Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/7b4794e5-53ea-3eb6-be8d-c89b93f70d4e.roa
File:                     7b4794e5-53ea-3eb6-be8d-c89b93f70d4e.roa (raw, json)
Hash identifier:          kkT/Kvrllsus8dvPvoj+b2spj7HaeDa7+TITcuoJMz8=
Subject key identifier:   80:11:68:2E:5B:42:E0:6F:78:A8:F9:6C:CC:90:20:15:F2:49:98:77
Certificate issuer:       /CN=69dba5e3-26fb-440c-884d-525d04a32b0f
Certificate serial:       010D0C9F4328584A7C05E05C493B61BA21489100
Authority key identifier: D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/7b4794e5-53ea-3eb6-be8d-c89b93f70d4e.roa
Signing time:             Fri 11 Jul 2025 15:52:50 +0000
ROA not before:           Fri 11 Jul 2025 15:52:50 +0000
ROA not after:            Thu 09 Oct 2025 15:52:50 +0000
asID:                     17034
IP address blocks:        2602:f5e8::/37 maxlen: 37
                          2602:f5e8:800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7c:05:e0:5c:49:3b:61:ba:21:48:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69dba5e3-26fb-440c-884d-525d04a32b0f
        Validity
            Not Before: Jul 11 15:52:50 2025 GMT
            Not After : Oct  9 15:52:50 2025 GMT
        Subject: CN=469b31b6-35f0-4874-b3f0-138afa078c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2b:c6:7a:8c:cc:c6:4c:fb:21:5a:b0:7d:7a:
                    a2:e5:5c:63:13:b6:d2:38:5b:8d:7a:70:f3:7f:09:
                    ac:d3:49:56:cc:e7:4a:ab:e0:ed:af:06:be:a4:57:
                    ff:62:84:a9:85:f7:bc:35:59:18:b2:4e:56:42:4c:
                    07:c7:8d:f1:0c:45:42:a3:1f:4d:2d:29:bc:a0:e8:
                    2e:36:9c:68:74:01:86:0c:9c:c3:42:bd:97:53:e3:
                    87:82:91:a3:9a:01:3c:b9:d4:d5:e6:db:58:11:4c:
                    50:7c:8e:37:bb:65:5d:ae:67:f7:bf:aa:3f:75:dc:
                    41:fb:d0:f4:83:35:e0:57:5a:07:4c:8c:7f:c5:82:
                    46:ba:c5:20:64:65:ce:0e:84:5f:de:04:d5:31:52:
                    53:75:09:1e:ad:7e:6c:a0:0e:3d:da:68:68:f6:1c:
                    77:33:49:62:4b:79:21:3c:ac:87:cc:73:6b:41:4e:
                    ba:85:0a:61:35:60:3e:3c:d1:e9:e2:70:9a:53:f5:
                    a2:17:a3:74:fd:db:24:9a:cc:44:d6:fd:6d:e6:92:
                    0c:33:a3:d5:d4:11:5e:c8:2f:b5:60:66:93:22:e9:
                    2a:58:b7:2d:67:9f:14:ed:57:02:57:33:d6:ee:f1:
                    22:05:bd:d0:e0:05:f5:2a:1b:07:01:f3:7e:25:79:
                    fb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:11:68:2E:5B:42:E0:6F:78:A8:F9:6C:CC:90:20:15:F2:49:98:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/7b4794e5-53ea-3eb6-be8d-c89b93f70d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f/69dba5e3-26fb-440c-884d-525d04a32b0f.crl

            X509v3 Authority Key Identifier:
                keyid:D4:40:7B:6F:A7:16:5A:4F:03:E1:4E:7C:59:09:F3:46:E5:0B:8E:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/69dba5e3-26fb-440c-884d-525d04a32b0f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5e8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ba:06:26:7a:8f:1f:b6:0b:27:3f:ec:4e:fd:17:ee:05:4b:
         a8:45:4f:94:1f:8d:df:22:d0:f3:ae:5e:85:f1:96:a1:89:3a:
         a3:bb:9c:a5:2a:cf:b4:af:fe:d4:aa:5b:8b:24:29:cd:98:f9:
         e6:60:96:e1:b7:54:90:6d:60:85:c2:a7:42:87:1a:0c:2d:59:
         fc:81:48:6d:d5:d3:bc:da:4e:b8:6e:ce:53:5d:1f:64:c8:4d:
         de:9f:9a:b3:e3:c4:48:d5:86:c9:12:ea:ba:c4:98:9d:bd:f6:
         62:e0:ea:86:63:fb:9a:42:31:0f:53:12:5d:7c:35:99:c1:f6:
         f7:14:3d:29:b3:c5:cc:96:27:6d:24:1a:18:d3:f6:9a:42:f9:
         5b:63:9e:98:aa:51:7d:6f:65:8d:03:93:21:54:5d:f0:6d:1a:
         df:89:2a:64:1c:a8:f2:5e:2b:25:29:62:ee:4a:79:90:ef:05:
         aa:35:e5:65:c5:9f:f1:6d:15:45:14:d6:cf:5f:23:df:64:19:
         12:15:47:1e:99:62:ae:52:b7:69:67:e3:14:11:9d:f7:b6:20:
         ee:90:fe:82:65:37:9e:5d:ea:7b:12:51:9c:2f:79:17:b5:dc:
         91:9c:72:fc:a7:18:50:20:8e:9b:0a:28:9a:8f:3d:2b:4f:37:
         8e:2b:78:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:58:14 2025 by rpki-client