Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/c8350e69-c682-3045-a668-12659de11f07.roa
File:                     c8350e69-c682-3045-a668-12659de11f07.roa (raw, json)
Hash identifier:          4srNbWok0EDAXw5lj6VeLdirkYzm1dSV8LcfVUd2PmY=
Subject key identifier:   77:EA:00:25:82:4D:6D:C4:0C:F6:B4:DA:D6:E4:DC:BC:EA:81:19:A9
Certificate issuer:       /CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
Certificate serial:       010D0C9F4328584AAB2664FA9463884E221C03C0
Authority key identifier: 2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/c8350e69-c682-3045-a668-12659de11f07.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     400861
IP address blocks:        2602:2da::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:64:fa:94:63:88:4e:22:1c:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=8c4fd838-fd84-47af-9cb6-c5429650f66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:09:a0:47:5e:c1:ae:fd:69:78:3c:59:b5:
                    ba:b7:3a:4b:3a:03:e3:b0:d2:bd:87:84:ab:ea:27:
                    bd:4c:0c:fc:26:93:13:86:46:f7:f2:b6:e5:f3:9e:
                    10:f8:cf:2e:b1:2d:74:ba:ee:79:c2:15:fc:04:b3:
                    a6:9d:e7:cf:ad:2e:09:67:fa:25:55:25:a2:3f:95:
                    03:0c:a9:a3:06:78:05:6f:5c:7d:e6:43:37:75:45:
                    26:b2:e1:68:59:4b:0a:b4:a3:20:fe:c0:77:8b:26:
                    c6:66:aa:d7:65:1c:62:e7:54:02:da:48:b6:62:41:
                    8c:3e:49:12:10:33:c3:91:4f:5a:e8:cb:2b:24:d8:
                    d7:13:1e:fc:00:42:54:32:be:d9:4b:ca:04:aa:49:
                    00:17:96:51:7e:16:b5:83:f7:84:8d:cc:14:72:cb:
                    d1:be:25:f1:41:80:99:91:4d:9c:14:85:9f:33:bd:
                    96:3a:47:c0:59:63:56:29:f8:19:24:10:7d:ed:1c:
                    39:60:d3:c5:1c:ff:72:0a:b5:fa:35:82:c0:0a:3b:
                    25:8c:d3:b6:e8:4d:53:bc:bc:08:3f:54:3e:14:24:
                    7b:53:f9:20:d2:0d:0d:f1:f6:c2:22:44:0c:52:8e:
                    fa:42:d4:79:dc:ab:5b:63:31:65:c5:ca:45:90:7c:
                    84:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EA:00:25:82:4D:6D:C4:0C:F6:B4:DA:D6:E4:DC:BC:EA:81:19:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/c8350e69-c682-3045-a668-12659de11f07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2da::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a6:20:39:c4:08:57:b9:c3:f5:a3:89:b8:6c:f4:fc:14:6c:
         47:2f:28:4b:29:44:6b:40:20:5e:9b:c0:73:75:e1:33:50:21:
         08:ae:7b:0e:c2:36:6c:f3:82:61:90:d4:b3:c3:45:2b:8b:bf:
         01:80:92:fe:35:f6:6d:13:6f:88:dc:52:47:75:31:53:89:f0:
         c8:5c:51:81:d3:e1:30:39:86:4e:51:94:0e:5b:dc:7e:97:fa:
         7e:c4:c7:49:21:e5:ed:68:a3:1c:db:7b:dd:43:ec:23:e4:75:
         b5:a9:de:69:2f:a1:1e:5f:af:bd:b0:07:a3:28:8e:6a:ac:d6:
         af:5e:1a:3c:ac:e2:1f:de:85:51:d4:84:e4:57:d7:cf:cc:a1:
         89:31:3b:ec:ff:75:47:8b:8c:4e:57:fd:c3:cd:ae:ca:cc:ba:
         1d:22:af:99:67:4e:fe:94:7c:f6:da:3e:da:87:16:de:8f:45:
         64:e8:58:0a:f5:71:5e:83:4b:db:70:c0:0a:2b:2a:a3:93:de:
         12:c4:a9:2c:6c:e5:01:f1:ca:f5:d7:54:74:c7:c3:bc:c4:66:
         81:55:c7:fd:81:f8:ab:3c:0c:04:69:cc:de:34:b8:e9:7c:68:
         ad:b1:e9:08:0c:49:f7:75:93:bb:ad:8a:9c:9e:84:64:e1:a5:
         fd:a3:48:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:29:46 2025 by rpki-client