Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/0aadba15-f364-3f22-b4d5-ac2161a09872.roa
File:                     0aadba15-f364-3f22-b4d5-ac2161a09872.roa (raw, json)
Hash identifier:          kbDj+cKAhLBxRLlve/T1yj7egJj7Z/U1BoD/0ZXFX5A=
Subject key identifier:   6E:B3:A1:CB:DD:51:04:C1:01:1F:E8:12:C7:E0:07:96:0C:92:C4:74
Certificate issuer:       /CN=fc69a390-9be0-4f05-abc1-c3b9b00edda2
Certificate serial:       010D0C9F4328584AB7B6204AA604B81073781220
Authority key identifier: 95:F6:E7:21:CF:42:50:B8:E2:CA:1D:09:29:1C:DE:AE:2D:32:B8:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/0aadba15-f364-3f22-b4d5-ac2161a09872.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     396877
IP address blocks:        2602:f88d::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/fc69a390-9be0-4f05-abc1-c3b9b00edda2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/fc69a390-9be0-4f05-abc1-c3b9b00edda2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:20:4a:a6:04:b8:10:73:78:12:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc69a390-9be0-4f05-abc1-c3b9b00edda2
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=22b37e24-e497-46e0-8b76-dcc382bbb005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ef:75:39:79:08:f5:41:91:20:7d:a5:16:91:
                    73:27:dd:11:68:79:38:08:d9:91:b2:e0:df:35:0f:
                    60:e6:40:73:bd:76:d3:08:76:3e:4c:a5:50:2f:29:
                    10:7c:14:c0:59:ad:ee:bb:f5:7d:2f:68:6c:d0:14:
                    03:9f:65:c2:e9:93:95:12:c2:19:2c:ee:be:ea:d9:
                    b8:47:29:98:c3:81:cc:36:6c:f6:23:33:97:3f:81:
                    e7:66:39:90:a3:4a:64:0a:29:e8:ed:8d:00:27:61:
                    5a:6f:21:3b:b7:a7:08:98:95:f8:86:51:76:96:89:
                    ae:b5:85:e4:6c:54:88:85:e1:83:18:fe:66:f1:81:
                    ac:b5:91:1b:19:e9:27:d7:c3:cd:87:9e:4a:2b:3f:
                    b7:f0:b7:45:db:36:40:04:3b:fc:cc:bb:7f:e2:2a:
                    ef:9a:31:ab:e1:b1:94:f5:dc:6c:c0:21:97:43:6a:
                    33:25:d0:7f:84:71:bc:d5:a8:ce:5b:94:9a:df:25:
                    0e:74:08:48:18:e0:8d:90:93:32:79:09:3b:c3:e5:
                    cf:c7:c6:00:ad:06:0a:73:b1:34:a5:ff:70:03:12:
                    71:c3:a6:a5:fb:a5:16:ac:27:cb:f2:1f:84:dc:a5:
                    e1:2c:ef:95:e1:c2:b6:cf:05:81:be:5e:9a:f5:1c:
                    7c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B3:A1:CB:DD:51:04:C1:01:1F:E8:12:C7:E0:07:96:0C:92:C4:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/0aadba15-f364-3f22-b4d5-ac2161a09872.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2/fc69a390-9be0-4f05-abc1-c3b9b00edda2.crl

            X509v3 Authority Key Identifier:
                keyid:95:F6:E7:21:CF:42:50:B8:E2:CA:1D:09:29:1C:DE:AE:2D:32:B8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc69a390-9be0-4f05-abc1-c3b9b00edda2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f88d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:e4:5e:d7:71:34:a7:7a:10:dd:3d:24:70:e9:9e:3a:fc:66:
         7f:9f:42:d3:89:ff:2c:e2:fd:a4:ea:17:8b:01:f2:2c:2c:29:
         ec:d0:5a:94:fe:f5:e3:47:45:3f:bb:da:79:fd:55:ca:9f:ec:
         3f:15:d5:10:e4:16:7e:a4:01:5e:66:9a:a8:22:63:c2:e3:ad:
         b3:e1:d1:b7:d8:57:48:c8:b2:06:28:9c:10:42:f8:6d:b2:63:
         5a:7e:1b:73:1e:d0:f7:35:92:43:80:08:76:21:e0:92:f3:4a:
         8c:2f:90:c9:67:3c:36:ee:6b:78:9b:63:3a:28:f8:57:b1:fd:
         87:30:6e:61:ef:92:5d:7e:b2:51:ec:a8:d7:b4:32:02:97:d9:
         d9:a2:5f:bc:3e:52:86:12:d0:11:7b:6f:d1:e5:bc:d3:d6:8d:
         af:f3:5b:b3:ef:66:2d:37:90:48:14:5f:71:28:ef:ac:32:36:
         c1:18:cd:ee:7d:62:0d:4f:67:e6:7f:56:70:fd:52:24:ad:94:
         6c:91:e2:55:ba:7c:30:2c:ec:62:5d:a7:b9:98:0d:1f:13:be:
         b4:ab:aa:c5:ab:c9:a7:4b:3f:43:97:fe:21:a3:e6:61:9a:a6:
         55:28:dd:e1:6e:50:4b:71:eb:87:16:50:ae:3d:cc:a2:10:09:
         27:f0:01:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:20:38 2025 by rpki-client