Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/fa4cfe20-cbaf-3de8-9909-501b40a1e63a.roa
File:                     fa4cfe20-cbaf-3de8-9909-501b40a1e63a.roa (raw, json)
Hash identifier:          P/4kZ0NFbUVrm4c5BSKWG4XjvQRl9y1NhlaS4DfIqX4=
Subject key identifier:   8A:B0:F7:00:8C:96:B9:F2:36:49:78:FC:8B:E2:E6:5E:CD:BC:1B:FF
Certificate issuer:       /CN=e4f064d0-9017-41e7-be21-c7b9883020d5
Certificate serial:       010D0C9F4328584AC016461DCF66671B63D07A60
Authority key identifier: 6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/fa4cfe20-cbaf-3de8-9909-501b40a1e63a.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     21903
IP address blocks:        2602:fa6d:70::/46 maxlen: 46
                          2602:fa6d:74::/46 maxlen: 46
                          2602:fa6d:78::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:46:1d:cf:66:67:1b:63:d0:7a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f064d0-9017-41e7-be21-c7b9883020d5
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=79906325-7d7d-46f2-b865-885b4c511dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:df:85:63:26:76:5c:f9:4f:16:21:37:c6:2b:
                    88:24:ca:51:11:22:4f:53:e4:a3:38:57:17:f5:db:
                    0a:4d:b9:34:22:cb:9b:a7:fd:18:bd:de:e6:61:24:
                    2c:97:d5:24:13:53:d7:81:7a:b0:4d:c6:36:8f:51:
                    f4:05:ab:26:0c:fa:00:d3:f6:ee:dd:d8:27:1c:59:
                    4d:18:ef:49:14:33:f1:b1:44:f5:4e:0e:c6:59:6c:
                    02:ac:cd:62:9c:19:b5:dc:65:92:66:0d:df:e0:0a:
                    02:ed:ef:7f:90:1d:89:ab:fa:19:ba:e7:a3:e7:04:
                    1c:b8:e9:c4:3f:20:05:a8:e0:e7:3c:e6:23:36:61:
                    f0:ce:c1:a5:bd:fb:68:2e:00:93:6c:ca:8a:b0:d5:
                    f0:4e:a9:26:5b:91:c3:c5:16:0e:79:20:65:a2:74:
                    c0:bf:1b:f9:be:73:04:61:20:31:d4:f2:8a:d0:14:
                    45:6e:b7:fb:28:e7:9c:76:33:9e:49:58:98:15:1b:
                    bc:3b:4d:0f:e3:34:06:f4:df:4f:a8:29:e3:71:15:
                    e7:a1:12:35:4c:16:38:67:07:73:ee:22:b0:8d:15:
                    b9:83:34:65:5c:14:ca:8f:5c:7e:55:45:8c:df:32:
                    9b:30:fa:ee:94:97:7a:63:8a:00:8c:51:f1:ae:93:
                    90:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B0:F7:00:8C:96:B9:F2:36:49:78:FC:8B:E2:E6:5E:CD:BC:1B:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/fa4cfe20-cbaf-3de8-9909-501b40a1e63a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5/e4f064d0-9017-41e7-be21-c7b9883020d5.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6A:F6:74:83:1C:DA:7D:F3:92:B7:07:1A:A1:BE:0F:70:63:82:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4f064d0-9017-41e7-be21-c7b9883020d5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa6d:70::-2602:fa6d:79:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:e3:8b:03:96:01:b1:95:5d:83:0b:75:e3:96:f1:59:22:0c:
         8b:2e:d2:fc:7a:45:92:0b:ac:66:5f:10:63:95:bb:e1:e6:ba:
         e3:27:38:56:61:7b:ed:18:b6:5d:db:c7:d0:e1:a4:0c:a3:5a:
         4f:c6:ed:28:ea:02:b9:66:39:74:2c:e3:09:de:be:68:58:ea:
         90:c6:5c:f4:31:3e:7f:2f:45:7b:c9:fc:6e:29:3b:2b:dd:82:
         60:7e:1e:7f:3e:2e:e2:0e:1d:18:1f:a6:3f:f9:06:e0:ee:ac:
         36:8a:a4:ec:32:2a:13:ac:29:01:a2:df:a8:fe:06:07:7e:da:
         39:a7:1d:5c:d0:3e:f1:fb:55:03:18:0d:0d:19:ab:87:da:a0:
         20:9c:a5:23:a7:0f:af:cd:91:3d:f2:3d:63:ae:07:fd:92:c1:
         cc:a7:ec:d7:00:cc:e9:ce:3e:b6:77:84:7a:3c:b9:2d:ff:92:
         0c:d6:35:6f:7b:28:06:ca:d8:e0:4d:66:e1:37:06:1c:38:cc:
         26:5d:7a:20:bf:47:e2:be:dd:02:a6:54:e7:68:e7:67:83:99:
         88:8f:e2:14:c1:ca:2e:83:73:89:4f:b6:40:5d:a9:cd:5b:99:
         b1:6c:41:93:75:08:b5:df:f8:a8:a9:1a:1e:68:4b:f6:70:7d:
         60:a0:c9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:13:03 2025 by rpki-client