Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/06cf7f0e-bd5f-31d3-8ef4-8a76bdca230c.roa
File:                     06cf7f0e-bd5f-31d3-8ef4-8a76bdca230c.roa (raw, json)
Hash identifier:          CZnjoWkuGY1Sv5LSOdrzcXiwDr4H4lI/UlcQSiMxDwA=
Subject key identifier:   E7:14:20:36:4E:10:D1:C6:D3:D6:4C:1E:2E:13:CC:05:E6:43:11:EE
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584AD23BC00CF6687E685E0DD220
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/06cf7f0e-bd5f-31d3-8ef4-8a76bdca230c.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     206216
IP address blocks:        2602:fb54:400::/40 maxlen: 40
                          2602:fb54:500::/40 maxlen: 40
                          2602:fb54:600::/40 maxlen: 40
                          2602:fb54:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:c0:0c:f6:68:7e:68:5e:0d:d2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=b772988f-919b-40e9-a954-ea531bb923a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:a8:ea:87:d3:e6:cc:a5:ad:c7:e7:75:b3:
                    e4:43:76:f3:f9:08:ea:d6:19:ee:0d:09:38:5e:55:
                    54:b0:dc:cf:68:32:fb:3e:67:c1:2c:51:4a:57:df:
                    c5:30:95:b7:29:78:e4:a5:ed:97:83:5d:7d:dd:ef:
                    a8:1b:b3:ef:91:ef:4a:ff:f0:eb:23:68:ec:57:dc:
                    45:39:c7:ec:0e:84:4f:e9:1d:78:98:0c:ad:e5:48:
                    03:0e:4a:fb:c0:44:f8:aa:d0:d8:c5:48:a4:5f:8f:
                    35:8d:bf:9a:92:c6:9b:60:7f:ee:6b:e1:e4:21:75:
                    b5:a5:3c:99:d8:84:3f:d8:ce:74:fe:21:25:8e:a0:
                    ec:09:d1:f0:78:53:70:ff:d0:54:c9:33:6f:ce:b7:
                    74:95:66:f3:44:ed:07:d5:cb:7e:e1:b1:b5:b2:f2:
                    24:f2:bc:8f:80:30:f4:f1:dc:ed:68:cc:6e:ff:af:
                    8d:4f:65:b4:87:82:94:8e:94:b1:7d:6e:43:e7:5b:
                    1e:53:3b:bb:5e:62:ee:4d:c6:c6:ff:f2:dd:82:dc:
                    5c:2e:ce:d9:65:df:67:cf:fd:82:bc:af:6a:82:31:
                    06:45:ec:5a:d3:71:f6:90:07:ab:81:36:72:37:cc:
                    70:44:b7:f8:1f:ba:42:f0:23:72:7b:69:82:a8:d4:
                    27:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:14:20:36:4E:10:D1:C6:D3:D6:4C:1E:2E:13:CC:05:E6:43:11:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/06cf7f0e-bd5f-31d3-8ef4-8a76bdca230c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c6:02:bd:d0:93:4e:39:50:87:a6:65:dc:96:97:0e:56:1b:
         a4:7a:87:ab:d8:ac:36:1f:aa:2e:e3:54:e8:e2:cf:16:4e:96:
         88:a0:44:55:fa:9b:fc:0e:ea:2f:13:23:f7:1e:42:ee:b6:6d:
         da:b4:d2:d1:76:2f:86:85:62:8a:00:86:81:6f:5a:f3:92:07:
         79:42:5b:56:e7:2d:23:0a:2c:bc:12:97:81:0c:f9:e5:96:9b:
         16:b0:c2:db:7b:20:71:f2:ef:c8:ae:09:6c:42:5f:8a:08:af:
         c4:69:b0:92:2c:45:01:97:33:00:c9:2d:5c:67:5e:0d:02:54:
         62:cc:05:fe:36:cd:08:35:20:4e:c2:79:d9:4b:04:ac:40:b3:
         f2:36:67:e3:ab:76:21:36:d1:bd:27:7b:67:9c:b6:38:81:8e:
         8b:3a:52:3c:cd:79:8e:24:da:15:45:e1:b2:fa:92:5a:23:fa:
         b0:5b:c8:ec:f2:6e:c8:cc:08:6c:95:19:84:ce:ca:00:b5:1b:
         94:f2:5d:59:92:d1:d7:9c:94:bf:4e:33:ca:27:e7:f8:bf:c1:
         6a:9c:04:f2:05:23:01:9a:ae:56:75:65:f4:6d:75:be:9f:d0:
         10:8a:81:b8:24:df:77:0a:6c:ad:42:ca:be:fb:df:3c:5f:e6:
         cb:b6:09:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:02:27 2025 by rpki-client