Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/d8f60b09-6e07-3264-8ee7-432cff810a56.roa
File:                     d8f60b09-6e07-3264-8ee7-432cff810a56.roa (raw, json)
Hash identifier:          pr4aQ4Pq6sUN5CoTybDX4tYS+3uxTkP+D3jrUCxkWfU=
Subject key identifier:   66:A5:40:7B:0D:3D:EC:10:77:5A:9C:D9:85:80:E2:FE:26:19:E7:61
Certificate issuer:       /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial:       010D0C9F4328584AC763CA870C6DB24BE07ED180
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/d8f60b09-6e07-3264-8ee7-432cff810a56.roa
Signing time:             Thu 07 Aug 2025 15:47:41 +0000
ROA not before:           Thu 07 Aug 2025 15:47:41 +0000
ROA not after:            Wed 05 Nov 2025 16:47:41 +0000
asID:                     57974
IP address blocks:        2602:2d4:d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:63:ca:87:0c:6d:b2:4b:e0:7e:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
        Validity
            Not Before: Aug  7 15:47:41 2025 GMT
            Not After : Nov  5 16:47:41 2025 GMT
        Subject: CN=6264c578-6344-4f52-ac89-b21d11d9e32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:58:17:b6:40:69:b2:ae:88:c6:9b:2d:8e:6c:
                    55:08:9b:af:4d:c7:cb:c0:98:0f:4b:22:9a:44:15:
                    9c:48:51:cb:35:4f:de:c6:45:c1:67:0a:f5:60:22:
                    d1:9c:7d:0c:56:2b:24:0b:3a:38:22:6a:b1:77:93:
                    f3:f5:fc:a8:38:bc:56:29:ec:a3:8a:55:8e:29:65:
                    cc:c3:16:a9:bd:4d:8d:25:b0:63:1a:7c:19:4f:8a:
                    48:db:c4:c4:f9:06:4f:ff:07:cf:c3:7c:42:8e:82:
                    43:e2:0c:b2:99:39:f9:10:d6:04:72:fd:26:05:e4:
                    35:24:31:7a:9b:5d:58:c1:5b:f0:c9:55:8e:b2:16:
                    d5:fa:a4:00:ba:9c:2f:ee:23:27:ec:18:03:08:64:
                    12:09:e8:9f:90:23:34:f6:e2:42:61:8b:75:db:a5:
                    8c:bd:61:95:47:0d:1b:e5:71:00:de:7d:36:e5:88:
                    8d:5b:51:32:5b:c4:2f:de:80:ef:1f:2b:a4:4c:e8:
                    fb:8f:cd:77:92:e6:80:96:0e:a5:b6:5c:ce:d6:18:
                    a2:b1:f9:3f:89:a9:ef:ae:ad:0b:a1:70:01:4b:f2:
                    7a:02:d7:fb:9b:56:b2:54:0e:3e:bf:fc:c1:e1:4d:
                    23:ea:ae:99:6a:13:d9:66:27:89:15:18:36:e6:d1:
                    78:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A5:40:7B:0D:3D:EC:10:77:5A:9C:D9:85:80:E2:FE:26:19:E7:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/d8f60b09-6e07-3264-8ee7-432cff810a56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d4:d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2f:25:cd:82:81:85:14:43:33:25:92:1d:3f:a2:68:d8:53:
         44:00:4f:84:89:6a:14:54:55:f0:c6:75:75:d9:cc:1f:f2:44:
         02:9a:66:73:bb:09:cc:42:15:0c:72:af:cf:76:8f:79:40:7c:
         fc:1f:31:9f:be:1d:bb:37:69:de:14:cc:4b:6b:4c:fd:20:15:
         7b:e5:b1:97:1e:91:78:b3:70:75:84:61:68:f2:35:f4:71:e8:
         18:0c:84:a0:1d:f3:42:4a:61:63:d8:b9:81:3e:e7:6a:c6:08:
         42:22:78:46:a3:74:59:eb:87:e6:a0:6c:ad:3c:90:b5:d2:7b:
         7b:5b:a1:38:26:13:88:b3:c0:d8:54:b6:42:25:7d:47:a0:a0:
         23:22:7d:3a:33:aa:c5:a0:6b:cb:f0:3a:13:db:20:3f:c4:b4:
         64:2c:75:53:67:10:21:1d:9b:9b:6b:86:39:f4:3e:0a:be:12:
         a0:a0:0c:48:ea:8c:db:86:03:20:7d:c8:10:3e:48:34:1f:62:
         59:cf:ed:74:7e:3f:19:24:88:21:54:ce:55:d3:9b:7a:ee:ae:
         37:e8:8a:92:0b:da:01:9f:23:38:be:41:00:77:e5:34:c9:78:
         29:eb:07:4a:d6:c4:24:f2:ba:b7:04:a7:e7:71:fa:f9:d6:be:
         d7:14:0b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:56:46 2025 by rpki-client