Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/ea3a997d-103b-3338-81e2-bcee3c92c06a.roa
File:                     ea3a997d-103b-3338-81e2-bcee3c92c06a.roa (raw, json)
Hash identifier:          ckyC2MKQsCsp5un8D/VK+hwDiLvrPEaziRnHA4YXpeg=
Subject key identifier:   1E:23:98:EF:B0:6C:4D:8F:E9:8B:41:9C:FF:CF:0A:A2:67:D2:88:30
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584AECC13FD24CD5632D034DB5C0
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/ea3a997d-103b-3338-81e2-bcee3c92c06a.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        2602:80a:f004::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:3f:d2:4c:d5:63:2d:03:4d:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=e890eaf7-d3bd-4159-a716-9f8befb6be4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7e:d4:14:87:30:a5:9c:11:d7:23:1b:54:fb:
                    36:f8:88:1f:20:5e:a2:3b:0e:d0:d3:c2:a3:0b:5f:
                    af:dd:ee:af:1d:98:51:2a:de:fa:d2:e7:11:e9:ba:
                    d7:5a:7d:21:94:07:73:d6:49:13:f3:c2:23:e6:0b:
                    09:43:00:2e:f7:b6:6f:a8:4e:89:5f:4c:ee:8c:76:
                    ba:34:65:79:6b:a5:28:96:06:9b:c5:e1:eb:2a:34:
                    a4:26:1d:99:2f:4e:68:14:36:32:bf:d9:e3:80:81:
                    17:6a:90:3d:42:3d:eb:7f:f9:b6:7e:80:95:d7:1c:
                    f8:14:fd:14:fb:50:e1:6e:9a:7e:d3:08:ad:da:53:
                    7f:df:e5:33:a5:f5:63:9c:85:c0:bd:ce:fd:71:8d:
                    f0:73:0b:01:b7:ca:3e:1b:a1:95:2c:47:0a:ea:5a:
                    71:4c:53:38:4c:db:38:d1:27:47:34:0a:c9:c1:29:
                    9a:ed:bb:c1:a8:c8:ea:ef:7d:47:1d:2a:ac:09:f6:
                    14:bb:a2:8c:42:c0:8b:25:f8:cc:e0:e3:1a:47:f2:
                    5b:d7:ec:56:67:b8:d7:02:c2:93:c4:c6:04:5a:71:
                    7f:f5:69:f2:ed:43:83:b4:31:27:94:66:34:ef:19:
                    b4:ed:b2:5e:9b:0e:14:c3:56:77:f8:a4:03:1f:7d:
                    03:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:23:98:EF:B0:6C:4D:8F:E9:8B:41:9C:FF:CF:0A:A2:67:D2:88:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/ea3a997d-103b-3338-81e2-bcee3c92c06a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80a:f004::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a1:6e:2a:db:aa:79:e1:55:48:35:06:d0:1b:f8:f4:79:16:
         1b:f5:0c:be:24:e5:bf:40:dd:03:61:4b:0b:94:fa:60:25:ff:
         9d:5e:54:7e:2a:07:ff:58:25:6d:0a:e8:de:28:b0:d7:68:65:
         ff:be:b9:5a:f3:f3:a1:b3:24:6e:3c:87:f9:37:b1:c5:bc:d2:
         51:e0:aa:d1:bf:c9:15:88:4c:70:52:95:3f:9b:a0:26:12:66:
         57:ef:c9:9e:9a:a5:0d:2c:9c:10:f7:00:56:57:29:15:6f:4b:
         af:e4:b8:18:4b:3d:db:bd:c4:51:80:5b:8e:dc:c1:e0:c3:93:
         39:ba:bf:a4:d2:63:85:e1:54:bf:41:71:ce:78:0e:e1:f5:a7:
         45:0e:d4:51:6f:fa:68:75:c4:a2:87:23:58:10:d2:14:4d:f0:
         38:13:9f:20:ae:d3:48:63:c7:f1:9f:d1:38:c4:9a:4d:6f:f7:
         79:76:55:ea:69:a7:86:18:d0:9e:ce:44:11:80:6a:8f:58:f9:
         3c:9a:e2:2d:1c:ca:51:96:0f:17:b7:7b:99:7f:f3:fc:f0:a1:
         cb:74:7b:d9:8a:d0:1b:26:5a:a1:a6:7c:f1:90:f1:f2:a1:04:
         6c:69:6e:38:b4:08:92:4b:32:3a:08:7b:e8:0f:80:48:16:ba:
         02:91:f4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:53 2025 by rpki-client