Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/f363798d-260b-311f-8360-1b9c8543e090.roa
File:                     f363798d-260b-311f-8360-1b9c8543e090.roa (raw, json)
Hash identifier:          wvztvxyKa+y046ssf/IFnlt9wF6UWGZAg76QBHlt8gg=
Subject key identifier:   CD:E7:5C:53:56:43:38:7D:B5:64:6B:83:34:15:1F:4C:B7:2B:05:3D
Certificate issuer:       /CN=93caa9fe-d081-4e18-ad66-499a9209945e
Certificate serial:       010D0C9F4328584AF0F146917E7B2AF2521B6540
Authority key identifier: 34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/f363798d-260b-311f-8360-1b9c8543e090.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     398774
IP address blocks:        2607:2240:e000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:46:91:7e:7b:2a:f2:52:1b:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93caa9fe-d081-4e18-ad66-499a9209945e
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=48db2a6d-888b-4618-9d84-a3b6523de1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:8e:79:2e:34:07:4d:8b:cf:7d:2d:48:f9:
                    ce:05:1f:33:6e:62:96:e2:23:76:a3:0d:79:5f:83:
                    53:af:20:e4:db:93:ff:bd:d6:c5:3e:2e:58:dd:96:
                    06:37:23:b5:09:b2:46:a8:46:90:a3:11:3c:01:b9:
                    b6:cd:c3:a2:d7:b4:54:7d:46:9e:f6:2e:fd:b5:53:
                    60:21:c9:dd:ee:68:b3:f2:e8:ff:fd:a5:0f:ec:81:
                    6d:d4:ca:bb:dc:35:ce:33:23:fa:fb:4c:46:ff:e3:
                    c8:27:6b:9a:11:5c:92:35:b2:75:27:a9:be:28:4d:
                    38:de:12:e4:0b:15:0e:00:3c:16:03:a2:81:9a:4d:
                    0c:8f:30:fd:30:d3:fa:6c:8c:0a:96:f9:0b:65:ed:
                    09:7c:52:2e:64:0e:6a:08:f9:3b:d5:e1:7f:94:c4:
                    d9:3e:06:4f:ec:ff:b4:85:70:d5:50:54:ab:ff:d2:
                    6a:ae:4e:76:97:81:d1:19:b5:0a:fa:52:07:69:15:
                    78:69:64:e6:f1:4c:3e:2c:c8:a6:d8:ce:29:99:a2:
                    b4:eb:52:de:26:6d:c6:0d:6a:63:bd:56:cd:76:36:
                    6c:53:05:cb:ad:b1:8c:78:35:9b:2e:e5:b9:ca:68:
                    e8:f5:ee:ba:be:a4:e8:d8:63:69:75:be:ca:9c:96:
                    6f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E7:5C:53:56:43:38:7D:B5:64:6B:83:34:15:1F:4C:B7:2B:05:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/f363798d-260b-311f-8360-1b9c8543e090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e/93caa9fe-d081-4e18-ad66-499a9209945e.crl

            X509v3 Authority Key Identifier:
                keyid:34:AE:DE:0F:3E:91:29:37:B5:0B:37:66:2F:72:4F:BF:62:3C:FB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93caa9fe-d081-4e18-ad66-499a9209945e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2240:e000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:f4:84:01:9a:5e:1b:ce:73:d0:08:37:30:18:10:e2:5a:ce:
         72:b5:53:4d:e4:60:6f:1b:f3:0a:03:49:5a:e5:01:c6:cd:41:
         24:0d:0c:b9:63:f6:30:99:57:11:9a:4c:04:40:66:c3:90:d0:
         a4:40:06:84:0e:bb:a7:48:6b:79:4f:f2:30:30:f6:91:04:9a:
         db:0b:8b:e6:c0:e7:b7:60:8d:3b:dc:ab:f8:38:15:24:08:59:
         1a:fa:bf:5a:84:db:66:58:35:da:fc:b3:c9:3c:76:23:e2:fd:
         f8:39:b1:44:5a:43:7e:5a:d3:08:a3:8a:6d:4c:70:93:25:b3:
         cc:7a:5f:d2:49:5b:9e:77:8e:89:0e:14:f8:47:57:43:d3:38:
         82:e3:4c:a6:93:4a:52:fa:78:d9:1a:ed:39:9e:41:af:35:22:
         32:30:c8:b1:82:47:bb:41:c2:b6:04:21:cb:1c:26:14:84:3d:
         29:99:72:7f:6c:0c:bc:b6:bc:62:89:db:50:75:4d:64:d2:af:
         d6:74:7c:7e:52:c8:b7:36:3b:64:fa:4e:43:3b:f0:8e:62:31:
         18:9e:94:38:40:00:5c:f6:dc:d1:b0:56:63:fd:cd:c9:f2:a3:
         1d:ef:1e:92:58:d7:b3:10:67:53:aa:37:18:d6:b5:63:b7:af:
         b3:20:66:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:15:35 2025 by rpki-client