Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/fcc7ed8f-f218-3c00-8f05-fade2efa435a.roa
File:                     fcc7ed8f-f218-3c00-8f05-fade2efa435a.roa (raw, json)
Hash identifier:          cf5M8vKFmdBTU2a9vRsyQc7KXsMBGdsotMHIk/5p5RU=
Subject key identifier:   79:91:CC:D8:A7:0A:EF:C4:9A:37:15:2E:10:2F:FE:A5:61:AE:E9:29
Certificate issuer:       /CN=caf392a1-07e9-49f4-9a03-df5005333708
Certificate serial:       010D0C9F4328584AC8C3263E61C621B9B38C2A80
Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/fcc7ed8f-f218-3c00-8f05-fade2efa435a.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     46962
IP address blocks:        2606:2ac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:c3:26:3e:61:c6:21:b9:b3:8c:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=7b8a5b24-a4ee-4de1-aa03-df0792bd7d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7b:9e:ea:26:7e:ef:02:0b:a1:97:2f:1d:e2:
                    fe:66:18:70:c3:f9:11:4d:06:28:7a:78:39:2d:b2:
                    f8:e9:9e:eb:ce:4f:54:f4:85:5d:fd:00:7c:b8:cd:
                    aa:b4:94:ba:a4:a6:cc:4f:b8:ea:98:e6:6a:25:96:
                    c2:23:ef:30:92:9a:32:18:df:7e:b1:89:e6:d8:f7:
                    39:5e:af:ed:c4:03:08:4b:02:4c:11:80:9b:ed:de:
                    c4:50:32:f7:0f:3c:2e:df:d0:b8:1f:d1:e4:48:e5:
                    d0:47:9c:c9:5a:94:a1:53:35:67:d3:12:99:e8:e7:
                    78:26:74:1b:70:5b:f5:0f:a7:93:c3:1a:89:45:d4:
                    36:89:d4:af:46:8d:8e:d9:8b:4c:9b:67:d3:f1:02:
                    85:77:8a:af:63:b2:b7:27:f0:ae:12:17:b1:8a:39:
                    76:09:08:36:d7:6b:67:b6:cb:5e:d5:3b:50:66:e9:
                    7c:ae:db:9c:a0:45:8d:b3:d1:20:5f:53:54:93:89:
                    a4:1a:44:9d:fd:20:0f:d8:e6:82:61:b7:9c:1c:17:
                    60:1f:13:da:a9:08:7d:73:0a:19:0e:82:6a:b7:a0:
                    f1:8d:02:ce:26:90:67:76:79:42:2d:08:97:64:88:
                    f6:6e:25:68:9a:31:65:db:24:04:2e:a2:6d:29:9f:
                    cb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:91:CC:D8:A7:0A:EF:C4:9A:37:15:2E:10:2F:FE:A5:61:AE:E9:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/fcc7ed8f-f218-3c00-8f05-fade2efa435a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl

            X509v3 Authority Key Identifier:
                keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:2c:63:71:82:f8:3d:91:ce:63:ab:e3:d9:82:d6:fc:3c:3f:
         94:28:3b:a4:51:68:a1:a4:ac:4e:a2:db:c8:6c:6d:56:5d:72:
         7e:0d:d1:43:88:1f:4d:81:17:ac:6e:9a:24:c1:c8:b9:3d:a9:
         26:5c:e9:ea:56:63:04:da:9f:90:37:d3:ea:d5:bf:83:4d:94:
         5f:8a:61:10:02:69:07:45:d2:46:5f:c2:30:f8:dd:0c:f2:09:
         13:18:43:47:af:8b:18:3c:dd:f9:02:48:d9:58:58:e2:a9:45:
         53:d8:12:50:8b:45:07:0c:53:4c:dc:6e:ef:e0:b6:c1:b5:05:
         31:7c:55:5c:f7:c6:63:6f:8c:4d:39:b8:52:df:87:bc:93:3c:
         06:33:c1:26:41:dd:2b:c5:e9:2e:c7:51:d2:47:b6:55:1b:09:
         aa:02:46:86:c4:2c:05:96:70:ed:ab:0b:2f:71:c6:78:82:c0:
         34:11:59:a8:e9:e2:3b:aa:e7:c9:cf:f0:b4:9e:bc:9e:c6:ff:
         5d:8d:6a:94:97:73:aa:dc:99:4c:95:e7:61:a2:23:34:35:ed:
         e6:b0:74:f7:28:57:90:16:a2:80:68:1d:0f:d1:ba:5f:34:ce:
         ab:bb:17:a8:25:8b:a3:a8:8c:9e:db:09:a6:ee:88:60:6c:94:
         56:2e:65:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:12:02 2025 by rpki-client