Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/7062e891-7628-32f0-a092-d03a625fdc50.roa
File:                     7062e891-7628-32f0-a092-d03a625fdc50.roa (raw, json)
Hash identifier:          Sf+6DVGRE/mkFt66b2kEXCdJL2yXmopY31i7tZb4mBU=
Subject key identifier:   FC:25:65:9D:5B:9F:DD:CB:08:07:52:05:D0:EE:66:E6:0B:D5:23:9D
Certificate issuer:       /CN=a0bcc13a-4107-4c4f-aab3-e4057364f637
Certificate serial:       010D0C9F4328584AC876594F8EC755A697CAB340
Authority key identifier: E7:7A:5D:45:EE:96:33:A2:31:74:54:91:4F:D0:FD:C3:4B:D1:6A:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/7062e891-7628-32f0-a092-d03a625fdc50.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     46392
IP address blocks:        2606:a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/a0bcc13a-4107-4c4f-aab3-e4057364f637.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/a0bcc13a-4107-4c4f-aab3-e4057364f637.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:59:4f:8e:c7:55:a6:97:ca:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0bcc13a-4107-4c4f-aab3-e4057364f637
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=20c3022f-8624-41ef-bfb8-df3e1f33b69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:8b:09:ed:65:85:82:e1:4f:4c:ce:c8:16:
                    20:14:c6:83:2e:69:b5:5e:76:34:24:43:80:ad:e7:
                    01:30:35:33:2c:19:a4:30:d8:c8:ed:bd:ec:6b:3c:
                    24:ea:41:02:88:a1:cb:fe:df:56:2e:4b:9a:7e:19:
                    26:21:70:e5:4d:53:29:85:68:91:12:3d:56:b6:8d:
                    58:99:89:bf:eb:db:09:db:4c:37:6f:b7:b5:45:27:
                    ad:3e:ba:fe:a7:05:bc:d2:cf:c6:16:74:26:35:58:
                    74:c1:c9:a1:cf:95:6e:7a:ef:b7:10:d0:fe:ab:09:
                    3b:4f:88:07:71:b0:ee:d0:6b:7a:59:be:32:17:48:
                    b1:91:9d:f6:e8:32:a3:a9:df:47:25:fb:ac:d7:9c:
                    b9:6f:62:a7:9a:b2:51:b2:a0:8d:95:41:5d:8b:19:
                    0b:2d:f7:a3:f2:f4:da:16:0a:8b:ab:b3:bc:0a:01:
                    5f:4f:17:71:56:92:28:c1:9b:22:3a:6d:11:b9:4f:
                    4f:08:8f:d0:fe:27:b8:1b:47:6b:67:27:82:b5:02:
                    de:c5:2b:6c:2c:a2:63:71:9f:23:6e:2d:df:9e:59:
                    42:38:64:c2:06:86:c7:6a:4a:d8:c6:0c:76:33:3f:
                    db:d1:1f:a4:93:c5:c4:32:cf:37:78:b0:c1:a7:86:
                    8b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:25:65:9D:5B:9F:DD:CB:08:07:52:05:D0:EE:66:E6:0B:D5:23:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/7062e891-7628-32f0-a092-d03a625fdc50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637/a0bcc13a-4107-4c4f-aab3-e4057364f637.crl

            X509v3 Authority Key Identifier:
                keyid:E7:7A:5D:45:EE:96:33:A2:31:74:54:91:4F:D0:FD:C3:4B:D1:6A:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a0bcc13a-4107-4c4f-aab3-e4057364f637.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:ba:b8:ba:68:0f:e0:be:bd:ad:79:e1:ff:1b:4c:26:37:1a:
         fc:c4:07:f5:af:4d:57:a0:6a:cd:28:58:6d:26:54:ae:cb:98:
         6c:f0:ca:74:3b:54:6b:98:bc:92:cb:77:b0:f2:3d:af:bd:1c:
         c4:89:88:c2:76:53:70:4f:12:0a:b6:bc:10:5f:09:1d:f4:1b:
         5e:e4:88:32:fe:12:7c:f2:ee:7d:b5:55:58:77:1e:4a:46:da:
         fb:e1:f8:d2:42:c1:62:2e:d0:6f:c6:ce:3a:fd:0c:76:b4:68:
         d1:62:94:ad:1a:4f:fa:d7:59:d6:0c:a8:b8:ea:a6:58:32:90:
         67:25:5e:9f:3e:53:85:db:98:6c:29:2a:51:94:d1:32:fd:38:
         2d:ab:3f:c4:e7:db:18:09:e4:38:64:4c:15:71:65:ea:ea:80:
         82:ee:6d:2e:0f:b3:81:36:bd:15:b4:48:33:be:52:fd:61:b5:
         d3:66:bc:50:f6:5a:2b:ef:9e:d4:7e:ac:49:65:49:e4:26:e3:
         c5:3b:eb:a2:43:ea:8b:b5:f7:01:d0:35:99:fa:9c:ea:a1:d3:
         d2:37:57:6e:a1:d5:4e:f3:a6:b2:92:06:35:55:f2:a4:32:67:
         e5:57:28:ed:7d:b6:b6:1a:0e:3f:cd:71:08:19:15:16:54:fb:
         db:45:3a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:24:14 2025 by rpki-client