Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a0869a5c-d3f8-3e2c-b506-9eb7ec6616d8.roa
File:                     a0869a5c-d3f8-3e2c-b506-9eb7ec6616d8.roa (raw, json)
Hash identifier:          yJWSlbMqNXxD7phY9W3f6B/t+Fi2h9YDHDSBKYXc5aI=
Subject key identifier:   65:7D:C4:56:CD:63:28:A7:D4:C1:50:D9:5D:3B:A5:BE:FB:23:4A:FD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AAB2666E16720AD56065DCF00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a0869a5c-d3f8-3e2c-b506-9eb7ec6616d8.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     0
IP address blocks:        2602:107:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:66:e1:67:20:ad:56:06:5d:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=d2da221c-e566-474f-9509-c98f1fd0929a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8c:bf:a6:1a:24:f9:f2:16:f0:20:63:a1:e1:
                    3e:6b:a9:9c:3f:c8:d5:70:9f:3a:33:91:65:d9:d2:
                    32:6a:49:a8:b8:18:90:d3:55:84:f9:42:8e:7a:29:
                    c8:71:52:2e:cf:6c:a4:ae:70:a6:c1:59:7c:fd:6e:
                    aa:41:66:f3:3b:cc:72:7e:12:c9:68:b0:88:4c:16:
                    8e:77:35:e3:c1:d2:af:4f:ac:68:c1:54:13:70:12:
                    33:f4:78:56:1b:80:47:f4:d1:f7:15:64:8b:e1:df:
                    d2:ac:8d:f1:0c:25:26:e5:9d:d1:39:ba:5f:ab:51:
                    04:da:79:8a:cf:d5:a9:95:2f:16:5a:5b:1e:d0:70:
                    40:9d:36:9b:a3:47:02:45:80:5d:2b:9e:ef:a4:9e:
                    15:bd:aa:eb:cd:40:cb:d6:b7:68:b1:cd:c6:a0:0b:
                    2c:dc:8f:da:cf:90:4e:3e:b8:5a:d9:f4:36:9d:30:
                    f6:34:49:34:4a:9c:ea:fa:0e:8a:2b:41:35:a9:47:
                    88:50:53:c7:99:54:db:5b:f7:47:35:9e:96:65:06:
                    95:0a:f7:48:62:0f:39:4b:6b:59:67:81:5e:fb:42:
                    41:01:52:ef:03:2e:a0:ed:74:54:43:81:19:41:6c:
                    31:14:8e:26:90:19:97:a0:cd:e7:61:fb:49:9e:4b:
                    9d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7D:C4:56:CD:63:28:A7:D4:C1:50:D9:5D:3B:A5:BE:FB:23:4A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a0869a5c-d3f8-3e2c-b506-9eb7ec6616d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:62:47:8c:28:7a:41:35:d4:7e:1e:c5:3d:2f:07:c8:0c:f2:
         06:dd:1e:9e:56:46:81:cb:0d:54:14:82:1c:15:d0:0b:9e:47:
         09:6d:42:d0:f4:fd:bc:f1:c8:b2:24:3c:b3:4b:77:d8:a4:8e:
         3d:7a:83:d4:7d:1f:86:5f:e1:df:9b:1b:ba:24:03:dc:54:2f:
         22:3b:bc:12:a9:b6:87:5f:a5:be:2e:3e:a0:7d:af:32:69:bb:
         4c:f1:f0:e3:9e:a2:bb:2a:21:77:cf:1a:89:af:22:f2:5d:3a:
         0d:42:b6:d6:88:7c:71:a5:1d:7f:23:bd:85:69:c8:6d:41:2e:
         81:a7:d2:7a:32:af:92:0a:53:2b:d8:d9:55:9d:09:b8:be:6d:
         c1:ad:81:be:c3:5c:7f:f9:9f:5b:f2:9c:3f:47:b9:55:67:7d:
         d0:d0:89:94:b3:5b:a9:44:ab:cb:a2:61:5f:71:1b:67:ef:d8:
         60:92:2d:8d:81:41:6c:da:df:d4:d5:92:f2:40:a9:be:87:d4:
         83:6a:6e:ce:3d:8a:64:83:3f:24:47:cd:d9:9e:15:64:bb:4c:
         86:1f:3b:d7:e7:82:3c:3d:6e:77:b2:8b:3c:b1:7c:ca:60:1b:
         cf:1a:ee:21:2c:f0:72:2a:db:49:10:b3:38:c1:7f:69:a8:e4:
         73:e2:e8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:44 2025 by rpki-client