Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa
File:                     5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa (raw, json)
Hash identifier:          qMULkYRS1ytP9/rTrz6xuler5CXsCzZYNz9TNOPIcso=
Subject key identifier:   94:29:28:6E:60:C9:14:23:3B:DA:BA:74:8D:4A:C7:E7:4A:24:4B:48
Certificate issuer:       /CN=fdb3fee9-0b00-4a8d-b320-e293b627bb04
Certificate serial:       010D0C9F4328584A90A0C2381CB715DE7F439B00
Authority key identifier: CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     13737
IP address blocks:        2602:f9ad::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c2:38:1c:b7:15:de:7f:43:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdb3fee9-0b00-4a8d-b320-e293b627bb04
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=93521107-a25f-4da3-9048-1b387459c8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:3a:65:fa:4b:08:2d:d5:28:e2:a9:ba:0e:
                    e9:7b:33:39:3d:e7:2c:b9:38:a2:d0:1c:15:29:2c:
                    d4:77:e8:7b:06:e8:16:2a:4c:ba:6b:9e:2a:0c:d4:
                    ed:de:8f:e1:0c:17:91:db:63:15:0d:da:cf:e7:8d:
                    1a:7b:3d:86:59:9d:8d:8a:c0:3c:50:07:71:b8:c2:
                    72:c3:41:40:16:7d:7e:44:b3:c0:3f:f0:64:43:e9:
                    18:5f:8b:5f:6e:06:f5:7f:d9:90:e1:4f:7f:d6:d4:
                    29:2a:c0:f3:b4:51:35:28:a9:5e:5d:cd:ac:55:a3:
                    26:c7:c8:0b:2e:aa:96:0f:c2:3d:09:ce:d8:b2:de:
                    6a:db:2a:35:10:5f:d7:12:c1:ea:90:5c:94:d9:a6:
                    28:4f:9d:a5:23:bb:cc:63:32:d9:22:5f:64:6a:57:
                    30:33:06:06:d9:56:f5:2b:2f:93:e0:7d:a2:42:45:
                    cc:96:38:12:48:7b:6f:f0:d0:41:14:fb:81:f0:61:
                    9a:4b:5e:91:43:97:02:2b:38:b3:48:b2:be:0c:6b:
                    64:61:03:73:81:b5:7d:6a:45:19:a2:58:93:01:af:
                    16:2a:a5:18:4e:07:d5:6f:d1:d6:fb:75:28:24:a3:
                    f6:04:97:48:6f:69:3b:b0:ee:c8:af:60:0a:89:e1:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:29:28:6E:60:C9:14:23:3B:DA:BA:74:8D:4A:C7:E7:4A:24:4B:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/5c7ba998-12dc-3785-a77e-5b12a5d09da6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04/fdb3fee9-0b00-4a8d-b320-e293b627bb04.crl

            X509v3 Authority Key Identifier:
                keyid:CC:35:8E:E1:5C:06:77:2C:6D:89:CE:C4:0A:D4:AA:E4:28:D9:21:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fdb3fee9-0b00-4a8d-b320-e293b627bb04.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ad::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:50:e1:92:1a:af:a1:30:e2:fe:fd:08:7a:3e:ca:63:c6:09:
         7c:cb:ad:5d:58:ea:79:90:cf:73:81:7c:95:54:f2:02:3c:16:
         31:27:45:87:c1:22:ea:f9:6b:c3:f6:48:0d:7c:3f:f7:48:d5:
         ff:a6:94:ea:0a:5b:dd:5d:2f:92:38:c7:60:ce:b1:05:3d:19:
         d4:9a:de:ca:51:dd:6c:4d:ab:ac:ed:e0:49:7c:90:d4:ae:64:
         da:92:9a:1d:89:c6:cf:7f:ff:06:c4:ef:7b:1d:a3:8e:5e:3d:
         2b:ef:0a:bf:7b:13:97:ae:de:52:05:d5:23:65:3b:ac:39:4c:
         18:c8:6e:dc:c5:20:cd:bb:7b:6f:d8:05:b7:33:2c:46:74:d9:
         64:06:c8:30:58:ed:ef:29:d5:00:d3:33:ee:64:91:20:69:83:
         6d:1e:fc:76:97:c3:65:7e:4c:f3:a2:2c:f4:d5:2e:14:d8:45:
         21:5f:e5:c4:88:5b:09:e5:27:bf:ad:c7:9d:60:7f:8c:4f:ad:
         5a:f7:27:77:f7:67:c4:44:74:a4:83:90:5c:b3:78:7d:e2:9c:
         79:df:fc:3d:3a:ae:42:dd:93:6c:2b:22:59:69:cf:32:5f:4d:
         50:dc:23:dc:13:87:3c:9e:d8:d4:f0:5e:20:dd:17:1a:26:ec:
         a1:05:92:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:52:48 2025 by rpki-client