Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/70974fba-bcd2-3ee8-b8b3-a5e9b58eb7b7.roa
File:                     70974fba-bcd2-3ee8-b8b3-a5e9b58eb7b7.roa (raw, json)
Hash identifier:          k8tggf1spINjRfUVBET+liGWHCY97iEYeun/ELIzKcU=
Subject key identifier:   2F:2F:99:C3:20:BF:87:F6:CC:50:AD:13:5F:10:DC:9A:7C:C5:B4:9E
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584AAB264484B010871785DE4EB0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/70974fba-bcd2-3ee8-b8b3-a5e9b58eb7b7.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     21859
IP address blocks:        2602:ffe4:c5e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:44:84:b0:10:87:17:85:de:4e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=daabfbe1-e598-4ac4-9486-84ee223ddbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:db:13:9b:e3:09:65:ae:77:97:7d:33:3d:ec:
                    50:8e:8e:1c:73:01:cf:ab:40:ae:49:cb:d9:37:f6:
                    27:e4:82:3c:06:41:be:1d:7d:a1:4a:23:08:f6:f2:
                    18:0b:6a:ae:8d:36:74:17:a2:6a:bd:b1:f5:c4:32:
                    a7:a0:6f:3e:0c:53:31:f7:3c:15:37:93:72:5d:50:
                    1a:ec:b0:47:5f:40:d2:e9:d1:ae:74:a1:92:e2:5f:
                    b8:40:48:36:34:cf:6a:4e:50:35:6c:72:44:77:30:
                    55:e2:ed:e6:1e:d7:76:9b:3b:c5:cf:af:c7:c4:7a:
                    60:77:b7:6b:3a:73:22:ca:d8:ef:df:5b:fb:1f:14:
                    ea:eb:e1:bf:6a:1f:ef:c9:6f:00:56:a0:96:9f:1c:
                    26:80:dd:36:74:99:78:e4:ed:5f:39:f5:43:6a:7a:
                    a0:d7:27:a1:2a:38:c1:91:48:5e:1d:ab:26:d9:bf:
                    63:7a:eb:67:9a:d2:54:a2:87:b1:4a:99:64:4d:f3:
                    77:fa:66:c2:8f:f0:08:92:f0:db:1b:ba:4f:26:e1:
                    82:65:88:b6:34:8f:f6:f1:01:05:51:be:d3:96:81:
                    63:c8:1d:b4:06:b8:d0:e9:3c:71:c7:9d:6d:7d:79:
                    df:e3:60:58:bf:30:8d:2c:75:70:07:65:ea:36:a6:
                    96:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2F:99:C3:20:BF:87:F6:CC:50:AD:13:5F:10:DC:9A:7C:C5:B4:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/70974fba-bcd2-3ee8-b8b3-a5e9b58eb7b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffe4:c5e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:25:61:b4:8a:07:5e:84:0f:82:75:13:fd:d2:9a:f3:73:08:
         9d:75:5e:61:4f:93:d5:80:c7:e4:d4:17:35:ea:b4:54:33:91:
         41:71:7f:8a:8e:5f:c7:5b:08:ce:df:8c:11:f4:bc:a8:71:51:
         ba:76:0f:bc:35:59:b9:35:7d:cf:36:50:6e:61:e2:1d:72:1c:
         07:f2:c7:ef:ed:1a:4a:dd:71:29:19:15:7a:4d:97:02:0a:b2:
         e3:8b:a9:1f:df:f6:cf:91:b5:91:b7:2e:cf:cf:0d:11:91:3a:
         b2:ed:ca:69:d5:1b:b4:aa:f3:26:c1:ae:74:54:c8:50:84:e2:
         29:35:55:bb:68:6c:62:25:56:6c:48:ea:40:d4:86:a0:c8:f1:
         25:6a:4a:d5:ce:74:01:fe:5b:b3:80:e8:11:8d:0c:f9:08:c6:
         d6:25:b9:e5:e5:49:4e:d3:a4:43:de:35:41:32:af:3a:09:1e:
         08:9b:a8:5b:f8:37:68:21:61:1c:aa:63:19:31:31:f2:a4:be:
         47:60:66:93:9e:d6:b9:ac:2a:db:11:1f:d2:bf:27:48:64:72:
         18:1e:d4:08:d4:31:72:39:7d:bc:b5:76:db:c2:cd:d2:a3:b4:
         91:18:98:81:bb:8b:73:82:da:77:47:99:91:98:6c:74:40:30:
         0a:7d:99:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:49:41 2025 by rpki-client