Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8b57606b-37f5-3717-8c61-f7e9dd2e3925.roa
File:                     8b57606b-37f5-3717-8c61-f7e9dd2e3925.roa (raw, json)
Hash identifier:          6qp5ceJ6oJMvvy6iK0+BWNoDy9iQTnsk+WlfdH2VA9U=
Subject key identifier:   34:5E:F7:2C:0D:54:2E:43:67:83:A3:59:F2:45:44:6B:BE:7C:AC:15
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AAB265FAEC67E654E4FE8DA00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8b57606b-37f5-3717-8c61-f7e9dd2e3925.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     0
IP address blocks:        2602:107:2c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5f:ae:c6:7e:65:4e:4f:e8:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=b6145a17-e8f0-4649-ae80-70acff251dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:8a:23:df:09:b7:6e:da:63:24:bb:d5:d8:
                    e0:e3:1b:e9:74:3f:85:1c:61:12:57:5b:42:64:63:
                    9c:4d:15:82:64:81:77:b0:01:be:f7:50:87:7f:ca:
                    73:fc:e8:5c:47:62:f3:25:36:7d:e0:cd:70:6a:f0:
                    e9:9c:c4:cd:e2:8a:80:29:dc:ad:58:99:5b:5b:97:
                    64:ab:5e:88:d3:c2:4c:81:cf:df:bc:70:8a:ea:40:
                    fa:59:bd:7b:c0:0d:68:c0:e0:7c:6e:22:70:ab:3e:
                    60:fc:c1:2a:b3:0b:da:5f:a7:75:2a:98:7a:2a:8a:
                    12:56:18:28:32:e3:0e:be:a3:61:d2:f3:13:b7:e2:
                    1e:d9:53:ec:2a:b0:90:bc:6e:d3:a1:6c:94:b2:ef:
                    79:37:9b:58:b6:4b:b3:6e:16:bf:98:cb:9c:81:59:
                    d6:14:7e:18:47:61:a7:b0:fa:d7:2e:72:74:83:68:
                    ce:10:1f:f9:df:6e:6a:32:d4:c9:4a:1a:72:09:59:
                    05:be:b7:1a:f4:c4:5b:1e:f3:04:0d:ec:c7:62:9f:
                    81:95:ed:e0:f2:6e:cd:91:eb:b8:a1:fe:3c:94:51:
                    a6:54:c2:ee:01:21:d0:90:a6:2a:02:59:a9:87:80:
                    a8:40:b5:d7:d5:c1:aa:c4:e4:27:c7:62:ed:14:a2:
                    81:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5E:F7:2C:0D:54:2E:43:67:83:A3:59:F2:45:44:6B:BE:7C:AC:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/8b57606b-37f5-3717-8c61-f7e9dd2e3925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:2c00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:b7:d6:c8:ed:f4:6a:c6:71:45:63:ea:65:bf:c8:e7:39:2a:
         cf:57:df:5b:61:a1:b6:25:0c:1f:3e:02:37:62:8f:02:2b:f0:
         9f:28:78:a3:7f:d7:af:eb:99:a8:4d:50:81:7c:78:d7:81:4c:
         8b:30:b7:a8:65:2c:5c:22:42:0b:e4:ff:ef:c0:14:dc:de:d4:
         1f:29:6d:f7:8d:a8:bf:0f:8b:05:50:24:db:69:1c:e8:01:6c:
         1e:05:af:50:28:22:d7:63:00:7a:47:a4:d6:d4:0e:95:28:f3:
         b2:a7:8d:f7:f5:0b:a6:04:2b:4a:98:55:74:73:af:ee:64:4d:
         64:12:30:56:f6:fa:d6:6d:d0:92:a9:db:7f:6a:05:60:4e:fd:
         47:a9:04:cb:da:7e:40:29:92:2e:3a:9e:56:70:44:b9:e7:29:
         29:6c:db:39:1a:e9:f8:59:de:26:ae:47:cf:1e:b1:f5:9e:3a:
         e7:07:60:5e:12:04:fd:5e:dc:0d:87:23:9b:89:dd:f1:41:c7:
         2d:fb:65:a0:da:f0:a2:14:f4:3a:03:3b:67:a7:28:d9:ae:c5:
         12:45:1a:0f:8b:23:ce:ff:11:d8:88:72:ea:59:88:9a:a2:b0:
         b8:4b:3a:77:cd:85:fc:dd:32:e6:b2:f1:59:cb:ee:4c:3a:67:
         dd:c7:ec:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:05:59 2025 by rpki-client