Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0ecb861-4965-455e-940d-6f0ce189326b/aa429435-eab7-396a-818d-0bedecd7bdca.roa
File:                     aa429435-eab7-396a-818d-0bedecd7bdca.roa (raw, json)
Hash identifier:          kTBTu9UJ9eOsrSN/4hNFo8LFWfm9S6OCk73RQCun0P8=
Subject key identifier:   69:23:A4:4E:63:43:3E:11:D9:77:43:96:11:CC:25:03:10:39:C5:BC
Certificate issuer:       /CN=e0ecb861-4965-455e-940d-6f0ce189326b
Certificate serial:       010D0C9F4328584ABD4B802147A8983EFB2FB700
Authority key identifier: 8A:F3:5C:81:0B:85:D5:C3:71:88:E4:59:01:36:B3:06:75:45:29:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0ecb861-4965-455e-940d-6f0ce189326b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0ecb861-4965-455e-940d-6f0ce189326b/aa429435-eab7-396a-818d-0bedecd7bdca.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     17350
IP address blocks:        2602:806:d000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0ecb861-4965-455e-940d-6f0ce189326b/e0ecb861-4965-455e-940d-6f0ce189326b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0ecb861-4965-455e-940d-6f0ce189326b/e0ecb861-4965-455e-940d-6f0ce189326b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0ecb861-4965-455e-940d-6f0ce189326b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:80:21:47:a8:98:3e:fb:2f:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0ecb861-4965-455e-940d-6f0ce189326b
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=8c5b5e48-aca8-4d65-bd45-38a82692b3d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:38:ff:07:83:50:f4:cb:b0:e7:5f:38:1a:1d:
                    fb:fb:a4:70:ee:46:85:e5:0a:96:7a:75:03:e6:6c:
                    0e:70:a8:b7:03:f4:d3:7e:a3:8e:67:18:e0:87:95:
                    6a:49:ad:28:72:97:c3:f0:4b:40:03:13:65:f4:2b:
                    ad:07:6a:ad:31:99:2b:ef:f4:c4:01:eb:9e:de:1c:
                    8e:01:49:28:7e:55:4f:ba:8f:31:82:60:f7:d6:38:
                    94:70:1d:2d:c7:ef:f0:eb:c4:23:fb:90:68:8f:54:
                    62:7f:fa:72:a1:74:60:c2:20:db:33:16:80:21:c4:
                    a8:6d:08:12:5d:43:12:02:be:f2:8d:2d:ec:c8:19:
                    8f:98:1b:ff:ae:7e:fd:fe:4e:a2:c0:56:20:ed:e6:
                    d3:63:21:96:eb:5d:b0:c0:be:0c:62:f7:0a:3a:17:
                    6d:cf:c7:72:df:94:0d:10:36:4b:64:b2:5c:cd:47:
                    04:e8:5a:4e:b5:d4:ef:2d:5b:25:3f:77:e3:d6:61:
                    bf:70:cc:79:2a:5c:7d:38:74:da:7e:a0:b6:ad:2f:
                    af:46:f4:81:61:0c:22:11:6a:8b:ed:95:8f:da:77:
                    a2:5d:01:fe:6a:d7:9e:c4:0a:3a:9f:63:2a:5f:20:
                    7e:c5:fa:e0:db:97:be:f9:84:5d:2c:22:03:6f:44:
                    64:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:23:A4:4E:63:43:3E:11:D9:77:43:96:11:CC:25:03:10:39:C5:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0ecb861-4965-455e-940d-6f0ce189326b/aa429435-eab7-396a-818d-0bedecd7bdca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0ecb861-4965-455e-940d-6f0ce189326b/e0ecb861-4965-455e-940d-6f0ce189326b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:F3:5C:81:0B:85:D5:C3:71:88:E4:59:01:36:B3:06:75:45:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0ecb861-4965-455e-940d-6f0ce189326b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:806:d000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:3a:ef:cb:a1:43:00:fd:5c:54:ae:61:75:d5:46:b4:b0:08:
         6a:b9:bc:32:74:fc:ba:e3:59:22:dc:84:73:3c:6a:d7:7e:1e:
         b1:21:72:87:84:9a:63:eb:35:16:d5:1f:31:72:ce:f1:27:1e:
         90:0f:03:29:af:20:82:08:b0:40:41:2d:4c:b5:5d:ee:17:d6:
         2f:17:65:0a:83:dd:cd:1e:b6:88:a2:df:87:ba:b6:3c:0a:44:
         40:4b:94:57:03:29:f9:31:cd:11:e4:30:dc:3e:80:df:df:d4:
         d5:97:a9:9d:7a:0b:70:8e:39:a9:3c:b4:ac:94:03:d5:e6:ac:
         64:c1:ac:01:a1:19:d3:c7:a3:16:b6:23:f7:44:3e:1c:4e:74:
         ea:d4:1b:43:91:09:17:ca:61:4d:68:1b:9d:11:a2:c6:88:1f:
         86:5f:b7:67:39:26:f9:5b:5a:2c:21:3c:1e:77:55:58:d6:c4:
         08:e0:84:04:5f:6b:e3:09:d1:62:f4:79:6e:9a:3f:d0:f3:58:
         e6:af:3c:3c:77:f1:d1:da:e4:62:e5:49:b9:85:9b:65:e0:b0:
         4d:6e:ac:a9:b1:2c:cc:9a:46:bb:7b:f5:1c:6a:b0:41:8b:15:
         e8:04:7c:dd:6f:05:bb:f4:35:e2:01:31:93:3e:e7:86:e8:89:
         d9:dc:49:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:49:42 2025 by rpki-client