Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/a693eb7b-830c-3c07-8f86-2ac58f211b2c.roa
File:                     a693eb7b-830c-3c07-8f86-2ac58f211b2c.roa (raw, json)
Hash identifier:          Y3J4UTrj3KMh+O1tKwNfmYDXb/S3lDbR7HYg1SVl3U0=
Subject key identifier:   33:F7:26:F3:66:54:04:A5:B5:BE:A9:84:A4:EF:4A:AB:14:A4:3A:58
Certificate issuer:       /CN=f838c026-61f9-443d-b867-26f60a99d561
Certificate serial:       010D0C9F4328584A8B0B621E4CF0419A47B8FC00
Authority key identifier: 23:47:1B:D2:AE:7E:16:EB:A1:A9:45:E8:0E:82:11:88:74:9A:B2:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/a693eb7b-830c-3c07-8f86-2ac58f211b2c.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     30205
IP address blocks:        2602:f9c1::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:62:1e:4c:f0:41:9a:47:b8:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f838c026-61f9-443d-b867-26f60a99d561
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=6cdb8408-d60c-4f7f-8731-59e764339597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:95:ad:8b:2d:7d:68:28:ef:6c:b9:df:35:d3:
                    d7:e1:a2:99:e5:c1:07:60:1f:40:24:58:a1:22:15:
                    45:67:bb:3f:60:c6:e1:e8:3b:76:8d:a9:f7:6e:41:
                    a4:c1:88:c0:ea:65:82:a4:de:15:63:ef:9d:74:32:
                    02:c0:3a:88:b1:8f:b7:bc:08:57:37:33:f5:9e:6a:
                    f0:09:07:6d:36:b0:c4:96:bd:a5:b8:bd:e0:dc:93:
                    ac:20:c8:cd:b5:a2:c8:ab:17:60:a2:40:18:98:34:
                    ad:c6:00:96:58:45:ae:33:31:5d:d3:f3:f2:eb:e4:
                    8d:08:78:70:92:6d:27:0e:ec:0c:c1:9a:63:f8:65:
                    31:2b:64:0e:13:51:f0:58:a3:fd:a8:c1:dd:b6:50:
                    6a:3f:1f:9f:dc:83:ff:3e:de:18:31:cc:05:d7:25:
                    d5:75:2b:9f:26:22:47:97:9d:36:f4:b8:72:13:b7:
                    bd:e7:c4:96:d4:44:0c:c7:40:12:66:ad:67:df:4d:
                    71:f2:29:67:a3:b7:59:9a:ad:ab:b6:a4:bd:92:c7:
                    8f:39:a7:6d:59:f2:d4:90:b6:68:ba:2c:1a:31:92:
                    71:77:39:1c:e2:c8:a4:b1:5c:1f:b9:92:68:f6:e9:
                    ad:81:e2:a5:f4:bf:fb:1f:f6:22:9a:56:f3:a7:3f:
                    e4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F7:26:F3:66:54:04:A5:B5:BE:A9:84:A4:EF:4A:AB:14:A4:3A:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/a693eb7b-830c-3c07-8f86-2ac58f211b2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561/f838c026-61f9-443d-b867-26f60a99d561.crl

            X509v3 Authority Key Identifier:
                keyid:23:47:1B:D2:AE:7E:16:EB:A1:A9:45:E8:0E:82:11:88:74:9A:B2:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f838c026-61f9-443d-b867-26f60a99d561.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9c1::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:8f:49:0c:3c:c2:02:04:b9:0b:7e:54:41:9b:10:30:9d:22:
         db:3f:21:f1:84:83:d5:5d:04:a8:f8:c8:48:0c:4c:86:b9:0a:
         8b:3e:a0:09:66:3e:ba:98:a7:79:77:e8:81:eb:c2:62:bf:b4:
         33:78:bf:10:21:e1:f8:42:df:97:93:3c:66:dd:5c:c5:66:89:
         19:b0:c2:49:81:56:34:d9:d0:58:18:fc:f7:93:9d:af:1f:44:
         d8:a2:86:9c:b7:53:c5:65:77:ff:a7:69:bc:d4:a9:52:53:ed:
         86:8c:5f:dc:a1:bf:f2:27:18:61:ab:b9:1e:21:1a:bf:59:f1:
         16:21:d6:53:60:c1:80:fa:a4:39:48:15:50:75:bc:85:7d:09:
         b9:3b:70:38:e7:36:44:09:d7:45:9b:ab:53:b6:06:67:c7:11:
         47:df:a2:52:26:17:f0:48:ad:d0:65:2e:d5:8c:95:fa:4e:d0:
         d7:98:51:a5:3a:a1:8a:b2:ea:d6:58:51:18:30:e8:c1:c6:f7:
         70:9c:89:86:72:c9:21:4e:53:70:12:10:ca:72:77:ed:b8:01:
         bd:8b:58:8b:17:df:d4:b2:8f:2a:2d:a0:39:14:66:21:af:52:
         56:2e:8f:6c:39:d9:84:1c:ed:b0:7d:d3:1c:c2:f3:b6:24:8a:
         06:67:be:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:08:54 2025 by rpki-client