Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/80691033-d2ac-30a6-b14b-7e3d2d14a10e.roa
File:                     80691033-d2ac-30a6-b14b-7e3d2d14a10e.roa (raw, json)
Hash identifier:          k3EhHk3AgW/ALgIuElw+ijxMq09zv4GxeVV5lcW1/C0=
Subject key identifier:   FA:06:19:54:7B:7A:E7:55:57:85:7A:81:42:56:EE:30:E2:51:C1:CC
Certificate issuer:       /CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452
Certificate serial:       010D0C9F4328584AEE26842E8574011DF4B6A5A0
Authority key identifier: E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/80691033-d2ac-30a6-b14b-7e3d2d14a10e.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     397709
IP address blocks:        2602:fdca::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:84:2e:85:74:01:1d:f4:b6:a5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=39ce8a34-a195-4b0a-99a8-b2607435bff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:14:a4:df:b3:ea:57:36:c8:5e:82:54:4a:e7:
                    42:d9:e6:96:69:6c:a6:f2:f2:dc:84:10:18:18:1a:
                    59:ff:f8:7a:ce:40:48:70:87:6c:59:2a:e5:92:39:
                    4d:b9:93:92:9b:5c:d2:6f:7e:25:9e:69:f9:ab:8f:
                    64:16:3e:e0:30:7b:a2:1a:cb:26:d2:5c:fd:dc:50:
                    d6:59:0f:ab:a7:df:e8:2a:ee:4d:2f:38:95:c1:34:
                    c4:6c:96:6b:d6:ca:ee:16:68:4c:6f:5d:83:e2:20:
                    70:42:bc:cc:0e:bd:f7:f6:2e:ca:95:32:eb:84:1a:
                    fe:76:0c:00:64:72:29:0f:b8:7f:26:26:c7:ec:7b:
                    6a:4c:36:24:75:ac:dd:0c:92:27:b5:a1:2a:9b:02:
                    75:a9:84:b6:e5:dc:24:9d:29:c0:95:89:70:3e:31:
                    9f:61:83:40:32:dd:25:f1:2d:27:13:0e:e2:66:6f:
                    2e:1d:a2:42:26:1b:95:05:75:be:46:8e:08:de:62:
                    0e:3c:61:d6:da:aa:c2:52:65:45:d7:9f:60:f8:8c:
                    c2:0d:13:58:41:aa:e9:cd:28:65:ea:08:9e:7b:ea:
                    12:79:7c:32:e6:cf:9c:7b:e3:cd:9f:55:98:9a:07:
                    9b:b5:b3:44:43:0d:46:a1:00:01:d0:15:6e:6f:1f:
                    45:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:06:19:54:7B:7A:E7:55:57:85:7A:81:42:56:EE:30:E2:51:C1:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/80691033-d2ac-30a6-b14b-7e3d2d14a10e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl

            X509v3 Authority Key Identifier:
                keyid:E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdca::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:55:44:e9:e7:bb:e1:8c:f0:fa:28:4b:d6:7e:20:cd:b7:ca:
         09:7a:76:cd:ba:fa:97:80:9a:e1:17:ef:a0:22:bf:d5:97:5e:
         e2:11:65:07:b6:19:9e:ab:6e:35:ec:5e:09:5a:e9:3b:a9:5b:
         81:b8:01:47:a0:f4:91:ac:11:85:45:13:d2:0b:c7:7e:d9:4d:
         42:17:3d:29:83:9d:8d:73:0b:40:a3:3b:d5:84:ff:1a:b0:97:
         54:19:eb:e0:37:69:c1:a8:66:a9:48:24:b9:f7:34:47:00:98:
         64:90:89:b2:fe:7d:0d:93:ed:d8:ec:99:78:f1:f6:ca:14:0c:
         23:2c:81:17:92:65:b5:0f:6c:25:a4:21:06:db:7a:6f:c8:cc:
         7b:b0:0d:5e:dc:64:be:09:10:b3:56:40:6c:36:9a:1d:0a:0b:
         11:36:90:60:7c:c0:11:4c:0b:05:0a:2c:c6:84:1c:2e:d4:ef:
         bc:f3:98:ec:0a:6f:75:17:a5:d2:02:64:33:78:bb:51:ec:ee:
         e6:03:f2:48:59:f4:3d:5b:6d:7f:f7:74:6b:83:a3:8a:4d:65:
         f2:b1:85:a9:d6:22:bc:55:98:0f:8c:0b:ba:02:62:4c:a3:21:
         fb:b4:5a:7e:86:42:82:bc:a8:50:dc:ab:2b:67:e0:c9:56:07:
         b3:4d:4f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:19:06 2025 by rpki-client