Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/bb62e037-28c9-3670-9fc9-341fc40d906c.roa
File:                     bb62e037-28c9-3670-9fc9-341fc40d906c.roa (raw, json)
Hash identifier:          UbTs1tBP+qNBP5AqGQSB2dJk7Ktem802oSAS5402ukc=
Subject key identifier:   CA:F3:C5:7E:F4:1C:69:F2:C9:76:CD:1B:5A:63:2B:61:5B:24:C9:62
Certificate issuer:       /CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8
Certificate serial:       010D0C9F4328584AB91BB4725A0B435339C18680
Authority key identifier: 27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/bb62e037-28c9-3670-9fc9-341fc40d906c.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     401113
IP address blocks:        2602:f964:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b4:72:5a:0b:43:53:39:c1:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=4013c6b7-e092-4f79-b890-20cdba0c8e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:33:bc:f1:03:89:39:03:af:f8:d2:d2:f0:b8:
                    17:0e:4e:4d:47:85:50:de:a3:7e:00:2d:37:17:be:
                    c1:02:a8:c7:54:48:94:69:08:66:13:cf:7c:25:b3:
                    f3:c5:b3:7c:46:8d:41:35:1a:38:8d:7b:73:34:0c:
                    57:0c:e1:71:e9:40:a0:0f:d9:be:9b:d4:aa:a1:32:
                    d8:ed:dd:e4:6b:a4:83:d3:b7:05:e6:ae:af:76:06:
                    7f:f8:d3:15:70:b9:2d:23:22:77:f3:c4:fd:e2:b0:
                    86:e6:a1:5d:73:c6:aa:a7:db:f9:56:bb:af:5a:e3:
                    b5:cc:7c:53:35:0e:fb:67:de:a3:c1:55:55:3d:f2:
                    16:79:61:41:e1:80:b8:c3:ed:af:e6:aa:6c:48:77:
                    d0:75:92:6f:75:21:2d:a0:cc:9e:d3:78:0a:2a:0c:
                    75:ba:14:f6:55:0a:a0:f5:87:37:b8:e5:0f:45:cb:
                    9e:5c:c3:6d:ea:34:42:9b:a9:6b:4b:96:84:fd:fd:
                    af:1a:6c:cd:21:fa:ca:88:9b:bd:32:47:0a:c5:34:
                    b4:e6:56:2e:aa:f5:5b:46:d3:af:a1:ba:29:f9:d9:
                    2e:14:f0:bc:a4:1a:2f:4f:02:a5:8e:f0:cc:97:ac:
                    7c:ec:7e:3c:80:c5:6a:8a:89:8a:24:1d:16:3f:1c:
                    b6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F3:C5:7E:F4:1C:69:F2:C9:76:CD:1B:5A:63:2B:61:5B:24:C9:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/bb62e037-28c9-3670-9fc9-341fc40d906c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl

            X509v3 Authority Key Identifier:
                keyid:27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f964:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:1c:d6:9f:50:d1:ec:9e:ea:64:5f:1d:c6:78:b8:b9:1d:f1:
         1a:cf:a5:66:50:d3:84:6d:ad:18:a7:86:0b:10:be:5b:9d:c8:
         94:8d:8c:9a:a8:a6:34:23:ef:6b:c2:69:a8:ea:35:fb:c0:dc:
         41:0f:54:3c:fd:1f:7c:35:8c:b6:f7:c3:e2:1b:e3:c1:15:bb:
         79:7d:52:2d:bc:be:29:19:c2:7f:c7:92:6d:e3:57:1f:9c:fd:
         a0:2d:ec:17:ad:90:28:fd:94:e7:35:51:0c:29:38:5b:1a:2f:
         07:73:dd:78:46:83:a4:d5:00:94:48:ac:a4:0f:b7:6a:da:14:
         36:12:fb:61:89:7b:b2:a7:a2:ad:64:92:c5:09:ca:b6:12:d2:
         73:c2:33:54:06:91:3a:45:26:e6:c9:b4:e1:46:0c:b2:c7:3f:
         e2:2c:62:c5:1f:b4:a4:20:16:14:05:be:55:6f:f0:5d:9e:11:
         a5:46:c7:da:61:98:3a:76:68:df:18:3d:cd:9d:65:48:f9:fd:
         24:71:38:d7:f3:1f:1f:0f:1f:68:25:66:84:52:8b:1f:03:88:
         21:52:71:55:21:e8:6b:ed:6c:e5:80:d2:f0:80:d5:4a:c1:21:
         19:b0:c1:a1:d2:0e:6e:e5:0c:86:b5:5c:6d:32:2a:1a:01:fa:
         ac:9f:f7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:48:19 2025 by rpki-client