Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/77bcc360-5389-35c5-b3d1-80c9a92f4561.roa
File:                     77bcc360-5389-35c5-b3d1-80c9a92f4561.roa (raw, json)
Hash identifier:          azyYolq36rN81kf6aY4pDyryA+sLFEwpk1S0EW5BVeA=
Subject key identifier:   E4:77:CC:F0:1C:BD:1B:E7:59:DB:51:F4:B0:70:E0:8D:FB:01:74:D5
Certificate issuer:       /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
Certificate serial:       010D0C9F4328584ADE4EE6D6BC7F8C0BA6644200
Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/77bcc360-5389-35c5-b3d1-80c9a92f4561.roa
Signing time:             Fri 15 Aug 2025 20:49:12 +0000
ROA not before:           Fri 15 Aug 2025 20:49:12 +0000
ROA not after:            Thu 13 Nov 2025 21:49:12 +0000
asID:                     400556
IP address blocks:        2602:f71e:72::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:4e:e6:d6:bc:7f:8c:0b:a6:64:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
        Validity
            Not Before: Aug 15 20:49:12 2025 GMT
            Not After : Nov 13 21:49:12 2025 GMT
        Subject: CN=1bd8af5f-2567-436a-b960-a1d3a769dfb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:f3:55:94:35:93:2c:67:d1:3f:ac:f6:30:
                    71:f6:d5:61:d3:e9:6b:76:6b:a2:dc:05:0d:62:37:
                    6a:fd:fe:b1:77:f9:bd:76:9b:3f:bb:f8:c4:52:a9:
                    98:15:cc:04:b6:5f:9a:d8:7e:0f:a5:9d:8a:a8:99:
                    8d:a6:7c:5a:cd:55:14:4b:b3:98:aa:54:1c:b4:53:
                    6c:a7:1a:80:3c:b7:e4:25:db:40:54:8f:34:da:cd:
                    f9:64:2d:71:28:7e:57:fe:8b:2b:35:58:94:b5:d7:
                    af:17:68:61:c0:4c:f3:70:42:d6:42:95:62:03:6f:
                    a4:2c:06:d0:dc:e3:5f:51:5a:b6:09:8a:ed:e7:7b:
                    ea:05:d8:9c:5b:86:5e:c5:30:50:87:c7:33:ca:0a:
                    a5:07:5d:67:91:e0:d8:86:65:c6:1f:0f:26:c1:cc:
                    7e:2c:80:78:28:8d:fa:25:ad:b3:0d:a7:81:9f:ab:
                    76:a3:f7:25:7e:19:0f:04:5b:92:f7:f3:6b:cd:ce:
                    c3:99:a2:85:94:17:36:a7:bf:a1:a2:1f:ec:58:3b:
                    a3:92:4a:0f:9b:c2:7c:b7:72:f7:8d:32:cd:14:3d:
                    85:96:5c:be:25:c9:62:76:e5:71:60:87:fe:a6:40:
                    19:65:1e:9d:87:1c:a6:a9:ad:a7:d9:7b:2a:0f:9f:
                    13:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:77:CC:F0:1C:BD:1B:E7:59:DB:51:F4:B0:70:E0:8D:FB:01:74:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/77bcc360-5389-35c5-b3d1-80c9a92f4561.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f71e:72::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:2b:57:e6:aa:9d:70:f8:ac:14:0c:21:77:fa:06:19:a0:99:
         47:e8:4a:cd:a2:c8:88:26:ce:28:d1:3b:8d:24:71:a7:19:e8:
         bc:13:26:75:ca:9b:00:c8:94:20:c6:90:af:82:4d:03:1b:db:
         c1:96:6f:83:c5:a2:ca:d2:44:eb:23:ba:d7:1b:ef:21:fc:3e:
         50:2a:2d:9a:3b:53:72:e2:c7:de:24:24:67:a7:c9:76:13:6b:
         5d:d6:3a:5f:71:12:e1:e8:55:e9:4f:fe:db:d2:3a:3a:09:57:
         7f:9f:fa:7f:8c:24:ee:e2:d2:f9:a7:5d:dd:7a:e6:0d:ae:99:
         a8:93:c9:4f:62:09:58:35:20:5d:df:c9:6b:bb:80:07:bd:21:
         0f:b0:99:f9:f5:0b:05:f0:90:fc:67:61:59:8f:f4:22:e0:f7:
         bd:8c:4b:a3:29:d8:44:84:e0:c9:1d:b7:f3:09:35:6b:c8:6f:
         eb:77:b2:fa:a8:b6:f7:2d:a6:3f:8b:a6:1c:8c:88:aa:77:0f:
         5d:af:8a:b7:c9:49:af:2c:78:12:47:17:df:4a:1c:f5:b2:92:
         5b:26:fd:7a:38:e6:f6:5f:b8:f5:3c:26:6c:3c:44:39:6d:39:
         76:2e:3b:49:15:ac:9e:25:de:f0:a8:27:66:cc:7e:8f:9f:33:
         cb:71:d8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:26:16 2025 by rpki-client