Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/e497d3e9-a9d1-3199-96be-8395d6cc959b.roa
File:                     e497d3e9-a9d1-3199-96be-8395d6cc959b.roa (raw, json)
Hash identifier:          PrBSRbjQtMOGubfuDNOPBTpr9n8z4rxnkYgFWjmc02Y=
Subject key identifier:   B4:EB:19:B6:E4:E7:2E:EC:B2:DC:23:76:1C:DE:F3:20:FE:6B:FA:D8
Certificate issuer:       /CN=deaf388e-6941-424e-9f96-abe06598e29c
Certificate serial:       010D0C9F4328584AB3862B4F2132CB12BCDCC960
Authority key identifier: D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/e497d3e9-a9d1-3199-96be-8395d6cc959b.roa
Signing time:             Thu 31 Jul 2025 13:00:39 +0000
ROA not before:           Thu 31 Jul 2025 13:00:39 +0000
ROA not after:            Wed 29 Oct 2025 13:00:39 +0000
asID:                     401371
IP address blocks:        2602:f652::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:86:2b:4f:21:32:cb:12:bc:dc:c9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deaf388e-6941-424e-9f96-abe06598e29c
        Validity
            Not Before: Jul 31 13:00:39 2025 GMT
            Not After : Oct 29 13:00:39 2025 GMT
        Subject: CN=bd98b1be-6b09-4ed9-8fd6-805cdf303eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6c:5d:64:f2:67:1c:c7:a8:a9:63:e8:88:ac:
                    c9:04:38:3b:74:36:84:39:58:03:8e:e2:28:50:ea:
                    fe:6e:2a:e2:55:e3:91:63:3a:d6:52:ba:9d:aa:b7:
                    db:b2:90:ed:67:31:8a:89:5c:4a:98:b8:4f:b8:40:
                    09:93:64:12:94:c4:b0:17:02:1b:58:36:00:b9:42:
                    9f:6b:fd:63:75:08:4f:53:dd:33:e3:75:dc:b0:c5:
                    38:38:2b:c6:ac:82:95:5a:af:16:f9:9e:0b:7b:7d:
                    40:ff:82:85:32:25:e5:f8:70:bc:dd:54:40:d0:bd:
                    c1:08:6f:42:b6:f5:56:25:92:cc:80:61:96:7c:5c:
                    64:d4:01:e1:3c:38:96:7c:9e:fa:d3:42:eb:42:ee:
                    30:a7:70:91:0f:58:7e:9d:a8:08:84:15:10:c2:b9:
                    3e:b1:3e:9c:0d:cd:8b:e7:da:1a:7f:dd:91:24:4e:
                    15:6e:a3:ea:4d:79:1b:3f:55:a9:7a:08:fc:7a:9f:
                    02:81:67:10:79:a7:c9:4e:ee:78:9e:61:b0:04:7c:
                    f9:1c:c4:c0:0b:75:eb:f3:e5:16:34:1d:03:c8:47:
                    20:a1:1c:24:a8:5f:c3:57:2f:92:3b:80:19:3c:f1:
                    81:1d:fb:18:5d:a9:40:9d:73:50:7e:7c:96:38:4d:
                    fb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EB:19:B6:E4:E7:2E:EC:B2:DC:23:76:1C:DE:F3:20:FE:6B:FA:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/e497d3e9-a9d1-3199-96be-8395d6cc959b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c/deaf388e-6941-424e-9f96-abe06598e29c.crl

            X509v3 Authority Key Identifier:
                keyid:D3:CC:8A:32:A7:DD:D2:F0:05:22:05:60:81:8A:99:B9:F6:12:C5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/deaf388e-6941-424e-9f96-abe06598e29c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f652::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:36:f9:d2:59:6d:b2:63:eb:05:b0:88:d6:28:1d:d4:e0:cd:
         09:cd:c2:1d:46:10:fe:b3:f7:6f:e7:bb:00:f4:8a:bc:2b:09:
         d4:7d:4b:68:ed:3d:b0:02:87:1d:0a:c2:ca:40:c5:79:ac:17:
         e6:d8:7d:c5:fa:36:92:fc:75:61:55:3f:ac:05:6d:7f:55:19:
         c3:b0:3d:52:8a:48:80:b6:12:7a:3c:85:76:52:5f:16:14:1a:
         c2:b4:21:c3:2a:a7:24:10:a6:1b:9e:c2:7f:9c:20:08:79:af:
         03:85:95:74:96:0e:fe:4e:f1:96:ef:5e:f9:7b:0f:4d:ad:99:
         d4:55:01:49:03:cb:8c:e8:ee:a9:c2:25:83:2d:98:32:77:0c:
         01:ec:34:f6:08:75:4f:2e:84:ab:01:39:60:97:92:30:d7:d4:
         45:db:56:3b:fb:22:48:09:d6:7c:3f:fd:93:7d:5f:d9:a8:2e:
         85:88:af:0d:31:61:71:56:61:38:75:5e:7b:51:98:19:6a:82:
         ac:ff:5e:ba:7e:71:36:30:f6:cf:65:a7:69:1c:45:15:2c:58:
         51:0a:87:d1:5c:b6:71:31:ab:2d:87:5c:0c:d3:8a:89:04:4f:
         9e:a9:d5:fd:6c:47:4b:48:d5:e7:39:a8:25:25:4b:ee:bd:18:
         34:f4:a4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:38:58 2025 by rpki-client