Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/7926a243-3f80-31ef-8554-415bd8b817bf.roa
File:                     7926a243-3f80-31ef-8554-415bd8b817bf.roa (raw, json)
Hash identifier:          U3ZzbikK3tinOhvgDD1MHY+Q9VWbgYJ/O65PPpx6sk4=
Subject key identifier:   65:FB:02:16:DD:26:C2:AF:1D:B1:4D:BB:E8:6C:C1:C4:BB:E6:C7:0A
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F4328584AC710EB215E275BDD56BA26C0
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/7926a243-3f80-31ef-8554-415bd8b817bf.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     396908
IP address blocks:        2602:f956:90::/48 maxlen: 48
                          2602:f956:91::/48 maxlen: 48
                          2602:f956:92::/48 maxlen: 48
                          2602:f956:93::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:eb:21:5e:27:5b:dd:56:ba:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=283f625d-3330-4e37-88fc-a9a6f18d0c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9e:b8:2d:8f:25:92:85:f3:cb:64:45:62:3d:
                    04:f1:00:75:02:2f:6c:10:f5:74:50:58:7a:ee:c9:
                    04:34:28:95:6e:0d:e5:4f:63:da:ab:b2:38:27:d4:
                    32:de:d6:52:e8:c3:4a:55:e7:d6:8e:66:2b:d1:4d:
                    76:18:51:72:2b:e7:3a:e7:50:d3:30:cd:5f:82:4f:
                    19:af:31:79:bf:b6:fc:67:3b:f9:fd:35:0f:ba:3d:
                    1d:b0:64:30:c6:67:de:a9:51:19:43:d8:4d:d5:37:
                    5e:9a:1d:1d:fa:f4:88:3e:35:44:49:fc:ac:cd:bb:
                    bc:4c:33:c3:6a:19:b1:ae:e6:12:0a:59:5c:78:72:
                    3d:69:f7:f6:66:3d:3d:da:39:67:45:5c:e4:c3:a9:
                    9b:77:52:88:4e:28:4e:9d:0f:18:a0:df:22:38:97:
                    fb:94:d6:71:cf:b5:6d:5c:bd:0e:c7:62:ab:be:e0:
                    c0:2a:a8:77:39:cf:df:d0:da:c6:86:87:13:b7:02:
                    cb:5a:fb:d1:78:11:c2:33:50:a6:35:63:22:92:76:
                    0b:c8:eb:db:20:ae:26:e1:36:dc:c8:f0:a0:96:7f:
                    b2:a0:41:82:4a:78:a9:22:34:bc:7c:5c:d4:2d:b3:
                    76:78:32:e9:e4:ca:78:84:ba:c4:6e:67:ca:c6:66:
                    92:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FB:02:16:DD:26:C2:AF:1D:B1:4D:BB:E8:6C:C1:C4:BB:E6:C7:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/7926a243-3f80-31ef-8554-415bd8b817bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:90::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:74:26:fd:22:00:a5:fc:ac:4a:e8:01:b9:cc:8d:2b:20:d3:
         6f:c6:da:a3:69:6a:09:e4:21:90:c4:86:10:54:14:eb:80:6a:
         30:c2:64:35:ff:c6:02:97:fb:55:4d:b9:01:65:63:37:92:21:
         4e:36:21:87:c4:ba:c2:d8:a3:49:bc:a6:43:67:1b:0d:ec:08:
         8d:88:48:ee:fb:0f:db:76:c8:21:21:54:21:f1:c1:15:65:c8:
         96:c3:38:59:49:59:73:c2:c2:6b:22:c0:ce:cb:5c:86:4e:5d:
         45:c4:c6:d6:be:14:c7:9a:39:42:a5:48:fb:ca:60:51:b6:56:
         05:fc:02:42:31:37:13:5b:31:c5:7a:b4:a5:09:54:27:35:33:
         40:05:37:0b:a2:7a:79:58:f1:89:30:87:7e:12:d3:b8:a2:50:
         40:df:37:cb:e5:cb:0a:80:63:b8:fa:9e:71:78:13:79:a4:f6:
         c8:00:73:f2:9b:85:d6:2e:08:e3:12:dc:91:80:92:63:49:21:
         9a:0c:c1:a2:68:19:9b:dc:20:f2:a1:5c:16:3f:c6:ff:70:d8:
         68:6a:5e:40:4e:fb:d3:84:50:b2:ca:3a:6a:41:dc:b5:c7:ea:
         a4:ea:d7:c9:fa:80:31:82:85:97:d7:2e:f8:a3:aa:70:f4:a9:
         21:92:c3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:56:01 2025 by rpki-client