Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/2060d590-d888-3d05-a157-277fca0b7579.roa
File:                     2060d590-d888-3d05-a157-277fca0b7579.roa (raw, json)
Hash identifier:          ufD0Jyi/FQyam5L7mDox6wkxgA0yZ7w9kq1r2k8EgWw=
Subject key identifier:   DF:98:DC:3A:C7:62:C6:BA:8A:84:FA:1A:E3:87:46:E3:80:BD:8E:1A
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F4328584ADA9BB50C5E8B8C242746BC40
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/2060d590-d888-3d05-a157-277fca0b7579.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     0
IP address blocks:        2602:fd10:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:b5:0c:5e:8b:8c:24:27:46:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=d6317a58-e468-43df-aeb0-c23e1e1f91c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d0:b3:de:6b:6c:8c:3c:43:13:e9:b0:16:ab:
                    22:42:98:56:ec:06:7a:9a:2d:4b:5b:55:b6:75:d9:
                    c6:31:5a:dc:62:45:9a:6f:ff:53:73:3c:d1:c1:13:
                    9c:ed:d0:7a:ef:7c:f5:45:3a:e2:d9:06:3d:2a:73:
                    ec:9b:ba:94:6e:1c:9c:28:46:35:d3:44:cb:e9:c7:
                    3a:89:0e:f0:96:73:2c:3a:21:f2:b3:51:03:90:4e:
                    69:17:38:7b:a9:e2:36:be:1f:84:31:8a:9f:67:03:
                    c5:24:13:54:a3:c9:18:6d:14:4d:50:db:20:94:23:
                    00:d3:71:6c:3a:e5:a8:91:f6:97:8c:53:fc:67:62:
                    84:65:53:ae:15:ca:c3:f6:e6:f2:01:2b:53:1d:96:
                    96:c7:50:fc:54:86:ed:0b:44:bf:49:19:eb:96:0f:
                    03:e1:49:5f:ea:42:6d:d2:dc:eb:a9:6d:4f:ee:ea:
                    b7:13:6a:a2:8d:33:20:b6:5c:73:9f:9c:d1:6d:45:
                    6c:44:ee:7c:85:2f:e0:de:c0:f3:fa:87:b6:cb:e2:
                    f5:35:96:66:09:cf:89:d2:61:2b:37:a2:01:2f:8f:
                    68:a9:32:e1:ae:c7:70:95:dc:77:8c:fb:bf:8f:57:
                    e5:02:af:7e:40:c9:ff:de:31:69:48:41:12:54:69:
                    93:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:98:DC:3A:C7:62:C6:BA:8A:84:FA:1A:E3:87:46:E3:80:BD:8E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/2060d590-d888-3d05-a157-277fca0b7579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:35:f1:7a:57:2e:99:45:53:8f:c2:33:c5:aa:42:70:81:38:
         c5:1f:04:62:a1:02:ca:8a:8e:4a:52:c6:31:e7:4f:fa:52:71:
         8f:2a:07:e9:bd:39:64:c6:13:04:5e:92:7b:61:c5:49:34:46:
         9b:e3:2e:de:5a:46:ff:70:29:39:f5:3e:d4:c5:58:99:a0:72:
         4c:b3:b2:e4:1f:02:47:bf:37:97:f7:fd:ca:90:da:07:52:e1:
         10:ef:7e:3b:c1:48:8d:2a:6c:47:c7:79:37:24:3a:4d:e8:dd:
         ec:ad:bc:d4:06:f2:10:ee:7e:9d:2a:fa:e0:32:78:c0:71:6e:
         13:f6:ae:f7:77:86:66:b2:e7:c4:78:55:03:fa:ac:e1:ff:f5:
         9b:42:70:55:a3:2b:f1:9d:7a:26:39:2b:58:db:90:9b:8a:92:
         d1:0c:e1:0f:de:24:bf:d7:0e:00:a0:de:97:4b:a3:d0:ab:9d:
         e2:86:d5:89:7d:df:dd:ff:ed:ef:79:6b:d3:63:28:60:a5:2f:
         ce:17:ed:e3:6a:d7:75:80:74:99:72:a6:62:f3:2a:5e:2f:38:
         dd:7e:eb:ed:79:85:0e:56:90:e9:c1:58:2c:1b:f2:b0:4d:d8:
         62:38:c4:9b:84:54:c4:35:a4:8b:13:bb:e9:d1:1c:cb:0b:65:
         f7:71:73:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:28:29 2025 by rpki-client