Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/ac81b19a-cff7-3db9-a98e-836ffbe3ebb6.roa
File:                     ac81b19a-cff7-3db9-a98e-836ffbe3ebb6.roa (raw, json)
Hash identifier:          kgLAmQ18ANmgOoDAgVhujtLCLTgjgYkAHmrah/ua23M=
Subject key identifier:   8F:6B:EC:F2:6B:A3:4E:9B:A4:14:67:80:A9:76:7D:EC:6F:34:A6:10
Certificate issuer:       /CN=757305d9-2b1e-4783-945b-e7d6cc2e49a8
Certificate serial:       010D0C9F4328584A89A60B56D64EC2A4CE0FA780
Authority key identifier: 53:C3:B8:6A:90:10:C7:27:BD:73:12:C9:5F:1C:B1:B7:D8:AC:0D:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/ac81b19a-cff7-3db9-a98e-836ffbe3ebb6.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     400941
IP address blocks:        2602:f66b:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:0b:56:d6:4e:c2:a4:ce:0f:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757305d9-2b1e-4783-945b-e7d6cc2e49a8
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=56ef47e4-ac7d-4f34-9c96-89250d2fd8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bd:89:cc:56:13:7a:f5:2e:56:76:57:c2:99:
                    6c:a0:e5:97:9b:6b:b0:62:57:1b:cc:5e:aa:93:5c:
                    01:80:4c:4d:1c:70:13:9a:2d:d9:f1:e7:ab:dd:8e:
                    54:96:4f:9a:4c:df:41:ff:1a:2c:95:91:76:15:d4:
                    23:78:b1:76:14:9d:e5:d7:0d:ac:b4:4b:bf:72:cb:
                    db:4c:1c:3d:c8:c7:69:43:5c:fb:8d:a4:83:7a:11:
                    ae:1a:3c:1a:ed:2b:dd:8c:46:a0:90:eb:67:d1:39:
                    69:77:1c:55:23:bd:0c:cc:3e:78:c6:51:52:fb:80:
                    76:83:fe:49:f8:54:90:fe:85:fd:70:71:ba:b9:b6:
                    18:1b:5a:18:30:d3:d0:7c:1c:14:33:77:d9:29:ab:
                    e5:70:90:c4:18:aa:c4:1e:14:53:18:77:8f:d6:1b:
                    de:89:d2:71:8c:55:ff:66:c1:a0:3a:3b:92:e8:a2:
                    eb:e6:d7:e8:e9:f2:1f:e0:fe:47:7b:15:1e:ba:ea:
                    94:43:6e:13:06:76:eb:ea:0b:b5:57:8a:b3:74:5d:
                    49:24:12:ed:02:f4:76:c8:42:5f:bb:f7:54:5f:e1:
                    3d:3c:8a:e6:71:b3:58:f4:77:5f:4c:3a:83:df:42:
                    2e:e1:89:10:bb:cf:24:3d:cc:25:32:57:c0:6d:c0:
                    51:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6B:EC:F2:6B:A3:4E:9B:A4:14:67:80:A9:76:7D:EC:6F:34:A6:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/ac81b19a-cff7-3db9-a98e-836ffbe3ebb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.crl

            X509v3 Authority Key Identifier:
                keyid:53:C3:B8:6A:90:10:C7:27:BD:73:12:C9:5F:1C:B1:B7:D8:AC:0D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f66b:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:9e:be:07:1a:02:ef:cb:0e:0b:66:c4:f9:7e:5c:d4:f4:3a:
         06:6f:a8:c1:d4:c3:48:8c:aa:03:d9:6d:07:7b:15:7e:65:c5:
         e1:b3:a1:f7:e1:25:fe:89:13:85:1f:dd:50:8c:92:32:2d:d2:
         ed:6a:a8:be:0a:25:a3:45:a6:7e:49:d4:aa:30:44:2b:64:c8:
         27:3a:cd:74:54:fd:0a:06:f3:93:8a:2c:99:6f:8c:70:37:c5:
         7f:86:66:17:b1:d9:2d:7c:b5:72:30:93:1a:4f:12:b6:b3:4a:
         b1:f8:60:7e:c3:32:9a:46:38:b7:5e:83:c7:17:24:f1:c2:47:
         26:19:66:aa:f4:bc:2b:6e:1c:e1:32:3d:6e:a9:e6:40:23:f2:
         0a:b6:64:92:4e:c7:28:b0:a7:bf:9f:39:09:31:45:15:45:6a:
         31:3e:d1:35:36:7d:6f:cb:5a:29:d8:a0:84:5f:13:e2:3f:25:
         85:fa:bd:86:3e:16:91:ba:58:64:0d:32:b1:ed:4a:56:d0:9c:
         6a:88:64:60:42:86:ec:66:f9:41:76:9e:d8:2b:90:eb:36:d5:
         02:61:57:fb:14:3c:dd:a5:fb:bc:b0:dd:a4:92:a4:85:a2:02:
         e6:07:9e:f8:f1:67:cb:23:bf:1e:34:cb:5f:df:6d:2c:73:dd:
         73:20:ce:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:49:55 2025 by rpki-client