Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/8513bebc-89ba-3bf9-b839-9026dd2ad55c.roa
File:                     8513bebc-89ba-3bf9-b839-9026dd2ad55c.roa (raw, json)
Hash identifier:          IyBDuQzLWFZHkMYm8uxkpbNiKcXCStRGAnpORLkQ/pI=
Subject key identifier:   F6:02:1C:5C:8E:71:61:02:1C:3C:B1:22:32:95:85:45:6C:1F:75:CF
Certificate issuer:       /CN=9b51b96b-674e-4350-82f7-7b884151238a
Certificate serial:       010D0C9F4328584AB4EF06D67FDBC2F866B4B580
Authority key identifier: 93:25:DD:83:88:43:05:29:7A:B1:A8:37:23:B2:07:06:D3:17:A3:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/8513bebc-89ba-3bf9-b839-9026dd2ad55c.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     394151
IP address blocks:        2602:fdb8::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/9b51b96b-674e-4350-82f7-7b884151238a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/9b51b96b-674e-4350-82f7-7b884151238a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ef:06:d6:7f:db:c2:f8:66:b4:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b51b96b-674e-4350-82f7-7b884151238a
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=d41fed83-b393-4b89-aeec-07a80d899427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f2:40:04:94:ca:7f:47:bf:f6:25:33:4d:50:
                    5e:22:4f:dd:e5:69:94:86:87:47:fe:cf:37:ae:45:
                    39:ba:8c:b1:59:16:4e:a2:d3:75:86:f6:36:91:e0:
                    32:8a:74:e6:d0:7e:d6:11:57:b8:01:24:59:46:bf:
                    cf:5c:a7:d8:aa:bb:51:7c:58:61:25:43:8f:74:4b:
                    fe:ca:5f:92:5f:7e:d6:3f:52:f3:e3:93:4d:1f:bb:
                    c5:af:a7:8e:7b:a6:b0:44:da:26:d1:c0:43:5f:c6:
                    6d:b4:06:c1:be:c9:1f:90:81:8b:32:f9:a6:d6:bb:
                    3a:c9:3e:9a:67:85:96:a3:93:2e:da:f6:04:90:4b:
                    07:9d:db:11:02:65:07:2e:5c:f9:e4:5f:c9:7b:e4:
                    20:75:03:d9:3e:5e:42:4d:a0:11:7e:d5:12:38:4f:
                    e7:c6:4e:b0:d4:e3:e5:86:f0:66:a3:7d:f5:26:c0:
                    60:f1:54:76:c1:c6:ae:9f:50:c6:f9:b4:4a:7c:c0:
                    0c:84:65:5c:e0:a0:cf:60:61:96:2d:30:9f:68:04:
                    bb:f4:06:f7:26:34:fa:58:a1:ef:5f:d3:e4:47:d3:
                    94:6a:8b:59:87:1f:f0:30:4a:6d:a3:b0:61:c0:a0:
                    66:1b:fe:31:d0:aa:11:7d:3a:61:62:73:98:48:8c:
                    62:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:02:1C:5C:8E:71:61:02:1C:3C:B1:22:32:95:85:45:6C:1F:75:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/8513bebc-89ba-3bf9-b839-9026dd2ad55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a/9b51b96b-674e-4350-82f7-7b884151238a.crl

            X509v3 Authority Key Identifier:
                keyid:93:25:DD:83:88:43:05:29:7A:B1:A8:37:23:B2:07:06:D3:17:A3:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9b51b96b-674e-4350-82f7-7b884151238a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdb8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:eb:ed:dd:55:02:57:41:45:5c:8f:be:37:b0:6c:b6:13:8b:
         0e:36:38:74:54:40:9e:60:52:dc:5b:30:80:91:c9:61:91:f2:
         73:a6:20:6e:f4:8b:ee:fa:46:2b:d0:76:cb:93:0c:ed:d5:66:
         2c:a4:17:d7:e3:6c:3b:07:88:04:4a:4a:fd:f6:a7:d7:9c:2e:
         82:3c:93:45:47:59:89:2e:98:0d:b3:2c:8c:73:10:29:61:ac:
         1e:3d:fa:ea:49:34:44:45:a5:de:f6:e5:4e:0e:a0:da:45:23:
         67:a4:bd:24:cb:06:44:b5:8e:99:28:14:da:eb:2e:a7:ad:fd:
         f4:5c:4b:67:9a:f4:29:4a:0d:03:d1:e9:80:fa:13:68:6c:29:
         99:b7:3a:31:d6:58:52:0e:ea:8b:90:74:37:65:2a:84:02:b1:
         26:ab:db:07:70:4f:84:72:19:8a:7f:2d:c8:c5:81:7d:09:a0:
         7e:5d:7d:00:58:ec:68:56:e1:1e:db:ad:7d:1e:c7:d3:36:e6:
         73:18:fd:68:d0:67:6c:b2:b7:6d:cf:2f:e6:b9:ea:5e:bb:9b:
         66:e6:e6:fc:0d:b8:95:84:9a:b4:da:39:a6:89:49:56:75:b0:
         f5:53:5e:13:4c:49:5e:19:46:b7:ff:e2:64:f4:97:88:0c:8c:
         f9:58:8d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:22:53 2025 by rpki-client