Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/396df5c8-94c4-3cd8-b9cf-03ad9706a71f.roa
File:                     396df5c8-94c4-3cd8-b9cf-03ad9706a71f.roa (raw, json)
Hash identifier:          aRCz8oqMa/7Q+m3si2INh+U4noc2IBfXx5v4Fwk2e2Y=
Subject key identifier:   54:57:5E:55:2A:42:42:62:42:17:BF:06:7D:89:E4:BA:36:3E:EB:0F
Certificate issuer:       /CN=b1b35dc3-b096-40ba-8edf-87e481b625c4
Certificate serial:       010D0C9F4328584A8575FEF03CEA011E940CD900
Authority key identifier: 2E:74:CD:6B:0B:BB:49:7B:EF:E2:32:E4:BB:DA:A2:98:54:EB:C6:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/396df5c8-94c4-3cd8-b9cf-03ad9706a71f.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     393559
IP address blocks:        2602:f8c8:600::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/b1b35dc3-b096-40ba-8edf-87e481b625c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/b1b35dc3-b096-40ba-8edf-87e481b625c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:fe:f0:3c:ea:01:1e:94:0c:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1b35dc3-b096-40ba-8edf-87e481b625c4
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=7d5f47a8-a28f-4811-b31a-99efcd2086fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:1e:b8:71:c7:22:43:53:b3:73:f6:e2:39:
                    53:cc:8a:78:c4:93:41:6f:76:24:b7:d1:4d:25:ab:
                    33:18:8d:c9:e4:54:e0:e1:7f:e2:a2:58:f6:c2:de:
                    94:4c:35:c5:3e:1c:3b:0b:b8:f4:c3:b6:1e:b1:d8:
                    27:8b:d4:db:5e:49:6f:58:76:70:4e:7f:7f:08:af:
                    cb:ba:7e:c7:09:4d:8c:86:48:42:41:93:fc:72:8f:
                    ee:17:ef:d4:52:c7:ec:b1:34:7c:6d:02:f1:91:89:
                    6d:db:a8:fa:b6:27:07:b1:dc:71:a2:39:97:79:01:
                    de:c1:02:f3:ee:f0:f9:5f:0e:2d:1a:02:78:39:34:
                    2b:ab:15:59:94:1c:2a:40:42:b4:07:79:61:d1:70:
                    f4:57:7f:23:ab:92:a4:b3:23:cb:1c:5f:c9:b5:b2:
                    c8:b8:94:4b:2e:30:f1:70:c4:7a:5c:a0:1c:fb:fa:
                    bc:cd:38:fb:37:ec:3b:39:ac:9b:5a:9b:ea:f7:47:
                    2b:1b:47:70:38:bd:ff:05:42:e6:79:d1:a4:99:9a:
                    34:a2:45:a8:ab:f8:cd:a4:64:5e:75:67:d3:4e:bc:
                    a7:dd:a7:6d:6e:d8:13:0c:d0:b0:cc:de:0f:83:c1:
                    26:d7:1e:49:70:17:9b:57:05:07:f2:2e:1a:99:de:
                    a1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:57:5E:55:2A:42:42:62:42:17:BF:06:7D:89:E4:BA:36:3E:EB:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/396df5c8-94c4-3cd8-b9cf-03ad9706a71f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/b1b35dc3-b096-40ba-8edf-87e481b625c4.crl

            X509v3 Authority Key Identifier:
                keyid:2E:74:CD:6B:0B:BB:49:7B:EF:E2:32:E4:BB:DA:A2:98:54:EB:C6:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8c8:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f2:60:55:90:85:a4:f9:0b:be:44:37:cd:f1:91:08:da:90:
         0b:43:9d:73:be:ea:20:f8:bd:e9:4a:6e:f9:54:4f:a6:c9:79:
         6c:4a:d8:f7:08:5d:8d:99:c6:82:6a:e8:56:24:b3:d2:cd:54:
         2c:b9:ae:f9:c0:48:9e:7b:49:b8:bb:b5:28:54:bd:ba:f4:9e:
         9f:25:97:51:88:78:39:d4:7d:ed:3f:24:e1:04:fd:73:67:f5:
         a4:09:ba:84:c7:35:86:97:b5:11:0f:c8:ce:85:d5:7e:af:16:
         8a:07:27:b3:6c:88:e6:93:ce:2f:fb:bd:31:6b:ba:67:49:ef:
         c1:53:c2:d7:01:f7:8a:7d:b8:b5:fc:33:a4:78:ce:dd:6a:8a:
         d4:7c:3e:03:05:9a:09:a3:fa:4b:5c:9a:da:57:85:24:14:96:
         81:15:80:bf:ae:25:27:15:ad:cb:d0:cb:7d:a5:89:8d:8d:4a:
         06:90:31:17:f3:dc:f4:ed:0b:ad:d5:7e:90:e3:09:fb:06:43:
         00:46:04:26:9e:18:f7:ee:a4:f9:46:23:f7:d5:bd:64:e9:b9:
         45:04:7e:3f:7c:0c:2c:7c:7a:26:cf:4e:51:6d:c6:c1:c0:b0:
         6b:c5:af:09:e6:2b:be:d7:4c:6f:6c:9c:85:0b:3f:76:b1:a0:
         07:65:b8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:13:49 2025 by rpki-client