Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/a4c22548-637c-34ab-850a-517d3b950a52.roa
File:                     a4c22548-637c-34ab-850a-517d3b950a52.roa (raw, json)
Hash identifier:          yfs1+1Ey9D9t8wt0by1m8rloirI5RezMB2KSNesq14w=
Subject key identifier:   22:FC:54:38:DA:C2:33:B0:2B:F9:DF:38:E0:F4:07:54:77:57:5F:D7
Certificate issuer:       /CN=5ef4d5f1-c1e2-4799-9868-866a263537cc
Certificate serial:       010D0C9F4328584AECC121D48C77D10392D94F00
Authority key identifier: F7:C0:D1:DE:57:83:26:71:CD:9B:A6:65:85:13:E5:4A:D9:D6:92:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/a4c22548-637c-34ab-850a-517d3b950a52.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        2602:fcde::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/5ef4d5f1-c1e2-4799-9868-866a263537cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/5ef4d5f1-c1e2-4799-9868-866a263537cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:21:d4:8c:77:d1:03:92:d9:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef4d5f1-c1e2-4799-9868-866a263537cc
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=eb0f0899-0914-4d73-8458-10d3f1f215ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a9:44:1b:47:ad:81:de:e4:10:19:8e:f1:96:
                    37:9e:7d:64:1b:8c:a3:33:85:ac:4d:0b:de:9d:92:
                    57:2f:01:c9:25:9f:42:e3:2e:17:d7:36:0b:38:a9:
                    c5:50:cf:21:97:e7:a4:22:ba:65:24:a0:b9:81:21:
                    74:ce:5b:f6:fe:a0:f6:b1:f1:70:63:58:5d:7d:2d:
                    b0:f9:b0:19:57:ec:7c:0f:ec:08:bf:a3:11:c8:9f:
                    55:70:5d:94:b3:64:51:27:e9:c2:de:f0:b6:9a:c7:
                    af:0a:9a:2f:ac:f6:54:12:b6:0a:42:3d:c7:a6:36:
                    36:a3:78:12:73:27:f5:dc:1e:f6:69:bb:cd:c9:17:
                    7d:f5:c4:2f:5b:d4:b0:9d:ca:36:d0:09:c4:9a:99:
                    01:76:f2:22:99:54:2f:37:4f:88:09:4b:5e:7b:4b:
                    a1:b9:e7:33:b0:ea:e2:dd:48:c1:e7:3f:dc:4b:68:
                    eb:f8:37:b6:3b:be:1a:26:e6:5e:2e:ba:fc:b8:f3:
                    a8:52:5d:23:2c:22:f3:b1:82:1e:6e:b8:42:58:5a:
                    02:c6:fc:9f:a3:01:36:f9:10:cd:6f:bf:b8:8a:f4:
                    33:76:03:f6:69:82:ea:ea:bd:31:9e:4e:e2:b3:c3:
                    46:f0:76:d7:64:88:c6:11:1a:69:24:11:38:85:71:
                    e0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FC:54:38:DA:C2:33:B0:2B:F9:DF:38:E0:F4:07:54:77:57:5F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/a4c22548-637c-34ab-850a-517d3b950a52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/5ef4d5f1-c1e2-4799-9868-866a263537cc.crl

            X509v3 Authority Key Identifier:
                keyid:F7:C0:D1:DE:57:83:26:71:CD:9B:A6:65:85:13:E5:4A:D9:D6:92:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcde::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:22:bd:84:64:f8:54:03:36:75:92:23:df:3b:58:1d:b3:c8:
         3e:81:2e:c7:f8:47:74:2a:92:33:56:75:96:c4:96:5f:48:f9:
         13:26:28:c1:fe:d8:d2:39:46:3b:f4:5c:72:1e:6b:f0:47:4e:
         36:fc:50:e0:9d:3c:96:b9:04:8c:29:a1:c1:5e:2a:83:16:a3:
         49:76:4d:99:21:4e:8b:a1:78:05:ae:5e:0d:9b:b7:2a:97:db:
         0c:00:6f:96:ff:9b:c9:4f:57:85:07:a2:e2:8b:e4:fc:9f:ba:
         c4:4f:6c:3b:76:5f:ed:98:4a:54:a0:9d:44:88:7f:03:5a:ef:
         d1:9d:cf:bc:19:57:31:1b:2a:03:33:38:05:9d:19:e0:1f:e7:
         0c:a0:20:e2:cd:fb:e6:03:6c:5b:ae:36:81:de:9b:1c:3a:38:
         d3:6a:8f:af:df:f5:98:d5:c4:25:b4:6d:06:3d:40:90:71:19:
         e3:97:f7:09:65:0e:7e:85:77:a9:48:93:20:d5:11:bf:d0:b8:
         84:a7:3b:51:ca:79:b8:13:27:1f:e0:9f:0c:08:33:d2:08:06:
         68:88:da:ca:eb:93:a6:71:3d:df:44:d7:dc:ce:80:97:2a:08:
         3a:75:44:17:26:2e:d8:7b:f9:d2:e8:52:fe:64:00:4d:e8:c8:
         1c:d9:40:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:09:41 2025 by rpki-client