Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/90e95e86-b743-3839-907e-bfb434d3496f.roa
File:                     90e95e86-b743-3839-907e-bfb434d3496f.roa (raw, json)
Hash identifier:          5Q7WNjkhJPH+YZFVkmwpJTZGUJ1RnJ6zny+zVJwVBZo=
Subject key identifier:   72:D7:6C:B7:EB:9F:72:DF:F8:78:D7:02:27:E7:AB:32:32:2D:A9:8F
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA161B75E63FA14330CE36E80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/90e95e86-b743-3839-907e-bfb434d3496f.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     0
IP address blocks:        2602:107:1500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:b7:5e:63:fa:14:33:0c:e3:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=43a0d2aa-319b-463d-8112-2d570d8dd0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:54:18:9e:f2:cf:99:65:8c:d1:9e:7f:da:
                    07:89:67:cb:c4:77:6d:f7:60:2f:1f:b7:b8:12:34:
                    3e:ef:cd:1c:6e:86:7d:2b:e3:0b:a2:bd:b6:2b:f6:
                    31:b5:8a:de:f8:56:0f:c1:be:a3:6b:7e:6f:53:d0:
                    98:c5:30:1c:f9:ac:46:9c:a6:71:21:d8:01:c9:a1:
                    de:26:26:6f:5b:a2:af:0b:d6:6c:5e:c7:42:20:11:
                    56:cf:7b:7b:bc:08:b8:9f:34:f4:5e:04:9b:07:58:
                    21:1a:66:c3:04:2a:5f:a5:e4:28:8d:a7:f0:96:b4:
                    41:af:7b:14:71:38:7e:97:a2:76:ce:49:3a:2c:fe:
                    da:94:f2:c4:2b:92:2d:0d:cb:d9:7e:b3:20:ca:67:
                    56:10:d7:71:e7:a8:a2:fa:1c:90:1e:64:0c:f9:58:
                    69:74:83:dd:7e:7f:9e:d6:d6:5d:ad:2d:57:41:4b:
                    a4:2b:d6:ba:d5:76:f8:b7:e1:38:9b:e1:00:37:6c:
                    f2:83:0c:20:ac:ba:a6:60:05:8d:1a:5a:7b:ec:5e:
                    8e:0b:7a:06:0c:a3:d6:41:40:88:34:fd:7a:e6:78:
                    8b:56:aa:51:d8:82:5a:71:1c:2d:51:a7:85:97:2b:
                    1d:8f:df:cb:35:ef:38:84:ad:37:bd:1e:c0:73:33:
                    60:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D7:6C:B7:EB:9F:72:DF:F8:78:D7:02:27:E7:AB:32:32:2D:A9:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/90e95e86-b743-3839-907e-bfb434d3496f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:1500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:d0:5b:74:a5:c6:9f:f5:d6:76:c7:3d:17:2c:f0:b6:b6:82:
         c9:5c:1a:ad:3f:72:7d:27:92:e9:6b:d7:32:bd:17:70:81:40:
         83:d8:f0:28:60:84:f3:b8:ef:7a:a2:6e:c5:72:f8:d3:8f:28:
         f4:7e:8c:e6:a2:41:71:54:61:4a:d0:29:53:b1:3f:7a:08:79:
         03:d1:23:c0:e2:8a:09:00:13:66:c5:3a:ab:d5:d3:fe:db:63:
         f7:e9:22:f6:9b:3d:fd:26:7c:b4:73:ef:ae:cc:28:dd:19:94:
         1a:f7:1d:9c:96:89:86:c6:1e:e0:3a:fa:7b:c2:b1:36:07:a5:
         ba:7f:66:78:5e:11:43:b1:6e:89:34:a1:1e:21:e4:45:af:c7:
         f8:aa:b2:3f:43:07:e3:e8:9a:be:b7:d7:22:39:f3:51:7d:1d:
         43:17:ae:76:c9:dc:64:f0:7a:53:13:4e:86:e7:24:7a:51:77:
         68:7e:b2:07:32:72:c1:6f:37:7f:b5:93:7e:86:3c:e9:1b:0f:
         16:0d:68:c3:96:ef:af:cb:1c:87:3d:81:d3:69:2a:f3:f3:3c:
         44:f7:8b:ee:1f:fd:3d:e3:9c:15:d5:be:bb:98:90:94:a3:3e:
         09:5a:b3:43:2e:7a:e9:8c:0f:3d:03:2d:60:7e:02:2b:7e:71:
         0f:02:1c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:07:34 2025 by rpki-client