Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/8ca5b939-f26d-3af6-a54c-135879a692a9.roa
File:                     8ca5b939-f26d-3af6-a54c-135879a692a9.roa (raw, json)
Hash identifier:          OofVHoe5fXXFiRceDF5lIC3zMWGnE/RB3B1tX+Q990Q=
Subject key identifier:   EA:17:1E:4F:91:AC:AA:ED:EB:BB:D0:B2:06:4B:26:69:B6:F9:05:55
Certificate issuer:       /CN=69036fae-75b3-45ce-a305-23f9913eccea
Certificate serial:       010D0C9F4328584AA42B7A1E58102E9B00A58F00
Authority key identifier: CB:D6:6E:5B:1D:2E:A6:E2:65:A3:7D:C4:71:44:3F:D7:05:48:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/8ca5b939-f26d-3af6-a54c-135879a692a9.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     2635
IP address blocks:        2602:fdd7::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/69036fae-75b3-45ce-a305-23f9913eccea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/69036fae-75b3-45ce-a305-23f9913eccea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:7a:1e:58:10:2e:9b:00:a5:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69036fae-75b3-45ce-a305-23f9913eccea
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=e62084e3-6282-41f4-8103-e148221f2ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4f:cb:7b:4f:3c:84:8c:19:82:b5:6e:20:2c:
                    70:77:0d:53:9b:22:0e:eb:db:be:2e:ea:2e:fd:07:
                    d9:4c:9b:0a:93:b7:b3:e0:92:6d:16:c0:3b:2d:3a:
                    df:38:fc:a1:b3:79:dd:ba:01:49:48:bf:21:98:08:
                    50:20:ef:d8:46:91:e0:c7:c2:ad:1c:b9:b4:e2:48:
                    31:8e:ca:56:97:57:98:82:1f:df:0b:8b:a4:3e:c4:
                    a6:4a:1c:94:c5:e7:e3:e1:c3:2a:8b:c7:30:52:18:
                    2b:75:15:25:5a:aa:92:e5:c4:3b:5f:9f:78:d2:57:
                    c2:f1:7f:4a:38:fe:be:e2:c2:df:09:72:85:8d:ad:
                    86:43:4d:03:e5:7d:5b:f3:26:04:93:01:ef:0b:d8:
                    ee:2e:02:3b:ed:de:05:0d:cd:3c:c9:c9:4d:d7:6b:
                    48:e5:e7:eb:47:54:3f:5c:15:cc:e3:a0:7d:48:7d:
                    ce:02:f3:e7:b8:8e:af:2d:6a:73:48:ab:6a:dd:32:
                    b0:bb:c6:27:e7:ba:00:de:9e:89:a5:eb:9e:24:e0:
                    f6:49:37:fd:68:2c:e0:c9:22:a1:53:26:67:8f:38:
                    30:d8:71:27:3f:8a:c9:28:f5:aa:89:55:75:21:a0:
                    ab:7b:f7:85:a9:9e:7b:fa:1c:fb:89:a8:58:d1:56:
                    a0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:17:1E:4F:91:AC:AA:ED:EB:BB:D0:B2:06:4B:26:69:B6:F9:05:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/8ca5b939-f26d-3af6-a54c-135879a692a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/69036fae-75b3-45ce-a305-23f9913eccea.crl

            X509v3 Authority Key Identifier:
                keyid:CB:D6:6E:5B:1D:2E:A6:E2:65:A3:7D:C4:71:44:3F:D7:05:48:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdd7::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:e4:fe:63:20:9d:a1:53:3a:76:bc:15:7f:1e:95:53:1c:96:
         a4:4c:8f:45:f4:85:c2:84:52:c9:73:24:3f:92:40:3f:8a:42:
         7c:c1:38:f9:be:24:5a:02:e6:5c:6b:84:9b:3c:37:df:62:88:
         da:73:a4:2a:4e:b9:23:b1:cf:aa:73:dd:95:b2:40:61:1b:f8:
         a3:82:03:5f:c6:3b:23:44:bc:55:3f:78:96:08:ec:e9:da:a6:
         16:fe:38:6c:72:76:eb:35:14:65:0f:f9:77:94:8d:e5:b9:8f:
         d5:d1:10:52:78:b7:85:04:d2:88:0b:0b:fb:b9:af:c7:4f:ea:
         b7:b7:c4:46:38:0c:ee:fe:67:38:31:a1:d7:da:2a:ea:91:b7:
         70:32:41:6b:df:59:30:03:de:da:d6:ad:16:9f:e0:ef:c7:6e:
         06:fc:42:e8:f7:fc:49:a0:eb:19:64:4e:e5:2c:ab:ba:05:93:
         ab:87:83:d1:0f:81:22:d7:20:6d:71:60:1d:7e:d3:51:b4:bb:
         70:52:0d:c6:aa:32:42:83:59:ce:1f:4a:11:29:20:96:00:cc:
         fb:66:58:8e:0e:e7:fc:da:6e:00:a9:61:67:02:70:6d:e4:fe:
         d1:3d:57:f1:cb:50:10:70:8e:9f:93:d3:d0:ac:64:40:ff:ef:
         bc:d7:b5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:23:28 2025 by rpki-client