Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/a4972d0f-3b90-3e73-a099-eb8f2d519946.roa
File:                     a4972d0f-3b90-3e73-a099-eb8f2d519946.roa (raw, json)
Hash identifier:          +3w9br5MY2nZ26gT6m8BqSW8PyCd5TPbua3xAKozitg=
Subject key identifier:   59:AC:20:A6:39:9B:1B:BE:72:A8:17:84:FD:A8:49:F7:2F:CF:B2:09
Certificate issuer:       /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
Certificate serial:       010D0C9F4328584AEE269E10A473D4928D5E9940
Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/a4972d0f-3b90-3e73-a099-eb8f2d519946.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     26879
IP address blocks:        2602:f7a7:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:9e:10:a4:73:d4:92:8d:5e:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=97688eaf-f707-40b5-81cb-25835b40b367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:66:3d:1b:dd:73:39:c8:a7:af:94:db:ce:db:
                    fd:66:e4:c8:be:ba:2c:4a:f1:7e:89:4f:13:5e:e5:
                    64:b9:5a:23:a1:9e:1c:70:1d:4e:8b:c6:ff:1d:82:
                    59:fe:40:d7:86:36:ee:2f:d8:12:ff:19:e6:c7:19:
                    9e:d9:a8:db:9e:f1:76:76:91:fc:01:b9:19:f6:c2:
                    91:8f:b0:fc:3f:ba:3d:1c:8d:1a:3b:26:b0:10:6c:
                    99:52:02:14:95:24:62:38:86:e3:2f:3a:c2:fd:5a:
                    41:30:ca:f2:cb:c2:60:28:84:bc:ac:f6:b8:3d:a4:
                    9c:ed:4e:96:0b:72:63:1b:92:c8:82:5a:00:5d:85:
                    2c:12:21:a2:1d:87:86:13:8f:43:ae:24:50:e5:80:
                    17:8e:3f:89:93:e3:e0:ff:37:2c:b4:bf:08:ec:d5:
                    1e:ba:33:a7:e5:99:a4:99:7e:2b:8a:f7:e9:eb:a2:
                    1c:2d:4a:26:3a:43:41:d2:28:c0:3f:71:40:21:b9:
                    5c:16:8b:85:57:1f:b9:51:35:52:dd:96:0d:20:79:
                    34:69:9b:f6:f5:f8:07:0d:93:25:5a:87:cc:4d:e9:
                    2c:83:e9:6e:96:ba:6e:24:3a:b2:f0:6f:0e:16:4a:
                    1d:5f:78:4d:44:51:6a:5f:b7:ea:20:11:f4:7e:58:
                    c4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AC:20:A6:39:9B:1B:BE:72:A8:17:84:FD:A8:49:F7:2F:CF:B2:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/a4972d0f-3b90-3e73-a099-eb8f2d519946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl

            X509v3 Authority Key Identifier:
                keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7a7:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a9:87:0e:ae:fc:9d:24:88:50:f8:c9:e4:16:9a:8e:cd:7f:
         34:0e:6d:7e:e2:60:a1:b9:16:bb:ff:ba:b7:66:8c:c3:b1:9a:
         1e:64:c1:87:81:1e:d7:61:a2:6a:a2:76:db:d6:7c:3c:33:c4:
         5e:2e:d8:3b:01:5f:f6:5c:38:14:42:c3:c8:6a:57:08:c7:68:
         58:33:34:39:76:64:6d:8b:ba:82:1a:54:89:b4:a5:c3:69:76:
         0b:8a:54:af:2a:c9:58:7b:8f:c5:79:83:68:1b:36:a0:17:bb:
         90:a9:3d:48:26:b6:30:d0:00:90:09:e7:80:f3:5e:f4:e9:41:
         84:0d:d1:c6:ce:21:f5:1a:31:54:21:da:5e:ef:96:6f:9d:fe:
         aa:aa:7d:02:18:6b:78:49:fd:db:2c:48:54:d6:3d:dd:d6:b2:
         51:ea:3f:1b:ac:88:d7:8a:12:03:16:65:36:57:3b:8b:9d:36:
         ff:7e:21:ca:69:03:4f:61:a3:3e:de:86:d5:63:30:d8:a5:fd:
         9a:a2:b0:35:cc:ea:c2:85:48:67:42:4f:55:06:10:ec:f6:a6:
         0e:c3:b8:56:b0:18:8e:c1:01:89:a6:6c:17:27:25:c2:b0:5d:
         7e:9f:fe:66:ff:c8:3d:df:d8:43:d2:2d:ad:e8:33:8a:08:d9:
         81:70:d3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:09:42 2025 by rpki-client