Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/efa9cbc1-8733-321d-a16e-ac2e93ca5e28.roa
File:                     efa9cbc1-8733-321d-a16e-ac2e93ca5e28.roa (raw, json)
Hash identifier:          yzoWyrPOB6CJZrzPqzs3AUrGMpjUnKj6+1iFiObKojc=
Subject key identifier:   D0:C3:6F:54:21:D0:A6:DF:C2:82:D6:3F:6D:15:45:C0:1A:12:C5:C2
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584A8575FE612113A043BE70F580
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/efa9cbc1-8733-321d-a16e-ac2e93ca5e28.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     44324
IP address blocks:        2602:f9f6::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:fe:61:21:13:a0:43:be:70:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=bf0b335c-3009-42cc-bfc5-6b6bbf83d17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:97:cc:8e:96:3d:dc:1b:4f:9a:ac:2d:b5:
                    37:d3:21:5b:ba:b0:fb:78:66:78:1f:3a:4f:fa:24:
                    6f:4a:80:43:20:ee:4d:93:45:6e:b2:4b:53:c3:05:
                    93:ff:00:c5:2a:4e:81:8d:00:bc:6f:18:18:bc:6a:
                    66:87:7f:4a:89:17:68:d5:6d:81:36:fc:51:06:38:
                    41:c5:8b:f3:f9:fa:bb:2a:cf:f9:4d:35:0d:8c:89:
                    fb:20:b2:30:fa:5c:b1:73:57:16:ee:50:29:d3:e1:
                    00:1b:1e:3a:61:37:21:64:f4:7a:bb:50:ba:70:d3:
                    6a:b8:f3:48:2b:75:26:b1:ed:97:4c:df:22:95:9c:
                    32:c9:8e:11:23:49:7d:dc:7a:4e:62:be:70:a5:fa:
                    65:39:94:a6:45:f2:a5:16:93:88:6f:32:1c:94:b8:
                    53:b9:30:f7:8a:5e:0b:a7:10:f2:54:8e:ba:cf:72:
                    f9:a0:e0:ec:42:1e:92:cd:36:0d:75:20:13:db:80:
                    b6:fa:28:82:4c:33:a0:10:9a:99:03:02:7f:de:a2:
                    07:6d:51:1e:7b:90:68:59:5e:16:93:fe:4e:2b:40:
                    5b:7f:89:7f:72:f1:5d:c3:4d:b0:63:d1:26:e2:ce:
                    18:32:6f:22:27:3b:ac:34:be:0b:62:25:68:ae:d5:
                    f8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C3:6F:54:21:D0:A6:DF:C2:82:D6:3F:6D:15:45:C0:1A:12:C5:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/efa9cbc1-8733-321d-a16e-ac2e93ca5e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:14:ab:4c:7d:c6:d9:e3:7c:e5:88:71:4f:eb:be:88:48:38:
         8e:f7:ec:9f:dc:03:e7:63:77:fa:82:f4:60:6b:4c:74:14:98:
         ed:d3:86:20:79:b5:a4:c6:f2:bd:55:79:01:4b:27:40:01:5d:
         4e:6b:d3:83:d4:97:45:3d:09:98:92:a5:c5:6e:38:d6:db:d0:
         d0:8a:ac:4f:30:4f:d3:99:e1:34:43:4c:c4:64:74:22:eb:6e:
         cb:a9:c0:c2:31:b9:e9:53:c9:a9:3e:63:1a:a2:c0:e1:73:b3:
         35:a1:44:af:64:33:42:51:64:0f:72:25:79:bf:64:69:a5:f2:
         7b:db:dc:4d:76:82:4d:35:1c:b5:08:83:02:40:42:51:7c:9e:
         d7:02:ef:ab:03:1d:19:28:07:0b:45:fb:89:f7:9f:b8:27:d5:
         3e:61:0b:b2:f9:21:35:46:48:b1:d3:e0:a2:c1:a5:fa:8f:3c:
         09:0c:95:a3:8b:62:47:cb:89:a1:52:23:c8:42:17:27:5b:f1:
         d5:df:0f:44:a4:6f:d9:80:00:37:3b:21:84:5a:ec:00:90:fc:
         fc:4c:43:bd:05:09:e1:e0:e4:4b:88:dd:45:52:db:e5:8c:56:
         d8:02:b0:1e:f2:55:a5:3c:86:0a:98:cb:96:0e:81:85:64:31:
         ee:8d:5e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:12:33 2025 by rpki-client