Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/83c6daf3-1df5-34c8-bcfe-d09465201564.roa
File:                     83c6daf3-1df5-34c8-bcfe-d09465201564.roa (raw, json)
Hash identifier:          jVhv5lZO02P2QmBX3Dx+pr2lC+DCikDV/6WHkBpHxLw=
Subject key identifier:   67:42:1A:D8:4E:E9:80:51:70:88:75:58:03:59:F5:3B:4A:7E:F3:74
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F4328584ABBE62B48C53D8AA2494D3800
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/83c6daf3-1df5-34c8-bcfe-d09465201564.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     0
IP address blocks:        2602:f777::/38 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:2b:48:c5:3d:8a:a2:49:4d:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=1cbfde07-2d79-4fa8-8ae1-3148cb00078b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:33:c4:29:d6:6c:fd:15:07:05:fa:34:f7:23:
                    26:9d:51:ee:8d:05:ac:d5:5a:55:18:e9:39:bc:51:
                    3b:56:b6:36:57:57:65:d0:f4:4c:8a:cc:ad:5e:3e:
                    e0:f5:b9:36:57:33:a2:83:ce:54:f2:cc:b8:39:72:
                    2f:cb:97:09:b5:c4:c4:7f:0a:1f:6e:89:09:9c:b0:
                    71:92:2d:7e:e9:de:e9:80:d3:ed:87:53:11:d7:23:
                    15:3a:9b:3a:d8:62:16:9b:37:43:cf:c6:2b:27:d4:
                    7f:93:cf:4c:90:5f:1a:40:27:5f:94:95:c5:6b:cf:
                    89:b0:01:ed:5c:f0:01:74:4d:37:5d:d0:94:7d:d1:
                    2f:c7:fe:ef:9f:f7:3b:12:70:12:bc:3c:5c:ae:f1:
                    34:e7:3f:a1:16:15:f8:21:4d:58:be:48:3c:b1:02:
                    83:a7:00:77:37:84:2b:91:8c:a5:fe:be:cf:8e:34:
                    40:e7:1e:41:3e:f8:2b:10:8a:1d:70:11:ba:be:a6:
                    9a:09:71:7d:d0:68:17:94:53:79:90:42:ac:95:e9:
                    bc:99:b0:d2:22:fc:8e:cc:45:bc:d7:0a:86:fe:d2:
                    b8:25:eb:5c:c2:f4:c3:25:2e:f0:a4:94:0d:c0:1a:
                    a1:54:f3:03:55:ee:0a:79:18:fe:da:42:1b:91:6b:
                    41:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:42:1A:D8:4E:E9:80:51:70:88:75:58:03:59:F5:3B:4A:7E:F3:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/83c6daf3-1df5-34c8-bcfe-d09465201564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f777::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:18:37:ed:0e:d6:7d:73:cd:16:1e:96:95:4a:c5:cc:0e:a8:
         ca:80:27:a8:62:be:a6:a5:4b:1a:a6:0e:46:fb:6b:cc:f0:3c:
         c6:ca:60:47:fa:20:e5:91:7d:7a:77:9d:4b:d9:07:02:63:69:
         4c:f8:4e:d2:b0:b9:6b:5c:41:85:23:28:df:8c:2f:d1:25:21:
         a8:be:98:36:11:34:9b:c6:dc:1c:1b:5d:9a:04:cd:53:7b:1a:
         bb:3a:cb:5c:3b:16:0f:ce:c9:c4:53:c3:26:45:43:2e:d1:d5:
         a6:fa:9d:9b:8f:d3:b3:b5:74:60:de:8f:f3:0d:9b:ac:c3:13:
         93:8a:7a:a1:38:ed:e8:54:d8:87:a9:e7:32:39:a7:39:d4:db:
         16:f8:5d:19:f5:50:fe:d2:64:08:73:f0:76:b8:d4:d0:ad:ce:
         bf:03:e5:c9:6f:67:46:8d:9a:95:1b:f0:10:06:2b:ae:a0:0c:
         2b:eb:52:a2:31:cd:e3:d9:f8:51:b7:86:fa:82:e5:f1:c7:93:
         e4:34:04:88:cd:cc:17:c1:f6:d4:60:41:9f:13:57:7a:0e:48:
         d2:75:a6:2e:52:69:f5:bd:a5:95:6e:80:fe:c3:7a:2a:f1:01:
         1e:62:bb:e4:92:d2:f1:fe:ef:66:ff:13:5c:6b:27:1a:b8:b6:
         d0:28:76:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:29:43 2025 by rpki-client