Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/df166a29-bbe2-313b-80c5-dfb2fdd39687.roa
File:                     df166a29-bbe2-313b-80c5-dfb2fdd39687.roa (raw, json)
Hash identifier:          z0scQqQ6zBTFVq6nNnuUdrYqFlSoJ5ecJw/fNmH4HGk=
Subject key identifier:   88:19:E8:CB:09:72:33:07:AB:CC:DC:46:61:BB:F0:7B:E1:F7:00:C2
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584A8575FE7300B1B8E97C0F8780
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/df166a29-bbe2-313b-80c5-dfb2fdd39687.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     44324
IP address blocks:        2602:f9f6:430::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:fe:73:00:b1:b8:e9:7c:0f:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=0ff25972-e984-4899-9847-8ffd2ae65274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:4f:52:94:ef:b7:cb:51:87:b3:80:ed:e9:
                    dc:d7:93:6e:11:6f:d8:0e:c1:c1:ab:7b:62:3c:26:
                    25:16:44:6f:25:50:c0:0f:2f:e0:be:32:bd:af:3f:
                    b5:fc:6f:5e:19:26:4d:9e:e2:b4:e4:59:47:c6:50:
                    db:78:b4:e3:06:2b:ec:c0:52:89:ac:50:3c:04:1e:
                    fd:97:eb:ce:93:ea:4e:41:3f:8a:24:2f:ce:dd:b4:
                    62:3e:5f:4a:73:f2:ff:77:77:d6:2f:03:4a:7c:d0:
                    38:6b:5a:da:a0:1e:bf:5c:c4:64:0a:90:53:f1:7b:
                    48:63:a3:b4:b0:16:54:f7:d2:58:a6:3e:38:f8:bb:
                    d7:d7:11:d2:bd:40:33:2a:19:36:3c:f8:a0:67:ae:
                    f0:85:83:f5:28:9f:18:e0:1c:e2:d1:97:1b:ec:8d:
                    aa:d2:da:70:ac:73:ad:6b:48:25:2a:6c:8a:6a:1c:
                    e5:76:a1:52:db:bb:1c:ec:af:18:60:22:ae:c3:d4:
                    3a:ec:a6:67:e2:b5:5a:00:aa:86:81:b0:c1:ac:f3:
                    43:75:44:89:76:76:3e:9d:86:69:e3:58:2e:dc:ef:
                    a8:56:25:fc:df:c7:2d:93:f5:70:57:b5:e9:06:a7:
                    1e:7e:58:15:26:21:e6:9d:bf:83:f7:16:86:d9:e2:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:19:E8:CB:09:72:33:07:AB:CC:DC:46:61:BB:F0:7B:E1:F7:00:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/df166a29-bbe2-313b-80c5-dfb2fdd39687.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6:430::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:81:89:87:13:c3:d9:2a:ef:c2:64:21:f0:64:6a:2f:4c:7b:
         2f:c6:86:ea:68:f5:b5:4b:12:35:61:f6:0b:4a:3a:24:28:49:
         af:3d:16:e1:eb:5f:22:93:cf:97:be:20:c4:10:d8:41:f1:ab:
         e6:9c:79:a3:84:55:86:c5:c4:0e:17:0f:3c:cf:79:57:ef:0d:
         05:86:2e:fa:a8:5a:33:2a:d6:2e:84:50:9d:52:b8:9a:97:5d:
         b5:19:c2:20:2d:72:1d:55:ef:42:fd:f4:65:56:39:13:e4:24:
         11:5e:f0:06:74:13:c4:29:52:ed:fd:de:32:fb:a4:bd:70:55:
         76:fb:ba:9f:3a:47:7c:1e:7f:be:76:fd:9b:de:58:00:34:59:
         0b:34:aa:0c:62:b5:c2:32:4b:f6:41:c0:4e:1e:5a:a3:0e:11:
         6b:d3:6a:16:7f:d2:46:e7:c1:86:68:a4:d8:ff:8a:d8:73:0e:
         d2:83:95:a9:c2:7e:e5:2c:12:b1:28:25:b9:0a:6f:18:74:54:
         cd:3a:8c:a0:fe:85:75:a9:0f:aa:39:dd:dc:a1:0b:99:13:9d:
         e6:71:72:17:70:21:00:16:f7:7f:4c:c1:5d:ff:f2:0b:6b:83:
         3a:51:e4:0d:de:73:dc:2c:14:f9:0f:7c:ec:c4:4a:32:d7:69:
         08:60:be:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:16:41 2025 by rpki-client