Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/561afe3d-9b91-3f87-95ed-4f4066246455.roa
File:                     561afe3d-9b91-3f87-95ed-4f4066246455.roa (raw, json)
Hash identifier:          IQzah78OTpySZBKsB+1GzHrAmKZCeerhbnnYWY55JhU=
Subject key identifier:   FF:11:D0:3B:23:5D:74:96:7F:7F:CA:4C:04:7A:2B:A8:35:1F:E9:73
Certificate issuer:       /CN=7da5f50d-c4e5-46cc-ad95-7464c9f481c1
Certificate serial:       010D0C9F4328584ABA80C6762293FAEBE1A96C40
Authority key identifier: 08:03:CC:E5:0B:8F:FB:4D:38:99:1F:C1:B4:E5:FB:E2:FD:19:36:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/561afe3d-9b91-3f87-95ed-4f4066246455.roa
Signing time:             Sun 03 Aug 2025 01:00:32 +0000
ROA not before:           Sun 03 Aug 2025 01:00:32 +0000
ROA not after:            Sat 01 Nov 2025 01:00:32 +0000
asID:                     401534
IP address blocks:        2602:f77d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:80:c6:76:22:93:fa:eb:e1:a9:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5f50d-c4e5-46cc-ad95-7464c9f481c1
        Validity
            Not Before: Aug  3 01:00:32 2025 GMT
            Not After : Nov  1 01:00:32 2025 GMT
        Subject: CN=7c21c698-6859-4fb2-b17b-c61f7261fd54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1c:9d:3b:fb:eb:56:3c:71:64:aa:11:3d:70:
                    40:54:ad:0b:26:14:c3:f3:cf:96:73:20:10:c8:7f:
                    b9:12:76:87:e5:f0:f1:cb:ca:ba:91:18:c1:11:a2:
                    e3:6b:9e:9f:d1:b9:84:6b:b4:5b:fe:e9:cc:8a:b0:
                    5e:c4:17:8d:a7:72:2a:8b:b6:2b:05:65:15:5c:12:
                    a0:c7:48:cc:68:8b:05:ce:69:22:ec:18:9e:9e:5e:
                    01:cc:85:04:1b:be:c1:65:ea:ef:ba:2d:22:94:87:
                    86:a2:f6:2b:14:f0:69:b1:e2:04:97:07:56:5d:4e:
                    9d:2a:51:c8:69:92:91:49:59:43:bd:e1:94:1e:0b:
                    52:4b:af:70:5f:f6:a4:69:a3:d3:bc:d9:1a:a9:80:
                    11:ad:78:04:b8:98:b4:75:05:5f:33:03:50:c6:46:
                    ac:db:97:f5:74:cb:2a:7a:8c:8b:fe:63:31:31:64:
                    28:1f:74:9d:85:bf:08:21:40:04:44:d1:20:6b:d5:
                    7a:eb:72:f3:69:6c:52:39:0b:26:50:e1:e7:26:84:
                    30:85:df:64:a8:9f:0f:b1:a2:8d:09:e9:88:41:ef:
                    43:73:6b:a9:dd:1d:91:75:e6:86:f6:0a:b3:30:62:
                    84:e4:80:ee:b0:7f:e6:3a:10:66:4e:7d:f8:80:ee:
                    4d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:11:D0:3B:23:5D:74:96:7F:7F:CA:4C:04:7A:2B:A8:35:1F:E9:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/561afe3d-9b91-3f87-95ed-4f4066246455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.crl

            X509v3 Authority Key Identifier:
                keyid:08:03:CC:E5:0B:8F:FB:4D:38:99:1F:C1:B4:E5:FB:E2:FD:19:36:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7da5f50d-c4e5-46cc-ad95-7464c9f481c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f77d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:66:0a:99:c0:cf:30:77:5b:42:fa:25:8e:0c:ce:7f:06:ce:
         bc:ae:c9:21:30:2a:94:0a:52:d4:5d:60:af:d3:3d:a2:18:ec:
         1f:e4:ea:5a:8a:b1:fb:e7:40:12:76:ae:20:2f:50:57:68:53:
         87:98:60:a7:93:90:5d:f4:d6:0c:9f:29:2c:eb:43:b1:aa:b9:
         5d:27:e1:a6:b6:2c:5f:aa:95:29:04:c9:fa:81:3f:ed:49:bf:
         b5:da:be:ad:63:0f:f8:e2:8c:08:20:64:ae:e9:b5:51:05:15:
         0b:60:7d:18:34:f6:22:98:1f:bc:5c:ec:21:88:1f:90:d3:5a:
         3c:1a:a7:47:5c:72:37:9a:ff:86:45:4f:71:e3:b6:3a:d9:33:
         23:0b:43:75:c1:01:43:bc:8f:96:fa:2f:ee:c4:bd:fd:55:6b:
         92:ad:bc:c9:26:6f:9f:e1:f3:01:64:f3:38:46:87:4b:e5:2d:
         b5:5e:88:30:68:39:2a:ad:5f:76:e4:f0:af:d4:44:89:9f:72:
         47:ff:39:b2:c5:20:a7:f4:0f:fa:8e:ec:d5:d2:9f:6d:35:37:
         6e:41:df:97:d1:8f:46:00:c9:f9:66:2d:dd:6c:85:21:15:7e:
         a3:64:bf:08:c2:bb:ce:37:09:7e:1b:5d:d6:92:91:83:0b:f0:
         4d:f1:77:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:10:50 2025 by rpki-client