Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/07c70ea5-4cec-3d90-81d9-f1aa72890f49.roa
File:                     07c70ea5-4cec-3d90-81d9-f1aa72890f49.roa (raw, json)
Hash identifier:          PSgDzLShfUDafxgOJY59ZX2hgouQMZjMCCTo08fvovc=
Subject key identifier:   AE:57:4B:80:40:E6:13:11:FE:FD:A0:0A:4B:A4:58:20:67:DD:AB:23
Certificate issuer:       /CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
Certificate serial:       010D0C9F4328584AA42B879FE434CF855AA0A300
Authority key identifier: 3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/07c70ea5-4cec-3d90-81d9-f1aa72890f49.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     13737
IP address blocks:        2602:f895::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:87:9f:e4:34:cf:85:5a:a0:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=5569304e-5565-4e0f-a312-f2995b81004d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3f:0f:e7:a3:ac:00:e6:53:5e:81:2b:fd:0f:
                    ce:a1:4d:fb:e9:99:ff:c8:74:80:1c:f8:e7:42:f1:
                    31:dc:70:70:55:7d:3f:36:3e:ae:ab:9d:72:f3:35:
                    b0:02:fe:0e:6c:82:ce:b6:44:b4:ce:1c:37:b9:5f:
                    35:23:cd:66:bf:78:74:b8:f0:ef:70:98:2d:22:87:
                    05:d6:6a:53:0a:65:bd:f1:85:d7:67:89:a2:a5:12:
                    46:dd:92:98:90:59:1d:ca:f5:ab:01:ad:7d:ad:3d:
                    90:38:3d:e0:b4:64:5c:db:f9:bb:6f:0d:58:28:69:
                    14:e3:79:f6:b0:11:1a:44:f9:6d:e3:c8:28:ce:28:
                    8f:ec:da:70:80:3a:3c:6b:28:7a:56:a2:dc:c3:ed:
                    a9:bc:03:08:96:ed:cb:ab:de:88:f2:ea:8d:a6:29:
                    e6:67:bc:27:d0:ed:28:05:eb:2a:fa:cb:8a:2e:72:
                    55:4a:88:f4:70:3d:fb:98:4e:d1:7b:cd:98:25:ca:
                    7f:b4:b3:fe:1a:f0:a6:f5:a5:a9:a0:b1:1b:10:01:
                    af:eb:7a:64:09:8a:26:1d:41:07:91:6a:af:65:8b:
                    52:b4:01:6d:52:84:ac:73:7a:e8:97:46:88:1d:7f:
                    55:e0:cb:b9:d4:5b:ce:46:55:f7:b7:63:21:88:d9:
                    16:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:57:4B:80:40:E6:13:11:FE:FD:A0:0A:4B:A4:58:20:67:DD:AB:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/07c70ea5-4cec-3d90-81d9-f1aa72890f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl

            X509v3 Authority Key Identifier:
                keyid:3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f895::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:12:d6:a3:bd:b2:8e:8c:b1:1a:50:72:5d:dc:5b:1d:b1:38:
         a2:1e:0b:bc:24:bd:e2:50:87:7e:06:3a:42:30:ae:48:bb:7d:
         66:b9:33:a2:21:38:96:3c:04:2f:07:79:10:25:6b:a3:6a:29:
         37:a5:09:c3:44:3f:cd:93:f2:ce:00:06:be:90:c3:a3:3f:eb:
         6c:c2:de:15:03:6e:df:0e:9e:33:8f:ea:6b:0e:0d:9b:f6:72:
         0e:ff:25:b2:af:43:1e:b5:c8:fa:20:f0:a3:b4:02:2f:b1:da:
         e8:fb:72:f6:5a:01:c5:cd:1e:ee:8c:76:0b:7c:1e:53:bb:c7:
         91:51:d7:ac:e9:34:8a:f6:3c:4f:be:61:1b:8f:46:5f:f7:06:
         e1:21:b9:c2:d0:53:c0:67:ea:77:93:85:7e:c0:45:67:54:71:
         f0:b4:77:20:56:8c:c5:de:7b:78:2e:dd:1f:fb:a9:f9:31:06:
         43:37:b6:d4:ce:b0:a1:f2:89:ed:ca:5b:f6:50:a7:60:e8:02:
         04:a5:b0:42:90:83:5e:17:46:b5:24:98:b1:08:eb:c2:c4:32:
         ee:9e:f2:85:19:b7:9a:dd:f8:53:d1:1e:f6:f1:81:6e:0d:4f:
         51:db:6d:2f:3b:1e:a4:75:1f:61:5a:9a:8e:91:5b:52:5f:1e:
         a9:61:77:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:16:51 2025 by rpki-client