Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/91f8f680-3529-30da-b7ca-a545285b4d50.roa
File:                     91f8f680-3529-30da-b7ca-a545285b4d50.roa (raw, json)
Hash identifier:          2/jCVcU6okQYWk0LcjnrhNEisU3d+zGOU4naIDihdmI=
Subject key identifier:   08:A4:1A:10:68:C9:A4:EC:35:46:85:30:2F:A6:2B:EA:78:2C:AB:52
Certificate issuer:       /CN=b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5
Certificate serial:       010D0C9F4328584AAB264546C0F2DCD282879596
Authority key identifier: DB:F4:ED:9B:E8:FD:BD:34:98:5C:6A:7F:D2:D1:AB:2A:29:D8:8A:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/91f8f680-3529-30da-b7ca-a545285b4d50.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     209699
IP address blocks:        2602:f65c::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:45:46:c0:f2:dc:d2:82:87:95:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=282995dc-c5b3-4cc2-b3c7-bf87882526d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6e:b8:3b:d8:e7:8f:64:35:38:3b:86:a2:87:
                    2e:97:37:71:3a:5a:4f:03:31:35:fe:10:fc:b7:50:
                    08:71:aa:32:a6:96:e8:7a:a8:68:da:78:90:ac:70:
                    09:e2:31:d8:85:84:0a:a8:56:7f:9c:d4:f1:d8:45:
                    f8:f5:db:e4:bc:df:19:e3:57:00:8b:2f:2f:f9:c1:
                    fc:4e:11:e3:d3:14:49:d7:f1:63:51:6a:98:c6:02:
                    c5:f1:0c:23:2f:4f:94:3b:17:02:ef:a3:7c:6e:05:
                    e1:8b:d7:d1:23:41:81:ce:20:58:43:9f:b0:f9:7d:
                    93:8d:60:66:8f:67:ed:f1:8b:70:33:62:a8:7c:5b:
                    dc:ff:7a:21:5d:dd:af:2a:14:1f:6e:6e:c2:14:74:
                    cf:05:80:1a:f0:14:1f:8a:0a:28:55:1e:ca:2f:d4:
                    d4:8e:03:ac:9a:c5:0a:a8:08:4b:af:ce:17:a3:47:
                    de:6a:db:a4:83:75:25:5b:31:fa:a9:8e:42:a0:f3:
                    a4:02:c5:9b:9d:ed:88:d6:7d:a6:83:5e:f7:1f:22:
                    fd:7c:47:6c:cc:38:66:39:4d:50:38:04:c5:1d:fa:
                    a8:28:6a:68:a0:91:06:5e:73:82:2a:90:9a:14:60:
                    b1:f5:e9:ee:bf:f5:25:0d:fc:1c:66:0a:e6:b5:98:
                    82:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A4:1A:10:68:C9:A4:EC:35:46:85:30:2F:A6:2B:EA:78:2C:AB:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/91f8f680-3529-30da-b7ca-a545285b4d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl

            X509v3 Authority Key Identifier:
                keyid:DB:F4:ED:9B:E8:FD:BD:34:98:5C:6A:7F:D2:D1:AB:2A:29:D8:8A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f65c::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:22:d5:28:c2:16:43:cc:8d:d7:32:26:f9:ce:e2:35:e5:db:
         eb:a8:d6:6a:56:eb:dc:13:88:b0:29:ce:2b:64:24:be:12:40:
         5b:59:9a:39:c4:e5:f9:9a:28:40:b6:9e:ff:dd:68:90:ea:49:
         7e:2c:fe:7d:aa:14:75:f6:cc:e9:2d:e1:ba:60:57:48:6f:71:
         1d:52:0f:0c:d4:f1:c2:5a:4a:f9:36:bd:6b:ff:a9:69:aa:31:
         34:e4:30:bc:9f:5f:ff:77:84:2c:11:91:58:fd:00:7c:20:4b:
         69:5a:04:99:20:6f:db:c1:67:8b:2e:6e:90:ee:3d:b6:52:3c:
         98:2f:0c:0a:ee:ba:0e:ba:fc:e2:7a:c0:57:52:b4:d0:06:ef:
         f0:21:65:86:dc:9c:7e:2a:5d:c9:c3:cc:ab:b4:59:6c:a5:64:
         7b:43:06:1a:8e:cd:76:3e:7f:74:ca:e7:8f:e2:07:65:09:1a:
         df:3b:be:32:cf:22:15:94:4e:da:8e:cb:1f:3b:b9:6d:90:52:
         65:2f:c6:01:f2:3e:63:46:3b:d5:05:b7:43:92:a6:bf:9f:3d:
         21:86:7e:77:99:2f:da:5e:11:1d:59:cf:d0:dc:3f:20:d3:ac:
         3f:51:83:af:3a:17:b4:9e:bd:63:cb:0d:e6:54:07:47:dd:1b:
         67:06:ad:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:38:01 2025 by rpki-client