Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa
File:                     7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa (raw, json)
Hash identifier:          nWtNAUECAbphwlw1BSmEhS1Kb/LnfzazfviRgdn/Rng=
Subject key identifier:   C4:70:5A:4E:0E:7E:41:3B:C3:90:FF:E1:44:13:02:9E:2C:FC:38:05
Certificate issuer:       /CN=afa71238-3202-40f6-8fdd-d9505c5a8635
Certificate serial:       010D0C9F4328584A9BCB75BAFA68629B30E33080
Authority key identifier: 5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     401523
IP address blocks:        2620:d0:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:75:ba:fa:68:62:9b:30:e3:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa71238-3202-40f6-8fdd-d9505c5a8635
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=8fe920e2-a305-49fd-94ec-3aa5bfef057f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:30:3e:67:9e:a1:19:65:43:cd:fc:ea:36:
                    34:a9:e6:1b:31:29:50:46:72:31:33:9d:e5:ec:e9:
                    b9:94:84:d3:e6:57:e9:6e:c6:5d:93:16:9b:4e:f0:
                    c8:31:f2:d1:d3:3b:95:92:45:7d:00:07:0f:0f:cd:
                    3a:db:eb:48:2e:3a:96:1a:f7:30:42:f2:42:17:1a:
                    26:b0:73:e2:ff:d9:a7:68:05:2d:c1:61:90:a8:c6:
                    8f:46:49:4c:77:a2:d8:d6:5b:05:59:f0:1a:aa:0e:
                    46:eb:3e:0e:cd:44:15:d8:1b:f3:e1:4f:23:6b:a1:
                    56:cb:6d:20:69:36:c3:18:cb:5b:82:6d:b5:9e:24:
                    2b:9b:3e:2b:ec:03:de:38:b8:4d:6e:05:78:90:a5:
                    61:0c:6d:50:40:8f:c0:84:3a:90:52:4e:42:83:37:
                    72:7c:e5:f1:7f:bd:d2:6c:db:e5:8b:c7:0a:c2:38:
                    f2:14:d4:49:76:e5:f9:e7:a1:6f:c3:92:cf:04:98:
                    81:f4:43:86:64:27:27:3a:1b:6f:9c:10:70:ee:da:
                    25:ed:ad:54:1f:23:3b:c1:18:fc:fb:62:7e:21:8d:
                    ea:13:ec:e7:fd:95:e9:89:59:60:e4:7a:4f:9c:30:
                    0e:de:65:90:39:99:24:dd:fe:e2:f9:0a:86:ed:44:
                    6b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:70:5A:4E:0E:7E:41:3B:C3:90:FF:E1:44:13:02:9E:2C:FC:38:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/7d38fa73-ad05-39b4-8ee8-83a83b2a993a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635/afa71238-3202-40f6-8fdd-d9505c5a8635.crl

            X509v3 Authority Key Identifier:
                keyid:5B:F6:61:9D:C4:CA:54:0A:21:F2:91:5D:E2:CE:9E:F8:1E:B8:79:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afa71238-3202-40f6-8fdd-d9505c5a8635.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:d0:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:1e:ca:32:85:82:c3:8e:c0:a7:aa:9c:6c:f1:4b:ef:b0:e7:
         1f:80:00:cd:86:10:6c:09:dc:c7:49:c0:4f:55:75:37:9e:92:
         02:a7:a4:3f:93:a5:a1:71:9e:63:c0:80:5c:97:2f:fc:2b:9a:
         42:24:4e:61:96:87:d7:d0:f4:f4:1a:9d:8c:90:a9:f4:30:37:
         4f:8c:b7:cb:a9:fc:ed:ee:10:73:3b:71:38:1f:af:e1:94:3e:
         ab:dc:6f:ca:21:b6:f1:77:e0:3e:50:79:8d:bf:ad:b1:f6:e6:
         93:92:7d:b8:22:39:e0:f4:d9:58:8e:68:a2:95:a8:8b:a5:0d:
         b9:37:10:36:4e:d0:aa:2e:d6:b3:15:df:da:76:64:3f:03:63:
         7d:9f:7a:ee:8f:99:f7:fe:c0:6d:03:d8:a2:61:8d:d4:2f:d6:
         ab:c9:a1:07:a1:94:a7:5e:03:4f:2e:86:a2:4a:b5:c8:8a:e0:
         33:23:5d:7e:c4:42:17:6c:55:7c:8e:ce:69:4f:42:49:a8:8d:
         e9:b2:60:42:65:67:9d:e4:ba:05:8e:dd:e8:cd:21:23:f0:66:
         0d:be:11:97:c3:59:59:53:9b:c9:7a:73:75:47:d5:2f:78:5b:
         3f:40:3c:5e:91:ca:be:59:6c:81:21:f8:f7:37:f1:65:7b:88:
         87:2e:2b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:11:56 2025 by rpki-client