:a9:
                    de:ec:a1:c2:c9:25:1b:5d:a9:37:13:cb:1e:0f:ce:
                    51:0f:5d:f0:4e:cd:f8:4f:33:d1:91:ad:db:38:a7:
                    9e:aa:eb:78:35:64:4c:d8:24:d6:74:c6:11:18:94:
                    c1:4b:cf:12:da:da:8d:51:60:bb:07:d9:9a:1e:0e:
                    d3:b3:74:b3:6c:4a:de:02:4a:11:be:93:fe:6e:1a:
                    c8:85:ad:8c:b8:ae:e7:1e:43:d1:b7:7f:d9:eb:57:
                    29:b3:4b:fc:f7:ab:54:1c:f1:a2:72:57:22:89:28:
                    a1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B6:10:7A:9C:6F:B4:93:B7:D3:35:10:51:F4:1B:46:F4:7C:F9:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/a113376a-69b4-3631-b2a6-f93305a0611a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl

            X509v3 Authority Key Identifier:
                keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a7:20::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ec:ac:45:9b:92:d6:70:e5:27:0e:df:3e:c8:64:ba:50:7f:
         92:91:b2:61:e3:09:e7:e3:13:7c:c9:4f:84:49:23:02:78:b1:
         dd:16:5f:b0:ce:ca:4d:a6:1f:e6:4d:87:16:b9:99:25:3b:da:
         a9:c7:d2:85:7c:5a:82:2b:f8:fd:e9:e1:54:3a:74:a3:37:a5:
         d2:7d:bf:3a:b1:ff:c4:9f:02:12:36:09:cd:94:1d:e0:47:0d:
         a5:04:00:bb:93:ae:3f:e8:af:76:6f:65:14:76:33:71:6a:04:
         16:90:14:8a:01:9a:2a:c6:2f:c8:6c:7c:12:65:29:63:29:77:
         9d:3c:cb:23:72:b7:60:b3:60:3b:c5:2d:98:cd:fd:f7:b9:f6:
         a6:c5:59:b5:9a:c6:0d:c6:b5:b4:b6:63:59:61:76:1c:8a:73:
         b5:7f:ca:ac:94:d4:d8:2f:21:67:37:52:47:69:c2:b9:3e:b8:
         be:8a:ac:ea:61:d4:79:7d:8d:16:f9:37:e4:b6:62:2a:e4:81:
         4d:28:8e:db:1c:2f:bc:09:00:32:f8:9b:7e:cd:f0:7a:64:b1:
         2f:7b:39:5a:94:70:44:4d:63:71:75:0e:22:35:0a:ce:f3:e9:
         74:86:28:eb:ea:7c:ac:8b:19:e9:56:d1:cc:87:5d:d6:c7:ab:
         91:d4:fe:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:13:09 2025 by rpki-client