Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa
File:                     705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa (raw, json)
Hash identifier:          rwvK2rKj0zczz4au6wpSC8JDC+qaG8+FCzxLCszMG/I=
Subject key identifier:   5F:00:32:89:62:09:72:B1:08:16:45:AB:28:C9:4D:99:2C:61:37:A3
Certificate issuer:       /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial:       010D0C9F4328584ACE0BA4895BD87F8995B8DFF0
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     23467
IP address blocks:        2602:816:5000::/48 maxlen: 48
                          2602:816:5002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:a4:89:5b:d8:7f:89:95:b8:df:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=e08ba718-5c85-4319-be10-5ec106e56d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:41:bf:bd:f2:4b:32:73:b0:6e:c6:0c:1f:e8:
                    03:e2:58:ea:97:f2:51:07:a1:fa:80:09:1b:43:5d:
                    65:be:16:39:ff:c4:0a:2a:48:2f:d6:2b:11:c1:48:
                    0a:44:c6:4d:90:de:24:ac:cd:ab:2e:73:ff:a3:30:
                    44:b0:c2:23:de:9f:2a:d2:3e:37:4a:96:c2:73:92:
                    36:76:f3:ef:99:64:e8:d7:51:09:46:e0:bf:e5:f0:
                    89:29:3f:6e:9d:e3:e8:17:6f:e3:d1:4e:3d:06:20:
                    24:ca:7c:3f:ef:07:b1:c1:d1:a1:1f:d1:95:22:04:
                    15:8e:48:0e:08:a3:f2:64:60:94:68:72:68:10:b9:
                    db:44:14:15:06:81:a0:78:ac:ef:55:77:69:99:11:
                    eb:e1:22:39:32:f6:e3:e4:cf:c5:06:4f:4f:e2:e1:
                    e7:0e:46:20:50:1f:d5:94:93:27:c1:0a:57:16:11:
                    80:b3:7a:9f:71:26:ed:34:e1:9a:37:b0:d1:58:c4:
                    78:5c:30:63:d2:0f:fe:b5:3a:7e:11:3e:5a:54:9e:
                    78:69:b3:c7:b0:7a:41:0e:4e:c9:8e:7f:e7:16:d7:
                    b4:1a:f3:ff:14:58:76:30:18:95:7d:18:91:19:0a:
                    eb:28:fe:ae:a4:dd:fa:5a:44:27:c2:97:db:01:68:
                    73:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:00:32:89:62:09:72:B1:08:16:45:AB:28:C9:4D:99:2C:61:37:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl

            X509v3 Authority Key Identifier:
                keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:816:5000::/48
                  2602:816:5002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:9f:20:d9:c4:52:64:64:cd:aa:ca:01:d5:d4:a4:bd:e1:62:
         89:4c:7c:27:3b:ca:f3:a0:4b:01:65:69:2d:a2:cd:39:07:0d:
         c0:75:ec:e2:79:25:d5:02:f5:01:59:6b:38:9b:e3:c7:41:4b:
         17:81:c8:7a:64:e5:24:39:db:df:ab:9e:74:59:ac:43:6e:8b:
         4f:f5:10:fd:1e:3f:52:31:8f:d3:21:97:53:f2:24:76:dc:f0:
         9a:ef:cf:08:8c:39:fb:2a:96:b9:50:61:09:6d:ec:f6:b0:dc:
         ba:04:6b:32:c5:ff:8b:63:6a:06:c0:ac:5b:d9:40:35:ff:25:
         1c:1c:ce:fb:04:1f:df:b5:a0:93:60:35:8f:47:e5:e0:27:24:
         19:9c:e9:be:05:a3:df:2b:66:68:f2:00:bc:89:69:bd:77:5c:
         ac:de:eb:31:7a:a4:09:50:1c:96:f8:7f:a4:ef:33:fe:78:57:
         bd:2e:20:f1:dd:cb:1a:89:55:41:2d:39:1a:75:54:fd:63:37:
         31:0b:a3:f7:65:10:23:4c:24:f0:47:d3:59:e5:05:09:21:a8:
         27:bc:26:1b:da:51:18:79:8a:3c:5c:41:fa:0a:93:fa:3d:61:
         91:70:db:2e:49:14:77:32:43:c3:42:60:7e:8a:22:bb:87:bd:
         f1:c8:7e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:47:46 2025 by rpki-client