Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa
File:                     7c21021d-b3c6-3128-89cf-35ee6d572d09.roa (raw, json)
Hash identifier:          OkTDl6sNlpJeY1lV8wYki3NaIoS/0ipZ+8KOHGehPw8=
Subject key identifier:   9E:52:B5:A5:EE:E4:8E:BB:58:72:D3:B0:DB:64:A2:33:64:FE:3A:78
Certificate issuer:       /CN=0ae79a05-4455-41de-a4a5-312c5d617c94
Certificate serial:       010D0C9F4328584AC8765924C04D28F043807700
Authority key identifier: 7D:08:94:80:BC:CF:85:CB:69:22:7A:85:48:0B:DC:1E:E9:C9:D9:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     400918
IP address blocks:        2602:f999::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:59:24:c0:4d:28:f0:43:80:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ae79a05-4455-41de-a4a5-312c5d617c94
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=3e7c0c45-3934-4fb6-8e5a-a7d56c4f0617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:fa:3e:f7:3f:99:96:6a:cc:04:57:89:19:
                    e3:5e:f9:39:4d:8f:f5:79:91:60:84:af:ac:14:10:
                    4c:dd:70:73:b5:e2:7f:a8:c8:2e:aa:5a:04:bd:73:
                    31:f6:e4:61:74:6e:ec:3b:60:04:b3:e0:bd:fd:f9:
                    9b:aa:7e:26:27:1e:fb:a2:d6:d1:cb:da:47:64:97:
                    bc:45:e2:97:70:41:4b:bd:da:23:62:7f:45:8c:f1:
                    b5:d9:fc:74:1f:74:e9:75:19:22:66:d9:3d:ca:d3:
                    3c:2f:c8:72:25:e9:eb:bb:8b:c8:c8:0f:bd:31:0e:
                    4a:ea:93:0d:17:3a:62:f4:64:86:64:48:8b:cf:f9:
                    46:ad:a6:e4:b1:41:09:24:ec:82:d9:2c:d8:36:57:
                    c9:8f:78:a7:23:d3:80:89:0d:fd:ef:ac:5f:63:b5:
                    7a:6f:b0:89:75:b9:df:f4:cb:8d:66:73:18:84:90:
                    b6:a5:c5:f4:e3:47:06:95:65:1d:d8:7b:dc:7e:37:
                    64:ec:10:cc:31:2c:45:e3:f0:60:f7:db:72:68:8a:
                    26:ba:6f:d8:7e:d1:06:3a:c9:0b:94:d4:54:20:39:
                    f4:30:4c:3a:f8:57:76:27:67:67:e1:9e:c1:46:f4:
                    dc:10:e2:6a:9f:e8:75:70:47:ba:6e:4c:07:8a:49:
                    9f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:52:B5:A5:EE:E4:8E:BB:58:72:D3:B0:DB:64:A2:33:64:FE:3A:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/7c21021d-b3c6-3128-89cf-35ee6d572d09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94/0ae79a05-4455-41de-a4a5-312c5d617c94.crl

            X509v3 Authority Key Identifier:
                keyid:7D:08:94:80:BC:CF:85:CB:69:22:7A:85:48:0B:DC:1E:E9:C9:D9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0ae79a05-4455-41de-a4a5-312c5d617c94.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f999::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:39:a7:61:0f:5d:ee:dd:50:9b:de:ae:96:88:97:5a:28:a2:
         37:da:eb:2d:20:42:73:5c:8e:c0:dd:9f:ae:e5:1a:c4:eb:e7:
         50:4a:2d:60:fb:f7:85:ea:f6:e9:ea:e9:68:87:5f:7a:4b:00:
         38:f1:73:5d:aa:8a:1a:a3:22:c7:32:fc:e0:f3:3c:f7:19:d6:
         79:03:bc:e5:23:e3:1b:46:6c:38:ab:ae:61:89:1b:3e:ef:11:
         b6:c8:29:a0:e1:96:7b:1c:85:5f:c1:a8:52:f2:94:07:94:80:
         65:ae:24:f2:ac:5b:4a:82:37:01:2a:8e:49:3c:bb:c9:2e:e4:
         d9:da:00:12:1d:84:9f:6b:e0:98:83:a4:b1:bb:e3:e1:66:44:
         2b:c4:aa:ea:84:5d:8b:8c:35:14:6d:84:94:9b:3f:d7:8f:9a:
         da:e5:2d:bc:20:72:f7:bd:0c:64:69:0d:33:ee:04:0f:e0:07:
         1c:f7:08:d8:9b:3d:6f:13:81:d1:4a:7c:56:3e:e5:a3:b5:7e:
         3b:12:a9:41:ec:9a:f9:b2:a7:3d:25:95:48:10:3b:84:45:d8:
         bf:b0:3d:b0:ef:7d:5f:82:d8:f8:6e:44:06:3c:82:63:3a:ad:
         ec:b7:64:0d:d7:0f:73:b0:f3:f8:53:48:6c:f9:b9:37:4f:2c:
         82:26:d4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:32:24 2025 by rpki-client