Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/33cad07c-4da0-37fe-be83-de3947cbc82f.roa
File:                     33cad07c-4da0-37fe-be83-de3947cbc82f.roa (raw, json)
Hash identifier:          VHiMN86gTp/Npp69qItsIPLJ6axNuplGCXyHA/cKaJM=
Subject key identifier:   FF:00:1E:A4:07:37:50:8F:A9:DD:C7:BD:52:CA:15:34:60:D6:6C:3C
Certificate issuer:       /CN=268f6692-999f-4dd3-86b7-32b134a18d56
Certificate serial:       010D0C9F4328584ABD4B9BD25C292A76C33FA980
Authority key identifier: 99:81:0F:AE:8E:AD:4B:BE:1C:28:C7:AB:DB:FC:FA:25:5D:EE:47:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/33cad07c-4da0-37fe-be83-de3947cbc82f.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     401459
IP address blocks:        2602:f776::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/268f6692-999f-4dd3-86b7-32b134a18d56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/268f6692-999f-4dd3-86b7-32b134a18d56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:9b:d2:5c:29:2a:76:c3:3f:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268f6692-999f-4dd3-86b7-32b134a18d56
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=36501b7e-0f5f-456b-a2b6-2c457d0ca6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:21:2e:ba:6c:4c:64:f2:67:b0:f4:78:10:
                    68:08:91:8a:74:c4:fd:09:1e:e9:6a:8f:70:2a:ed:
                    93:17:3a:b7:13:c4:f9:58:e8:dd:bb:a3:e6:fa:a7:
                    44:28:74:35:e7:1d:33:a8:4b:0b:ef:de:c3:3d:56:
                    e5:2d:ba:fa:5a:54:68:8f:1e:5c:a5:b7:1b:e1:d6:
                    ae:45:9f:08:28:eb:3e:1a:b4:36:56:ec:bf:f7:83:
                    9a:2c:4b:2f:d8:92:68:62:ab:1c:d1:4f:94:e9:01:
                    b2:52:3c:ec:94:55:5a:2a:75:76:0d:e3:db:24:d5:
                    ed:6d:5e:bb:4a:7e:f1:af:4f:62:dc:55:db:ee:36:
                    9f:74:02:10:bc:7a:37:59:7a:39:9b:ac:7b:1f:46:
                    c0:50:c3:c5:ce:a3:73:e7:d4:22:a0:23:01:d2:59:
                    49:71:99:63:08:87:4a:21:e7:0c:da:76:d2:2a:36:
                    38:e3:c0:28:d8:04:6f:40:05:0e:b5:32:5b:40:65:
                    43:79:ff:91:f0:5c:62:18:52:ac:29:a1:10:0a:3c:
                    a5:cf:d1:a2:e9:17:bf:85:29:24:17:a4:8b:8d:bb:
                    ff:fd:45:ca:65:93:3c:56:b5:08:d4:96:ee:78:52:
                    47:91:fd:6f:35:88:91:fd:95:81:87:04:bc:9f:90:
                    a9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:00:1E:A4:07:37:50:8F:A9:DD:C7:BD:52:CA:15:34:60:D6:6C:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/33cad07c-4da0-37fe-be83-de3947cbc82f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/268f6692-999f-4dd3-86b7-32b134a18d56.crl

            X509v3 Authority Key Identifier:
                keyid:99:81:0F:AE:8E:AD:4B:BE:1C:28:C7:AB:DB:FC:FA:25:5D:EE:47:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f776::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:45:ae:f5:86:0b:68:8c:ea:30:00:b6:0a:06:3a:a1:08:eb:
         0a:d1:30:b5:06:f6:5f:1e:fa:e6:5e:af:7e:31:59:ff:5f:77:
         12:64:a3:42:21:d8:13:9c:38:eb:77:cc:34:c8:9a:ed:ef:bf:
         99:ae:11:db:53:9d:f0:24:2c:92:85:f1:fb:ab:7b:40:3b:16:
         58:8b:89:81:4a:05:e7:a0:04:8c:12:82:83:8c:84:22:36:93:
         d7:f2:96:72:c1:a2:51:2f:0e:34:3b:76:94:30:86:e7:8f:88:
         5c:be:08:d7:89:fa:e6:15:a6:cc:5d:b3:67:1c:cd:2f:36:c4:
         39:03:90:02:91:4d:d1:72:7a:30:66:aa:df:2d:80:21:7d:db:
         0d:a5:80:14:a1:96:db:8e:35:d2:ff:d2:35:39:46:c3:93:92:
         25:1b:c8:25:1a:ba:37:2e:f0:59:f7:50:77:62:e6:78:43:63:
         ef:84:82:e9:0f:6e:17:79:b4:65:fb:1b:6d:2b:65:12:bc:9b:
         b8:1b:98:e9:d9:4d:9f:82:8d:d8:b7:a7:de:fe:bb:44:c1:cc:
         c8:a3:9d:d1:ba:2c:00:0d:d9:fd:09:70:3b:e9:04:db:26:e8:
         98:de:61:e0:16:49:96:a7:05:83:d1:64:2e:b7:0c:5a:10:48:
         7b:1a:29:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:12:24 2025 by rpki-client