Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/b5cc58f5-f50b-3df7-ad6b-55b61540bd31.roa
File:                     b5cc58f5-f50b-3df7-ad6b-55b61540bd31.roa (raw, json)
Hash identifier:          1k/3V/5PoKWtcOiElYGt03sPnZp9mChnrJNjGPIC7NM=
Subject key identifier:   88:E5:D9:ED:25:10:34:00:6D:26:EE:E4:7D:49:F1:EB:60:19:82:EF
Certificate issuer:       /CN=7746dca1-2236-41ce-ab1a-952e06f4769c
Certificate serial:       010D0C9F4328584AB650EA2027E98EA8F185D780
Authority key identifier: 0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/b5cc58f5-f50b-3df7-ad6b-55b61540bd31.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     27228
IP address blocks:        2602:fda4::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:ea:20:27:e9:8e:a8:f1:85:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7746dca1-2236-41ce-ab1a-952e06f4769c
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=db56e4bc-d7a2-4878-994c-39dc862052b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a4:60:75:dd:ed:91:05:d8:26:e7:d9:71:0d:
                    53:86:3c:a7:c5:40:1e:04:4b:a2:cc:31:4f:95:c0:
                    11:5d:1f:91:5b:53:e0:fc:9b:39:2f:15:a3:51:07:
                    c7:18:ca:2b:c7:94:8b:8a:99:7f:46:34:5d:66:b3:
                    fc:a6:47:20:74:82:7b:0c:b1:0b:35:72:6b:46:be:
                    88:44:01:36:22:4b:b6:49:b6:a6:d0:02:a9:6b:03:
                    55:a7:ee:28:0d:f7:c1:ee:a8:f5:e8:49:ff:02:c2:
                    c4:b8:94:66:e2:fe:ec:06:af:6a:d6:c5:f8:3f:7b:
                    60:2e:9f:c5:d7:62:32:a5:10:80:72:cf:05:af:f1:
                    0a:54:c5:63:0a:10:19:2b:30:1b:9c:06:2c:96:43:
                    ce:b0:9f:66:f6:cc:f7:f2:7f:9c:47:ce:99:d9:4a:
                    93:60:cc:5f:f3:98:80:c0:6c:94:f3:b6:c1:ee:78:
                    a5:0e:1d:51:e9:66:fa:94:72:a8:4d:8e:f5:eb:87:
                    6f:7f:49:b1:b0:64:e8:b9:c2:9f:6c:b4:b5:32:9d:
                    73:84:b3:20:20:04:21:7a:15:1f:db:39:a5:9c:f6:
                    46:42:6f:09:f4:6e:44:94:f6:89:b5:cf:ce:05:63:
                    43:a9:e9:bd:d2:99:79:41:86:06:5b:d6:8e:e1:2b:
                    ab:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E5:D9:ED:25:10:34:00:6D:26:EE:E4:7D:49:F1:EB:60:19:82:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/b5cc58f5-f50b-3df7-ad6b-55b61540bd31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl

            X509v3 Authority Key Identifier:
                keyid:0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fda4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:d3:b1:9a:80:0c:10:d3:b2:90:1f:d8:42:8b:d9:91:22:48:
         66:24:bf:a6:73:9e:65:31:a0:13:20:00:a7:fd:cc:e2:a4:63:
         54:f3:3b:c6:c0:d1:45:3d:e0:75:b5:5d:0d:d7:0b:45:a1:9f:
         b1:71:5b:5c:b0:65:30:a2:fb:32:93:c9:00:d5:5c:0e:62:57:
         bb:7c:02:3a:c5:f1:a9:04:c9:a4:80:83:0a:66:1d:92:50:91:
         da:13:e8:1e:0e:12:a7:1e:7a:43:3d:a6:e7:19:4d:11:5a:ef:
         9b:0e:e8:02:74:75:1d:c7:d4:e1:2a:47:d0:69:74:9c:d6:4f:
         7b:3b:42:24:2b:9d:8c:96:06:6f:e3:05:25:ca:95:fc:e2:45:
         4c:48:de:9c:64:b3:8a:66:3b:84:ac:ed:52:78:b2:57:8b:25:
         67:42:ac:fc:23:94:77:88:e6:b3:09:cb:56:31:03:b5:de:e9:
         48:6f:a6:5a:b8:20:21:8d:92:c3:1b:75:fe:b5:4a:0b:69:ba:
         b3:2f:ac:7e:44:7a:04:82:44:f4:d6:dd:2a:6d:29:b4:8f:b2:
         be:4d:9b:64:e1:50:8b:15:9a:7a:04:0b:09:a1:a2:9e:a7:4f:
         4a:1c:35:a3:a9:b2:64:ed:48:3f:39:ff:b3:6b:16:83:f2:d6:
         44:7a:9d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:24:12 2025 by rpki-client