Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/a0679dfd-78ee-3728-b6d4-7b3d95d28292.roa
File:                     a0679dfd-78ee-3728-b6d4-7b3d95d28292.roa (raw, json)
Hash identifier:          Sje4ipgz8UiHU7Fip51xpID7v9U2puQrx77wFa9xovk=
Subject key identifier:   07:2E:1E:D9:92:60:70:82:90:14:2D:36:82:19:8D:79:6E:DD:3B:A7
Certificate issuer:       /CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a
Certificate serial:       010D0C9F4328584A7E7B5E2DBD8E0A2D6ECDFA40
Authority key identifier: 8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/a0679dfd-78ee-3728-b6d4-7b3d95d28292.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     948
IP address blocks:        2602:2cc::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:5e:2d:bd:8e:0a:2d:6e:cd:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=5d76229c-1347-4c39-aeda-8fe199ff5696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:61:ea:52:73:ef:6c:77:aa:05:88:65:38:0d:
                    1f:fe:4e:d2:f7:7f:5c:e6:8a:72:51:73:c4:98:b9:
                    be:24:6b:04:09:ee:06:d4:8f:e7:2d:1b:68:b1:a8:
                    7b:b1:a8:6f:8b:3c:98:06:7d:96:61:7f:f6:1a:1d:
                    59:15:63:a3:ce:56:3c:5b:d4:fd:3d:6c:95:23:6a:
                    44:72:3d:6e:61:05:0a:5d:c4:91:9b:dd:a2:a4:bc:
                    41:84:2c:88:b1:e9:83:a7:6f:98:5b:39:05:08:2e:
                    41:ab:f8:da:5a:70:f4:23:1e:c2:9d:fb:8b:78:61:
                    43:99:55:69:07:ad:32:c2:bf:ae:10:83:3e:6d:1a:
                    bb:7f:d2:d8:9e:9d:36:a6:3c:4d:ec:17:1d:33:b5:
                    ee:38:87:81:98:20:bd:9b:b6:d6:2d:a4:e9:14:bd:
                    88:27:f8:d6:7c:5c:95:af:60:05:9c:a5:da:80:11:
                    38:88:f1:0e:97:32:f3:85:46:84:53:5e:c9:8e:a6:
                    c5:fc:f8:cb:52:a8:6a:f1:2e:2d:ae:e7:cf:29:d1:
                    c6:7e:71:90:bc:ee:a7:bf:96:cb:82:d5:79:09:d3:
                    16:2a:18:8a:0c:6a:a4:0e:6a:4a:7b:e1:d0:7a:f3:
                    eb:0d:3b:d3:c8:59:ec:61:2b:42:ee:fe:ac:b9:9c:
                    b2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2E:1E:D9:92:60:70:82:90:14:2D:36:82:19:8D:79:6E:DD:3B:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/a0679dfd-78ee-3728-b6d4-7b3d95d28292.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2cc::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:34:78:52:95:00:57:2d:88:85:e8:7f:79:dd:e4:f0:92:7c:
         40:9e:4c:73:83:d5:17:2a:17:b0:d4:af:23:75:af:2d:14:fe:
         a5:3f:8e:e1:ce:b3:56:d2:e6:77:a8:5e:96:80:ac:ad:c2:3d:
         9b:34:72:d3:8e:18:45:7c:ce:a8:f1:3f:8b:a1:19:84:e5:4c:
         1e:a6:4a:5a:8c:c9:2c:6e:21:c7:03:96:cb:32:63:de:4c:12:
         b3:d2:61:c4:52:de:42:68:e5:17:60:90:6e:a8:da:0b:bd:b5:
         92:3c:3a:cf:f6:28:a5:3d:1d:b7:ce:34:d7:50:ef:84:a3:d5:
         11:fb:a6:d3:db:29:45:6b:da:56:b1:2f:77:82:a2:d9:68:e2:
         04:6e:af:ce:11:6b:10:7b:e9:9e:d3:e1:ef:db:2c:cc:22:cf:
         6f:d6:d7:63:5a:71:e0:7b:f1:8a:f9:e6:09:9c:13:72:14:e3:
         2d:f8:1c:e2:0b:0b:02:04:c6:af:2b:8a:d9:0a:44:bf:93:31:
         19:73:7a:a4:40:30:37:41:83:90:f3:fd:c5:f1:a6:6f:90:3c:
         a0:49:8a:9a:d3:e5:74:e9:f8:4b:f3:23:54:ef:6c:fc:85:4d:
         e4:d1:ac:7c:3f:8d:05:a3:83:c2:53:99:ce:ec:33:29:85:dc:
         a9:e1:ae:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:56:35 2025 by rpki-client