Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/dfadf87e-0496-385c-917c-9e5b4e76da6d.roa
File:                     dfadf87e-0496-385c-917c-9e5b4e76da6d.roa (raw, json)
Hash identifier:          Hc3V8aTCWJLaErtq2DrE1JA25a3Bfin9mazafBfLfjQ=
Subject key identifier:   33:2F:59:F3:98:62:25:31:2A:5A:65:1A:41:9D:87:7E:73:66:DF:0F
Certificate issuer:       /CN=8637a780-1944-4d75-b623-0c10c96f56eb
Certificate serial:       010D0C9F4328584A90A0BDAC3A06909BB897C800
Authority key identifier: 97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/dfadf87e-0496-385c-917c-9e5b4e76da6d.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     401133
IP address blocks:        2602:f8a3:40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:bd:ac:3a:06:90:9b:b8:97:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8637a780-1944-4d75-b623-0c10c96f56eb
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=4b662a5c-fb1b-4629-a9d8-c6635ed7960b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d7:40:14:02:8d:f9:7c:b3:08:dc:a6:e6:ec:
                    83:cb:1e:d4:86:ec:5b:8c:fe:f5:24:61:97:56:33:
                    d8:36:79:7e:0c:3b:9b:67:ea:e2:25:24:f0:f2:2d:
                    0c:3b:11:c1:06:8e:d2:97:ac:a1:73:5a:93:8f:9d:
                    5f:5d:c0:67:f1:d2:5c:74:a1:87:6e:45:df:a7:44:
                    b5:6b:45:47:33:43:03:cf:a3:70:59:7f:c3:d7:e5:
                    fe:73:d3:a5:c6:60:c0:09:5c:33:0e:d2:3a:3c:a4:
                    25:c2:25:ee:18:ca:60:ca:1b:d0:48:19:8a:cd:04:
                    0a:20:1f:fc:72:0e:69:15:0d:e8:3b:29:66:15:45:
                    1f:5f:5e:e7:64:f9:03:1b:7d:3b:60:35:bb:73:2b:
                    c8:a1:83:54:79:ef:a7:42:26:02:95:6f:25:82:0a:
                    71:b4:32:72:ca:92:03:7b:cb:04:8d:2a:cf:6a:a9:
                    2b:5e:fb:f7:e1:5f:47:d1:7f:2a:d2:35:55:3e:cb:
                    27:82:f3:e9:aa:c7:2f:ec:dc:fa:b6:dd:52:79:9e:
                    ef:29:5d:96:2b:f6:7f:eb:d9:e7:0a:34:93:c0:c1:
                    6d:90:7a:63:8e:e9:31:7b:67:dc:6c:82:03:7d:eb:
                    3a:c0:d0:74:f0:a2:6b:d4:ff:b7:22:fe:65:1a:1c:
                    e4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2F:59:F3:98:62:25:31:2A:5A:65:1A:41:9D:87:7E:73:66:DF:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/dfadf87e-0496-385c-917c-9e5b4e76da6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb/8637a780-1944-4d75-b623-0c10c96f56eb.crl

            X509v3 Authority Key Identifier:
                keyid:97:69:DE:A5:DA:C6:20:7F:42:CC:7D:86:D8:27:AC:E1:36:04:F6:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8637a780-1944-4d75-b623-0c10c96f56eb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8a3:40::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:81:52:a6:26:d5:16:2d:1e:6f:9a:f2:00:b6:88:09:cf:61:
         fa:07:7c:07:c7:bd:7c:51:1f:fc:2c:c2:90:e3:fd:e4:03:ee:
         66:3b:a3:3c:a7:50:da:0e:eb:a3:d2:b6:f6:fd:d4:7c:b6:63:
         f8:6b:1c:65:14:6c:87:ba:c7:c9:54:d4:aa:50:a3:80:40:14:
         19:3f:f5:ef:c2:17:62:e9:4e:3c:6a:be:1f:e5:09:8d:c7:66:
         88:3e:ba:3d:bb:33:f6:c6:c1:d1:79:7e:b9:07:17:0f:40:ad:
         85:c3:e0:a9:9b:3f:ac:04:b8:82:d7:8b:d6:e2:ab:ca:93:f8:
         77:3c:63:95:89:ed:d9:4a:1e:95:57:35:9d:a9:f4:fd:c2:da:
         02:8c:95:d4:63:0d:9c:be:18:65:fa:29:4a:ba:34:62:68:7b:
         00:96:f9:46:ee:6a:50:7b:ef:03:74:84:a7:fc:e2:b1:fe:35:
         f4:c9:08:8f:fb:4f:58:ac:4c:89:fc:2c:97:21:37:15:ea:a6:
         54:c2:7e:0e:b3:ac:39:0f:21:a4:e2:69:ab:83:a1:22:88:23:
         c8:cf:de:5b:d8:73:ff:94:87:17:eb:48:61:fc:fe:11:5e:53:
         d6:98:87:e0:b5:13:e1:4d:d9:70:d8:9b:fa:09:69:1c:a4:8e:
         5e:2d:bf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:24:34 2025 by rpki-client