Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa
File:                     cffa80ce-dddf-3206-be5e-b60edcafd97d.roa (raw, json)
Hash identifier:          Vy4kSahJwM8riPr2aG+Kn7BpszHGMvq83h+4NUjb7co=
Subject key identifier:   78:84:7D:FF:27:11:23:C4:34:17:EF:4A:64:20:E2:8F:4D:5F:92:D3
Certificate issuer:       /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial:       010D0C9F4328584AA42B88E8E770258C12EE64A8
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     210645
IP address blocks:        2602:2c9:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:88:e8:e7:70:25:8c:12:ee:64:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=09acf6b0-0377-4c5a-86a8-cf4b1ea205ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7e:0d:14:21:9a:06:5f:d3:ef:5c:42:ca:c0:
                    06:55:50:ba:ee:30:ae:57:a2:e1:f0:25:c4:ff:33:
                    0e:48:6b:64:e4:1d:4b:97:f2:58:6a:62:e2:2a:69:
                    b1:da:e4:10:b7:c9:1b:d0:70:97:4b:15:67:c4:e9:
                    3e:32:a8:8c:bd:34:13:0b:c5:93:3c:61:d8:5e:50:
                    bd:8b:01:57:93:2a:a0:b0:0b:9a:db:d3:14:cd:78:
                    7c:38:a0:79:51:7d:cb:f1:77:c5:1d:91:f4:5f:6a:
                    2f:08:b7:cc:fd:ff:1e:fb:8e:49:40:20:37:1e:0a:
                    37:00:10:48:bb:65:be:50:4c:42:b4:3f:c7:d0:fa:
                    03:70:64:ce:d0:79:6b:73:6f:39:0a:4f:c0:6d:70:
                    20:1e:f3:b1:77:98:02:5d:ae:db:07:0c:19:a6:ab:
                    da:dd:16:75:25:fb:5c:b3:44:e6:fa:6c:6f:39:2f:
                    ed:6c:9c:6b:40:cb:86:3b:36:b9:34:ef:71:c9:25:
                    3d:d8:19:d7:a9:17:c9:d9:4e:b3:8a:3a:56:74:d8:
                    f1:a3:af:3d:07:bf:17:de:02:53:82:65:ca:be:ab:
                    29:ec:74:73:30:b1:cf:de:70:3f:a1:28:64:97:5f:
                    66:45:af:04:bb:b0:cb:3a:07:e7:0f:a5:f2:79:f5:
                    01:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:84:7D:FF:27:11:23:C4:34:17:EF:4A:64:20:E2:8F:4D:5F:92:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/cffa80ce-dddf-3206-be5e-b60edcafd97d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl

            X509v3 Authority Key Identifier:
                keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2c9:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d6:57:cf:4c:d5:aa:27:f6:9c:73:f6:a3:be:e9:75:8c:74:
         53:6e:0b:b8:ec:73:fa:15:52:d0:cd:9e:be:47:9d:90:d5:7a:
         13:fd:f1:58:2b:fc:7f:cf:70:b6:98:17:5b:38:02:a6:8e:36:
         3d:6e:de:f1:64:d1:bd:ea:09:7e:75:6c:52:9b:b0:2d:30:f9:
         19:8b:d5:fb:cc:10:cd:e8:7f:c3:83:1d:89:4f:13:56:33:d7:
         45:5f:71:99:cf:99:d1:16:96:57:2a:fa:62:06:62:3a:3a:53:
         25:e9:82:f8:a5:ba:4a:dd:f2:a4:83:36:e7:3f:9e:df:0f:08:
         68:cd:62:12:5a:62:ad:b3:30:6c:7d:30:2e:89:55:83:63:ae:
         9f:c1:b3:4d:5e:d0:b9:92:35:cb:5e:8d:19:f5:27:64:b7:ab:
         bc:88:28:d1:d3:ce:f5:07:0e:2a:eb:7a:1c:6b:00:de:79:e6:
         af:46:8d:ff:3c:3a:74:3d:65:6e:e6:b0:cb:fe:15:71:e3:0a:
         b5:16:5c:7f:a5:d2:ee:c0:8b:cc:2a:28:5a:9b:ad:04:aa:4c:
         9f:08:6a:d3:2f:cf:02:9e:a7:05:2b:b2:57:21:6c:1d:92:c4:
         f3:6c:69:f7:a8:a1:43:2d:d4:f1:a2:6c:0a:e1:c6:fb:9b:73:
         f3:3c:ed:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:06:54 2025 by rpki-client