Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/7a9a9079-ed6e-36bc-9987-7579134bf17f.roa
File:                     7a9a9079-ed6e-36bc-9987-7579134bf17f.roa (raw, json)
Hash identifier:          yahfMHJQ4+mUXG507CTTsRs5qCLCHh2ZRhS7Wd69GN4=
Subject key identifier:   4E:E4:0C:C2:1A:76:51:49:B5:A2:16:B6:9B:F2:C2:73:70:22:62:65
Certificate issuer:       /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
Certificate serial:       010D0C9F4328584A94D0DBA52E1890861B9E4200
Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/7a9a9079-ed6e-36bc-9987-7579134bf17f.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     399646
IP address blocks:        2602:f9f3::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:db:a5:2e:18:90:86:1b:9e:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=d71d2c34-b7de-4ba2-9f79-981725968218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:b6:94:97:e8:19:dd:2d:62:7f:bc:ab:f5:
                    ba:d4:f7:b3:92:cb:0a:a1:e2:3a:8e:a5:2b:34:b1:
                    87:44:12:ff:26:83:3f:b1:ec:9e:35:b5:5d:65:71:
                    34:74:e6:2c:bb:25:27:91:3e:f6:7f:4f:c1:d2:a7:
                    94:e0:ca:d0:bb:32:d7:54:2f:ae:ff:cd:1c:c3:10:
                    34:42:1e:0c:23:43:8a:f6:76:27:ca:14:4e:9e:38:
                    b0:5a:f8:91:31:a3:f6:80:92:71:24:fe:8d:2d:6f:
                    26:5a:d3:b8:a2:9e:df:a5:ac:ad:db:0f:c2:ee:fa:
                    9a:6a:be:ba:b8:af:06:9f:49:d7:0c:ce:ae:59:9c:
                    8c:48:24:fd:e2:be:74:c3:37:92:36:7c:22:b6:94:
                    55:59:81:69:67:2a:ed:25:65:a6:9f:56:f2:6b:78:
                    24:5d:a9:d8:97:19:87:fa:43:40:7b:41:3e:46:58:
                    7f:aa:7b:41:6a:5b:5b:c0:53:b9:c1:eb:d3:5e:3d:
                    0e:23:83:29:26:2c:5e:ca:c8:a8:da:b8:45:b0:c4:
                    46:b3:48:b2:e1:33:20:cb:bc:af:c8:63:53:da:7b:
                    86:c0:88:39:a0:0b:51:17:f6:4b:a9:d9:07:c1:7f:
                    fd:c2:f1:40:8d:78:b6:ad:fc:30:b1:06:9d:25:db:
                    a8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E4:0C:C2:1A:76:51:49:B5:A2:16:B6:9B:F2:C2:73:70:22:62:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/7a9a9079-ed6e-36bc-9987-7579134bf17f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl

            X509v3 Authority Key Identifier:
                keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f3::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:72:06:09:f7:62:50:ce:33:46:41:de:67:3c:46:d3:a8:6d:
         b3:2e:cb:53:a5:ff:73:85:ae:18:12:c0:26:52:af:22:f0:e0:
         44:93:21:58:fc:f3:71:31:ca:0e:62:39:e3:8f:7e:2a:a4:ba:
         1a:da:16:2b:04:33:28:c8:de:4a:0a:e9:f0:0c:7a:a3:00:84:
         3a:8d:ed:43:8f:14:1b:e3:5c:65:cc:e0:47:f3:9d:86:89:d6:
         2b:78:9f:29:c9:f4:c4:f3:a4:f1:d2:d2:eb:ef:70:a8:dc:96:
         50:eb:ba:42:d5:90:76:c7:35:1c:b7:00:6b:bd:2f:d2:15:a7:
         1d:e4:0f:50:60:bc:c7:13:d2:f7:46:ab:47:3b:19:de:05:d9:
         8b:d6:30:64:35:be:59:70:28:9d:ef:c2:cf:74:ca:71:e1:0f:
         ac:b0:6e:ad:82:fa:0b:46:b7:5b:99:03:95:19:6b:2c:c4:3d:
         be:ec:4e:7a:1b:bf:e1:3c:f5:8e:1c:9f:98:80:30:e1:72:e9:
         16:05:f4:e3:11:fb:ba:65:15:17:c6:db:8e:0d:11:7f:b6:ec:
         cd:39:eb:c3:82:a9:16:69:5e:55:b8:c9:bd:53:6c:b1:2e:65:
         57:0d:08:dd:07:bc:af:a3:ca:aa:e0:2a:ca:2d:4a:41:3b:66:
         7f:29:3b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:20:38 2025 by rpki-client