Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/9ae50a15-745b-39e6-a87f-37ab5d884099.roa
File:                     9ae50a15-745b-39e6-a87f-37ab5d884099.roa (raw, json)
Hash identifier:          3nL9AzCYkTcwzEgE7qXvCdYCRARQwAjVBAZX4GQacsc=
Subject key identifier:   61:2A:EE:F4:7E:FC:46:45:E3:8F:96:E4:70:18:27:0A:38:0E:D4:D3
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584AF52141EB1EBB0B2D21108840
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/9ae50a15-745b-39e6-a87f-37ab5d884099.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:20c5::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:41:eb:1e:bb:0b:2d:21:10:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=fb35cc06-b411-48c7-b186-9d9b12d2bd38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:9c:34:18:b6:86:8f:b9:0f:a8:79:d9:0b:
                    0a:3c:90:fb:38:75:3e:9f:ff:57:ed:28:d2:c5:f1:
                    78:97:29:5e:b2:e9:21:2c:11:c1:08:f3:ef:c3:0c:
                    08:17:d8:b7:27:55:51:d1:27:36:d4:97:6b:53:a0:
                    7d:d1:20:9e:8b:df:0a:3f:b3:50:e7:3d:0f:cb:e7:
                    32:d4:fa:e3:95:b7:9c:c6:70:ee:2a:39:c2:f4:d3:
                    4a:17:f9:81:91:a8:26:90:8c:1c:1b:82:8d:a1:c0:
                    3a:56:cb:67:d1:14:69:9d:ed:3f:b7:4b:f2:29:21:
                    af:0b:12:e3:df:60:f3:2a:69:38:94:15:8b:63:a8:
                    7b:b1:1b:a2:72:02:09:b7:51:54:92:42:fb:3b:ee:
                    c3:42:31:cb:ea:eb:49:43:7d:4e:8b:cb:ed:33:da:
                    f9:55:8e:9c:6c:a0:4b:2d:19:38:2d:fa:3b:5e:d5:
                    73:00:4c:a3:4d:77:dc:c4:80:30:14:42:46:06:30:
                    89:5c:0e:d9:42:17:14:2a:93:10:54:b8:17:a5:30:
                    56:c1:e6:a9:29:20:6d:e4:6e:8a:43:08:a2:ea:8c:
                    18:9b:9b:03:a5:34:86:37:12:1b:31:ba:79:7a:58:
                    7b:ff:84:46:2e:39:d8:17:74:4c:e0:e6:68:ad:69:
                    9f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2A:EE:F4:7E:FC:46:45:E3:8F:96:E4:70:18:27:0A:38:0E:D4:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/9ae50a15-745b-39e6-a87f-37ab5d884099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20c5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:2c:23:2f:bd:bf:4a:8f:0d:5e:c5:20:98:ba:7e:07:21:48:
         14:03:69:2e:60:29:dd:8d:d4:0e:52:ef:a7:49:d4:69:4b:a7:
         2c:33:e8:47:5c:65:5b:35:96:94:78:f8:b8:e9:dd:d9:9e:c7:
         21:24:16:dd:5a:57:cb:04:68:4c:6a:4e:0d:1f:f1:e4:1d:b3:
         02:03:3b:b2:3a:8e:a9:e6:1e:5c:38:50:31:d3:9a:54:84:15:
         c1:2b:c3:db:02:c4:1d:c2:2a:76:a3:3b:dc:77:14:80:62:91:
         16:30:2f:76:05:3a:05:8f:0b:37:d0:6c:f6:f2:f9:f4:c2:9a:
         ef:e3:64:7f:79:c6:e2:a1:7e:cc:7e:4e:c8:48:87:bb:06:00:
         31:72:2d:70:33:e7:ee:7f:f9:10:e9:cb:25:28:b5:83:84:a2:
         31:12:b2:80:cd:e6:8e:99:35:db:78:f6:78:ed:0d:83:ee:42:
         29:89:6d:70:96:b6:b1:27:b9:cb:f9:7f:e0:51:21:0e:da:81:
         49:e4:23:ea:23:e1:df:d8:d6:de:1e:de:0c:9e:2b:34:0b:f8:
         56:d0:26:bc:0c:eb:fd:90:16:6b:e9:0c:a5:02:7c:d9:76:3a:
         d2:41:b1:1c:ee:da:12:1d:41:87:69:d8:3a:74:88:85:a8:fd:
         97:29:9c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:00:19 2025 by rpki-client