Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/723d6e75-4a09-342d-834a-399bd506da62.roa
File:                     723d6e75-4a09-342d-834a-399bd506da62.roa (raw, json)
Hash identifier:          aPwl2rDa3JTrYHpMEIvxkG1UUms3CEPFwec2w5Am7iI=
Subject key identifier:   12:F4:78:D4:6F:CD:B7:FC:FB:C6:74:94:B1:AB:B3:A0:65:D6:FD:B6
Certificate issuer:       /CN=a4f6bcaf-c068-4737-bce4-15a489dc54f8
Certificate serial:       010D0C9F4328584ADA9BC6BE2DE1A41E6C5EA000
Authority key identifier: F1:0C:5A:A4:B7:A3:6E:C7:94:72:C7:DE:23:19:28:8B:B1:93:B3:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/723d6e75-4a09-342d-834a-399bd506da62.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     53654
IP address blocks:        2602:f98d::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:c6:be:2d:e1:a4:1e:6c:5e:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f6bcaf-c068-4737-bce4-15a489dc54f8
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=8f2de1cf-0074-4c92-81e9-87473f1473dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ca:51:7a:22:6b:50:86:10:cf:13:02:a4:35:
                    7f:d1:bb:14:68:aa:c6:8a:dc:ff:d5:3b:28:4a:cf:
                    1f:43:c6:84:00:94:0b:26:6c:8d:b3:b1:3c:43:9a:
                    04:2f:a1:1b:06:68:cf:a6:dd:e4:cc:da:13:b2:82:
                    00:3c:ed:5a:4c:f6:8e:37:03:84:f2:41:54:e7:cd:
                    27:77:23:f3:f7:42:5d:39:35:83:d2:df:69:de:e4:
                    18:71:85:ee:c6:c9:10:cb:70:72:0e:98:0c:f8:1c:
                    a7:84:0d:a6:90:1e:7e:19:8d:ff:32:b8:d0:63:6b:
                    9d:55:6b:d4:6d:9e:f2:74:bf:5a:ab:61:d4:11:e4:
                    ea:df:eb:d7:0f:8e:f1:0b:d5:e4:fc:bb:00:1d:86:
                    4c:fb:f7:e4:7a:b9:58:69:45:56:68:91:aa:1b:ba:
                    5a:7b:e8:a8:82:e9:fa:6b:6c:3c:e0:41:be:0a:af:
                    49:62:e0:f1:9a:a4:87:f2:71:29:13:7d:31:10:c4:
                    bb:c9:45:eb:82:bf:f2:59:9a:ed:85:a2:ca:68:f3:
                    ea:10:d2:0d:bc:b3:8f:a9:76:5c:72:d3:fc:a6:24:
                    66:1d:6c:c3:1e:0e:11:be:8d:b5:4a:59:64:44:36:
                    85:c4:cf:95:d0:e9:48:25:ba:24:00:5e:e8:e7:e0:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F4:78:D4:6F:CD:B7:FC:FB:C6:74:94:B1:AB:B3:A0:65:D6:FD:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/723d6e75-4a09-342d-834a-399bd506da62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.crl

            X509v3 Authority Key Identifier:
                keyid:F1:0C:5A:A4:B7:A3:6E:C7:94:72:C7:DE:23:19:28:8B:B1:93:B3:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f98d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:34:33:1e:a9:80:14:eb:77:1b:0a:b2:61:92:4a:a5:80:7f:
         2d:29:1b:b6:ef:b6:e6:27:8f:90:c3:96:fd:ca:f0:ea:94:77:
         3c:b5:a0:8a:ca:02:10:7e:63:b1:74:6b:e9:aa:dc:6a:92:75:
         9f:65:42:8f:7a:ed:fd:24:cb:87:e8:4a:4c:ea:02:fb:32:83:
         56:e3:42:a8:c3:b5:23:64:58:e4:bc:9f:7b:86:28:c4:db:c9:
         0e:2f:da:e4:21:44:24:bd:82:4b:79:cb:e2:01:f7:73:ae:b6:
         ca:30:1c:99:2c:89:bb:03:7b:dc:3f:60:a4:4f:ab:71:e6:2b:
         86:d0:85:d9:dc:85:d7:3d:be:9a:8c:cc:1e:cc:2a:84:e5:9c:
         6b:2a:e2:e6:ef:9c:92:3d:55:f6:67:59:6f:1a:89:b7:1f:7a:
         65:5b:88:f0:3c:0d:b0:f0:b2:bd:e5:77:a6:05:b3:20:e3:7f:
         0d:ef:97:66:60:16:15:13:9c:31:31:3a:93:a4:0b:f7:d9:f0:
         7e:38:92:88:db:e3:3b:a5:60:f9:7f:2a:25:e6:06:b7:ce:4d:
         bc:5c:a8:92:fa:a0:d0:b9:06:21:d0:6a:12:88:f5:78:f7:1c:
         1a:bb:15:9b:cf:92:26:79:24:a9:3e:aa:d4:47:fd:9a:d8:6f:
         8c:d0:11:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 08:21:25 2025 by rpki-client