Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/3bca3994-29ef-3370-82e1-27cd8e63489e.roa
File:                     3bca3994-29ef-3370-82e1-27cd8e63489e.roa (raw, json)
Hash identifier:          eS4S2h1b9UF4GXq9A3OWUDH+HJFjpDzepaJUEO7vRT0=
Subject key identifier:   CB:77:51:C0:EE:D9:E8:60:53:5D:1A:2B:8D:20:C8:82:67:B5:9F:C1
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F4328584ADA9BD32C4FACAF10BC332000
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/3bca3994-29ef-3370-82e1-27cd8e63489e.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     0
IP address blocks:        2602:fd10:300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:d3:2c:4f:ac:af:10:bc:33:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=28623858-6283-4923-9762-cf5cbbbd0127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:20:f9:a2:91:12:ed:c4:a9:ed:8c:c1:f4:0c:
                    28:8c:41:75:09:87:95:8b:00:d5:4c:ef:05:66:23:
                    e0:5b:fa:30:bd:b1:37:c4:98:44:80:50:93:29:ca:
                    e7:f5:d4:f8:64:8e:22:3b:a3:93:be:50:b4:70:97:
                    4e:67:ff:e8:1f:ad:22:26:a8:95:f1:0a:26:5d:5c:
                    bf:dd:c9:ac:d5:3c:e6:b6:34:97:52:78:60:2d:01:
                    1a:9e:a9:be:ae:8c:d6:6a:71:29:3e:4a:dd:e1:25:
                    d5:8f:3f:d0:ca:94:a0:b8:87:b0:28:22:72:76:b4:
                    9f:bf:57:af:88:80:90:b2:72:2a:23:14:41:70:81:
                    3d:a9:2a:b4:80:96:c2:81:2c:ee:c5:cd:ec:83:74:
                    a0:44:d5:c8:90:28:84:61:e3:9e:00:51:2f:97:8d:
                    f1:18:f9:cf:2f:a4:3d:4d:48:9a:72:12:0d:8e:be:
                    1d:76:12:13:d7:a8:07:c3:31:88:8d:88:74:cb:82:
                    2e:3e:24:fa:77:d7:55:2b:8f:68:91:6a:30:52:71:
                    ab:2f:1f:87:24:bb:4d:5b:b2:ce:72:17:81:1f:79:
                    c9:9e:4a:fd:0c:7a:08:db:ab:ba:27:38:4a:91:24:
                    91:17:39:14:79:05:18:00:6a:71:d9:c2:7b:4f:2c:
                    a8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:77:51:C0:EE:D9:E8:60:53:5D:1A:2B:8D:20:C8:82:67:B5:9F:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/3bca3994-29ef-3370-82e1-27cd8e63489e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ad:8b:59:a3:94:de:f3:47:2e:cd:8d:20:3a:fb:67:47:30:
         21:df:0e:fe:0b:d4:1b:b4:17:40:ab:80:55:45:11:84:43:ad:
         61:21:91:9a:55:06:0e:00:94:7e:19:cf:1a:b3:19:b3:0c:a9:
         cd:d8:b4:42:4e:fc:29:6e:a4:63:34:6b:53:40:f0:3b:93:52:
         d4:59:ad:c6:51:07:91:ad:85:8e:d6:f2:7b:ea:0c:4e:db:e7:
         57:57:bd:9d:6a:52:b4:62:0b:76:86:ed:e2:dd:fe:0c:de:f3:
         86:57:fc:c3:0b:35:bd:db:b3:bb:84:7b:a9:f4:c9:b0:1f:75:
         d5:45:d9:f3:06:73:81:9d:3f:7e:77:e2:c7:52:a2:21:0b:30:
         aa:9b:72:66:7b:a4:b6:f2:6c:8b:78:7b:79:9c:79:7f:ec:7c:
         07:01:95:97:a0:a8:24:d2:0c:0f:fb:e0:a1:fe:44:a8:e8:35:
         2e:44:f4:d8:64:b2:38:12:aa:13:25:57:d3:b5:45:e5:ca:12:
         35:db:07:79:01:6e:b2:f6:3e:11:48:f9:5f:ef:2c:13:23:2d:
         19:79:4e:0a:2d:d4:93:67:da:8d:56:09:20:f9:0e:17:e9:08:
         f9:44:c9:c7:3a:d7:bc:72:87:07:99:c5:ae:d1:12:7b:7a:ef:
         69:9c:a0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:59:01 2025 by rpki-client