Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/d62afe2a-7630-31f0-9e51-d97ded7730a9.roa
File:                     d62afe2a-7630-31f0-9e51-d97ded7730a9.roa (raw, json)
Hash identifier:          gW8QJ4ovKDVBHkitW7D6HsGU3ScFsuQVi9n/+vPxhQM=
Subject key identifier:   95:7B:19:61:2E:59:B4:AE:B8:15:7E:A2:AF:0C:8B:59:EE:E5:9C:BC
Certificate issuer:       /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
Certificate serial:       010D0C9F4328584A68260598A281D26F124F0A80
Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/d62afe2a-7630-31f0-9e51-d97ded7730a9.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     395567
IP address blocks:        2602:fead::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:05:98:a2:81:d2:6f:12:4f:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=a69125d6-1381-4872-bed6-cf33a3fe5bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ed:54:8d:ee:75:3c:3f:58:2b:bb:19:7f:70:
                    9d:13:e1:12:a9:a7:c7:ce:51:de:5b:e9:0f:52:ef:
                    f3:4f:76:f8:2b:e7:80:13:1e:f1:f3:00:be:ac:28:
                    24:d8:32:1c:25:5d:b8:3a:83:c2:f8:98:fb:43:b3:
                    1d:19:94:e8:1a:57:5e:b1:dc:77:0d:e4:c5:8d:d2:
                    f3:13:61:98:b6:cb:4e:13:9e:54:69:52:69:80:ea:
                    11:0b:06:c6:36:e6:fa:e3:42:a7:10:69:5d:57:5f:
                    db:53:ff:1c:f5:f9:38:73:d6:b9:cd:96:ca:35:0e:
                    90:01:2e:b5:6f:fa:28:eb:63:ab:7c:69:cc:7c:e7:
                    d2:4a:da:04:5d:9c:40:d6:de:ae:30:cd:31:0b:b2:
                    a0:eb:e4:95:c7:ed:0d:1a:56:d7:93:16:6f:49:e3:
                    d5:eb:9a:ea:b9:de:28:6a:c4:8a:af:ad:fa:5b:48:
                    63:d0:8e:ca:9b:6a:69:ab:11:3a:70:4f:9a:8b:70:
                    e9:9d:c2:5d:e9:1b:b3:29:c5:0c:2f:94:fb:21:87:
                    d1:01:a3:22:0a:c7:c5:02:5c:d2:21:5c:49:73:30:
                    7e:7c:58:7a:5b:8e:04:a0:c5:65:0c:5e:e9:8b:96:
                    a5:38:7d:6d:cf:fe:72:d8:50:6d:47:85:2f:79:a4:
                    1b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7B:19:61:2E:59:B4:AE:B8:15:7E:A2:AF:0C:8B:59:EE:E5:9C:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/d62afe2a-7630-31f0-9e51-d97ded7730a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fead::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:28:ac:dc:f7:f3:af:64:db:43:3f:fa:4a:52:a3:0d:1e:1b:
         5a:41:14:5b:e1:d5:41:f4:92:16:84:86:3d:9b:95:37:b8:ec:
         89:df:ae:db:53:c2:4a:7d:b9:aa:25:9a:04:7e:f7:28:85:a9:
         40:d4:20:93:81:20:18:8d:0f:ae:63:91:ca:d7:40:68:ca:2f:
         1b:22:27:c3:7e:3e:5a:46:a4:11:ba:18:9c:b3:79:bd:bf:aa:
         f9:26:d6:10:cb:0a:06:eb:3f:f1:b9:eb:c8:87:46:0e:e6:75:
         b0:d2:a3:ec:88:6c:85:c9:6b:9c:65:38:28:9a:a5:d9:5a:52:
         a8:ca:c0:d3:64:05:43:10:82:f1:f4:a0:0b:87:17:e8:79:52:
         57:9d:73:b7:54:eb:ed:89:3b:8b:c1:22:e0:9c:a1:2c:73:89:
         bc:f7:0f:2e:1c:d7:d6:75:c2:0c:92:3c:8d:aa:c9:af:ef:36:
         ec:c5:d5:5b:e5:49:bf:e2:81:6a:77:2a:f1:ec:c0:ca:c1:92:
         50:58:6a:87:cd:69:c6:de:87:f0:dd:f0:b0:8b:4e:c5:73:81:
         cc:a2:95:99:a9:f5:d0:c5:2a:4e:f6:dc:3f:44:96:be:6e:e0:
         97:0c:06:18:10:f4:bc:2a:15:c0:94:93:32:f0:44:ec:70:01:
         e3:9b:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:41:21 2025 by rpki-client