Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/30876a99-e4bc-3990-ab15-ec36d92c9414.roa
File:                     30876a99-e4bc-3990-ab15-ec36d92c9414.roa (raw, json)
Hash identifier:          dT9jLiREQunoeukxI4i2uqE1pV8Oc13pbm9mpdxau+g=
Subject key identifier:   82:E3:8B:B1:E9:DE:1E:B4:ED:C0:67:EC:37:45:16:9D:39:9D:23:52
Certificate issuer:       /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
Certificate serial:       010D0C9F4328584AE1971CAA7BCFA5763C2DBF00
Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/30876a99-e4bc-3990-ab15-ec36d92c9414.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     15353
IP address blocks:        2602:f71e:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:1c:aa:7b:cf:a5:76:3c:2d:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=0aca3988-b1a9-4e90-9f31-df772853c755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:27:c8:bf:b9:74:e8:8e:ab:66:38:78:19:
                    9f:81:0b:d6:ce:47:0c:d0:c8:ca:f8:0f:e2:2e:21:
                    8a:e7:f1:98:33:46:c2:af:3e:dc:86:b4:39:38:ec:
                    38:c6:72:58:47:b9:c1:8b:4e:75:77:f7:ff:33:da:
                    5a:10:40:75:f3:c3:7f:26:26:ec:8f:02:a0:d3:a5:
                    29:71:24:38:34:a3:15:f6:af:f3:0c:93:0e:ba:83:
                    c9:6a:af:0c:7c:4b:99:09:73:c9:5a:95:e2:9b:7e:
                    aa:b7:37:c7:0a:73:af:cc:19:c3:53:89:49:53:c1:
                    a5:e9:98:72:86:6e:27:c8:b1:c0:e6:b5:54:47:61:
                    10:c5:2c:3a:0e:80:af:b5:b8:09:00:f7:5e:b2:df:
                    43:82:2e:1f:f9:ba:cb:c6:93:69:60:9a:79:9a:78:
                    5e:9e:56:90:3b:6e:59:00:8f:4e:39:f9:be:e4:d0:
                    6f:3c:32:04:9a:ad:e7:d1:f9:27:90:d5:a1:a3:12:
                    c7:3d:2b:5f:5b:48:21:4d:c2:38:f0:d8:35:26:da:
                    a8:fa:64:86:7f:50:15:dc:70:67:e5:06:05:d1:d3:
                    87:3d:f7:7a:0a:f8:e7:1d:0d:d9:1e:a6:24:15:40:
                    39:3e:55:c0:ba:4b:95:e0:ad:b8:0a:99:af:ab:38:
                    d3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E3:8B:B1:E9:DE:1E:B4:ED:C0:67:EC:37:45:16:9D:39:9D:23:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/30876a99-e4bc-3990-ab15-ec36d92c9414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f71e:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:43:44:f1:b1:e5:8c:a1:91:39:02:c5:49:2b:e7:4e:66:80:
         e4:ed:f0:6e:37:e4:a4:98:c5:24:c1:ed:cb:09:c2:02:f6:91:
         cd:33:eb:f3:34:cf:f4:1e:f5:d2:fd:4b:c2:2d:10:d0:6d:cf:
         d0:2f:82:a5:be:d2:39:52:e3:6e:d7:c3:a7:85:b3:72:33:c4:
         91:ea:2e:54:28:0e:54:c9:f2:2f:ca:1e:e5:dc:ae:0d:e7:c5:
         f3:af:79:ff:79:cd:72:c0:8f:37:72:c6:71:00:5e:dd:a3:e2:
         20:00:94:58:cf:88:20:a2:af:65:78:01:10:5d:b9:3e:ea:53:
         e4:f7:74:0a:9f:23:ba:94:67:db:26:47:30:21:d4:59:42:46:
         f0:a2:a2:a2:ee:df:67:fc:4b:e3:d5:17:d8:34:4e:7a:2a:df:
         f7:0e:37:7d:2b:d5:c6:4b:08:55:ab:6e:46:c8:0c:c3:78:db:
         4f:b6:c0:7d:6b:99:74:a8:0c:83:67:51:be:94:6e:a0:96:78:
         01:ac:c2:26:2f:39:35:3b:ae:bb:51:61:e9:25:19:d6:01:85:
         a7:9e:57:f7:33:0d:3e:38:f7:55:e4:ee:41:a5:6a:de:c1:f5:
         64:38:c9:27:48:2a:cd:89:db:6d:2a:eb:02:90:f3:b0:e5:8e:
         85:42:19:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:19:41 2025 by rpki-client