Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/65bb119c-68c4-3b86-a5b3-a712e6b21492.roa
File:                     65bb119c-68c4-3b86-a5b3-a712e6b21492.roa (raw, json)
Hash identifier:          oVqpGdrZF2/DJGa+p7hvv4eQb3uGUyFefAmzJzEItWg=
Subject key identifier:   29:24:A1:4A:49:08:E5:5D:8E:C4:2D:60:06:98:30:AF:E1:85:46:E1
Certificate issuer:       /CN=756004e4-ddca-45b3-bf76-89761c8369fd
Certificate serial:       010D0C9F4328584AC8767950E2FB5446C6800CC0
Authority key identifier: 89:38:9B:71:10:63:B2:F4:5C:3B:6B:FE:3F:D7:09:9B:D3:3E:AF:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/65bb119c-68c4-3b86-a5b3-a712e6b21492.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     401052
IP address blocks:        2602:fa0b::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/756004e4-ddca-45b3-bf76-89761c8369fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/756004e4-ddca-45b3-bf76-89761c8369fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:79:50:e2:fb:54:46:c6:80:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756004e4-ddca-45b3-bf76-89761c8369fd
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=da60d294-2667-441d-9f14-1aa8ebe3637f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ed:03:23:4e:c5:ed:e2:1f:cf:c2:26:14:a9:
                    cd:99:c5:0f:9c:9c:66:22:3c:a3:42:46:5b:e3:9c:
                    b1:a5:7b:d3:30:4c:f4:c8:9e:91:9c:f8:d4:17:79:
                    23:24:d2:4e:23:27:5d:c3:a7:62:d3:9e:74:c9:1e:
                    ae:e6:65:3e:b5:29:fd:77:6f:96:a6:32:c8:45:fa:
                    06:f8:93:6c:97:e9:16:ea:28:b6:e8:07:27:3f:f4:
                    95:05:70:13:d4:76:93:c4:c0:b2:76:1b:7d:9e:56:
                    d0:c3:91:fa:fe:9c:72:62:f6:90:f2:50:1e:91:67:
                    db:54:4c:72:51:12:3c:15:d4:82:e4:72:7a:02:05:
                    56:c2:3c:db:39:5c:42:72:90:16:99:49:f1:0c:92:
                    21:25:0c:66:47:7c:4e:48:90:ab:1f:cd:27:48:b2:
                    db:be:be:d5:3e:b3:7c:11:45:8b:97:1c:4b:6a:dd:
                    b8:76:55:51:ec:65:d5:cd:9c:07:f8:0b:f4:89:06:
                    40:f6:a7:d4:2e:38:fd:78:32:a4:9a:3b:dd:9c:e0:
                    6f:86:10:6d:6a:e2:70:c6:bc:15:f5:4b:a2:d2:9e:
                    53:e1:e2:ac:c2:ac:35:5f:6c:7c:4d:16:b1:dc:04:
                    93:fc:7a:9e:dd:6a:c3:83:f0:2c:f6:52:06:c3:55:
                    14:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:24:A1:4A:49:08:E5:5D:8E:C4:2D:60:06:98:30:AF:E1:85:46:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/65bb119c-68c4-3b86-a5b3-a712e6b21492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/756004e4-ddca-45b3-bf76-89761c8369fd.crl

            X509v3 Authority Key Identifier:
                keyid:89:38:9B:71:10:63:B2:F4:5C:3B:6B:FE:3F:D7:09:9B:D3:3E:AF:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa0b::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:62:ef:e9:f9:86:3d:02:d7:33:99:e6:68:2b:58:9d:c8:4c:
         7f:17:c1:a1:f8:4d:0d:d4:7e:71:9d:e3:89:b3:41:10:eb:0e:
         77:cb:34:d7:24:76:f2:b7:9d:e6:38:8f:b8:0b:b2:c7:3f:f5:
         be:88:3f:14:4f:69:c8:a9:c0:ca:8c:f2:00:48:c6:df:f2:43:
         c8:2d:e0:75:e5:26:15:55:55:6a:0f:2d:ad:3a:38:31:01:3c:
         51:81:9b:94:47:53:b8:ac:6d:fa:95:5d:b9:5f:51:38:02:bf:
         7b:02:bb:eb:e8:93:08:dd:5e:e6:74:ff:71:06:73:9f:51:22:
         63:7d:af:7d:a4:e9:52:bd:10:54:b7:db:f6:e8:15:98:c8:2b:
         22:3a:e8:5f:19:6a:74:1e:17:5f:1d:7d:7b:5a:12:cf:a6:f7:
         6d:17:4a:a3:bd:e1:be:42:0c:10:08:59:a6:22:eb:6c:cd:84:
         3c:56:04:74:7b:8c:d9:14:f2:9b:1d:8c:d7:77:77:e0:0d:79:
         90:9f:d0:23:e1:3f:d5:2a:f0:20:00:a5:2c:ca:89:80:32:cd:
         2a:a8:9e:5a:62:22:51:0e:11:18:e9:d6:87:6f:07:92:22:e7:
         7b:06:79:55:a1:3a:05:34:8f:cb:3d:71:ac:c4:11:09:27:36:
         db:8a:49:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:30 2025 by rpki-client