Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/d8f1b77b-f4a9-3c22-a06a-693f4295674f.roa
File:                     d8f1b77b-f4a9-3c22-a06a-693f4295674f.roa (raw, json)
Hash identifier:          UcIsW5c60pqmGgEevqrqRGDeOZRkUeStrYoNxvIwgGU=
Subject key identifier:   49:1E:68:A6:D8:23:7F:64:74:13:DA:28:4F:BF:02:29:9E:37:63:EB
Certificate issuer:       /CN=4b13bba8-5260-44f5-8f00-3cdfc8b95aae
Certificate serial:       010D0C9F4328584A761B7727AD6232C75DCEA8C0
Authority key identifier: AB:B8:ED:EE:6E:74:DB:4B:B5:44:DB:34:4B:23:7D:5F:7A:58:4E:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/d8f1b77b-f4a9-3c22-a06a-693f4295674f.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     401637
IP address blocks:        2602:f71a::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:77:27:ad:62:32:c7:5d:ce:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b13bba8-5260-44f5-8f00-3cdfc8b95aae
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=e4edb53b-7656-44b7-9dd2-f24345791ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:41:94:bb:62:c7:18:0e:49:2a:3e:79:a8:
                    ac:70:b4:dd:17:de:f8:1e:d2:31:6d:14:de:77:40:
                    5c:72:09:b1:49:ad:c8:5b:0c:6c:10:9d:72:54:3f:
                    97:ec:75:cb:38:9e:31:7b:be:78:5c:8c:ee:7b:b4:
                    64:2f:e3:37:ff:ec:b9:04:b8:84:96:00:02:0a:80:
                    67:34:01:91:4e:24:79:5c:af:93:e8:5a:58:8c:82:
                    f2:8a:2e:47:2c:a6:af:f6:3e:13:63:34:0d:b6:db:
                    89:f5:10:e0:f8:80:43:00:38:63:18:13:52:fa:0f:
                    1d:02:10:0d:7e:7c:52:cc:ba:8c:95:a0:85:1e:19:
                    19:f8:47:9b:d8:a1:76:ed:26:fb:29:8c:d6:ca:6b:
                    65:e3:30:5b:4f:98:07:90:17:f3:00:1c:5d:01:17:
                    70:1a:60:cb:b4:6e:ea:4e:80:27:c1:2e:04:07:15:
                    a4:4d:82:59:57:fa:58:ef:56:07:5e:ec:90:e2:13:
                    a7:50:36:f0:2b:13:33:14:d3:5d:05:e1:38:00:17:
                    46:8a:42:d8:d4:76:6f:15:3c:16:9b:6c:e7:70:ca:
                    eb:6b:ac:b0:9b:68:86:db:fd:ca:22:43:f4:9a:80:
                    8b:62:07:dd:2c:c3:9d:ad:72:60:9e:4a:04:8e:80:
                    53:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1E:68:A6:D8:23:7F:64:74:13:DA:28:4F:BF:02:29:9E:37:63:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/d8f1b77b-f4a9-3c22-a06a-693f4295674f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B8:ED:EE:6E:74:DB:4B:B5:44:DB:34:4B:23:7D:5F:7A:58:4E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4b13bba8-5260-44f5-8f00-3cdfc8b95aae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f71a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f6:fe:ae:38:ec:1f:ec:92:1f:f2:07:77:71:93:d7:30:be:
         1d:e7:aa:1d:85:dc:56:a8:41:c7:3f:01:e5:c0:c4:29:35:de:
         0b:2d:89:0e:5c:0f:58:8f:00:cf:b4:3e:80:42:8e:0d:da:1c:
         03:7c:ed:cf:83:2f:36:41:e5:3e:a0:16:64:a5:b5:c4:cb:ad:
         13:2b:fc:6a:80:96:0e:a0:83:1d:c4:3c:a6:ab:8d:e1:a7:71:
         46:db:19:af:e8:b4:ed:fe:77:50:7f:13:9b:70:39:c6:8b:b1:
         d8:10:1e:20:8a:9e:ca:e6:64:a5:5a:61:09:b8:a9:7f:35:0c:
         7d:55:a9:30:4c:d6:b5:42:ab:16:b6:2f:a5:d5:9e:14:91:43:
         3f:7b:43:f5:20:fe:70:21:f7:87:a0:e3:db:2d:ec:34:66:90:
         ae:3b:c3:29:60:3e:74:fe:bc:12:79:eb:9a:97:9e:68:4e:92:
         2d:12:bc:f0:c9:8d:e0:48:59:de:90:40:24:55:85:f9:97:b4:
         16:ed:5b:6b:51:88:f7:37:9c:e9:d1:8a:4e:59:d2:14:b0:b3:
         24:95:0b:06:ed:f5:18:f8:49:15:6f:de:cf:fc:fb:f4:f4:2e:
         1e:f4:83:a2:1f:83:64:3e:d8:7b:be:1d:b0:af:f3:a6:5e:9d:
         99:41:56:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:14:28 2025 by rpki-client