Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/df5251a9-4770-3cba-a3c7-32ef3d1f45dc.roa
File:                     df5251a9-4770-3cba-a3c7-32ef3d1f45dc.roa (raw, json)
Hash identifier:          nvoQvqhG9EowBSk4SlVw3pbUVARsobooN80YwgCI5mg=
Subject key identifier:   EA:69:36:FE:23:03:38:7B:26:7E:E2:AC:81:01:2B:4C:55:4C:1F:07
Certificate issuer:       /CN=2ef52563-8058-416a-a5ae-9e83b023cee1
Certificate serial:       010D0C9F4328584A90A0A4D109F8700B3A111F00
Authority key identifier: FC:86:55:88:E1:92:6D:D6:20:4B:F4:92:D1:D0:2E:69:B7:46:C2:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/df5251a9-4770-3cba-a3c7-32ef3d1f45dc.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     11875
IP address blocks:        2602:815:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/2ef52563-8058-416a-a5ae-9e83b023cee1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/2ef52563-8058-416a-a5ae-9e83b023cee1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:a4:d1:09:f8:70:0b:3a:11:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef52563-8058-416a-a5ae-9e83b023cee1
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=36029947-da26-4f42-8799-8533e73e3b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d7:8e:2e:f4:ed:a1:0e:38:8a:3b:2d:ed:8f:
                    93:f8:16:09:98:99:49:22:81:03:fe:12:50:8d:ca:
                    ea:40:43:72:0e:ad:73:7d:00:dc:f0:84:f1:0e:bd:
                    f7:9d:59:b4:98:ca:5d:bd:96:72:89:83:fe:59:b2:
                    f2:47:01:cd:4d:b4:78:2b:d6:77:eb:20:78:97:2e:
                    a9:20:3d:17:9c:b3:aa:8d:8d:05:2d:5e:dd:b4:48:
                    7a:7c:e4:c3:c1:d4:ad:e2:23:5b:74:71:1a:83:1a:
                    6d:d2:6d:79:fa:a9:02:53:8e:b7:ad:f4:6d:b3:8d:
                    51:18:02:5c:da:d4:7d:81:9a:dc:95:c1:25:1f:62:
                    e7:5f:9e:6f:9c:2b:de:3f:36:fd:c1:bc:fb:90:0d:
                    64:d9:13:90:bb:c7:cd:62:82:f3:c0:0e:7d:86:b0:
                    6c:f1:dc:13:b0:5f:37:e8:b5:5b:f1:df:69:68:eb:
                    7c:71:e8:64:03:1a:54:94:92:5e:1d:3b:0f:dc:9c:
                    63:18:83:8f:51:85:d1:f6:6b:2f:f9:85:b4:ae:1f:
                    7b:b4:f3:24:53:ee:31:ac:df:6e:14:6a:dc:21:a8:
                    9a:7a:02:fd:60:ed:6c:3f:63:be:88:84:d0:9c:0c:
                    d6:18:34:33:b5:49:1f:89:ad:6e:a3:df:f0:cf:f4:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:69:36:FE:23:03:38:7B:26:7E:E2:AC:81:01:2B:4C:55:4C:1F:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/df5251a9-4770-3cba-a3c7-32ef3d1f45dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1/2ef52563-8058-416a-a5ae-9e83b023cee1.crl

            X509v3 Authority Key Identifier:
                keyid:FC:86:55:88:E1:92:6D:D6:20:4B:F4:92:D1:D0:2E:69:B7:46:C2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2ef52563-8058-416a-a5ae-9e83b023cee1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:815:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f0:61:46:f7:96:25:6f:d7:eb:2f:a8:42:8e:e9:a4:d1:6f:
         ac:ba:5f:9d:11:f5:5b:a7:3b:06:58:3c:1d:ba:dc:58:29:74:
         06:49:ce:12:90:56:ac:91:66:dc:b5:e8:76:82:ae:9c:59:a6:
         e2:74:9b:f0:14:80:f6:3c:2a:5d:c9:dc:4e:3d:a6:d3:f9:4d:
         10:01:b7:06:14:98:d0:b8:ff:26:ad:c0:4f:3b:ca:2e:66:c2:
         a4:d2:79:e7:a5:a5:0e:97:0d:93:24:6b:85:8e:6c:a1:dd:1c:
         f2:bf:2e:9d:18:97:3f:d5:0e:3d:86:7a:3a:e4:1a:c4:56:71:
         1d:0a:6e:8d:0c:90:86:bd:83:57:5a:04:80:07:2a:9e:74:7c:
         d9:cf:cd:a5:23:68:b6:ff:9c:20:9d:b4:bd:6e:e4:e4:40:91:
         97:c2:7d:64:a9:cf:77:00:0f:02:71:93:1d:30:e6:3f:be:6f:
         ff:9a:f7:8b:27:3c:45:b5:2f:7f:61:c5:a0:0c:17:0c:3a:73:
         bb:1a:38:ae:72:ce:46:ed:1e:61:8d:6f:71:92:37:b1:81:ab:
         0b:9a:69:1b:7e:13:fe:00:0c:55:4c:76:03:28:30:d5:e2:1d:
         b1:48:82:83:4f:49:0e:ac:cc:3c:11:fc:3e:11:bc:cd:d9:37:
         36:53:5c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:34:01 2025 by rpki-client