Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/bf3c3ef3-fc5f-3d6f-9748-06d51a46617e.roa
File:                     bf3c3ef3-fc5f-3d6f-9748-06d51a46617e.roa (raw, json)
Hash identifier:          9WN5nPVQfK5mwnWdPYlQB3d7ePRXH864zFtf9POqDzI=
Subject key identifier:   0C:51:CC:FE:09:3D:64:BE:88:25:77:D7:4F:21:A8:29:4A:86:E6:66
Certificate issuer:       /CN=932105b1-ce56-44a7-9670-6f4e56578ef8
Certificate serial:       010D0C9F4328584AE1971DDDD2859FB124F874D8
Authority key identifier: DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/bf3c3ef3-fc5f-3d6f-9748-06d51a46617e.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     23470
IP address blocks:        2602:f7f8:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:1d:dd:d2:85:9f:b1:24:f8:74:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932105b1-ce56-44a7-9670-6f4e56578ef8
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=a70ef5a5-b376-4117-9a34-4241200a5700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c2:5d:70:83:1b:96:ac:20:04:9f:4c:b2:29:
                    cd:c0:89:45:21:43:c8:06:0c:ce:bc:59:38:c3:d5:
                    1a:c3:b3:9c:14:67:9a:c5:77:2d:4e:5c:7c:01:c5:
                    7f:86:7c:6f:62:dd:4c:fd:d4:71:b2:7b:1e:35:89:
                    be:95:c0:e4:53:62:42:80:78:35:db:09:b2:3e:0e:
                    aa:e1:ae:f1:28:b3:43:4f:67:85:3b:ea:2e:a4:5e:
                    69:b0:3d:20:20:c8:0e:be:25:e8:24:8f:b3:c4:da:
                    32:57:f9:26:e4:f6:67:0d:a4:f8:42:73:72:5e:5b:
                    7e:a7:49:b7:c5:44:07:86:2c:5d:52:9c:76:8f:ee:
                    49:9b:0d:ff:ea:5c:c0:18:0c:d1:60:0d:45:f5:01:
                    98:98:91:51:db:81:e7:04:1e:58:71:21:18:7a:b2:
                    6c:10:74:f4:f5:ac:6d:5d:9e:7f:ee:d7:0a:2b:fc:
                    ac:ae:96:a9:9c:16:45:ba:44:37:ab:68:82:88:29:
                    14:ca:1a:90:c9:d1:ab:c5:81:f5:04:71:50:ac:06:
                    c5:b8:14:28:23:5f:af:c2:04:48:f3:a8:71:f2:cc:
                    44:17:4a:5a:75:d8:7d:27:cc:47:1d:61:40:f0:51:
                    d5:c4:32:6e:f1:d3:4e:b1:00:c7:af:84:b7:44:c7:
                    74:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:51:CC:FE:09:3D:64:BE:88:25:77:D7:4F:21:A8:29:4A:86:E6:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/bf3c3ef3-fc5f-3d6f-9748-06d51a46617e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8/932105b1-ce56-44a7-9670-6f4e56578ef8.crl

            X509v3 Authority Key Identifier:
                keyid:DA:85:D7:87:30:4F:B5:0F:C3:7A:12:C4:6E:32:82:EE:26:BD:42:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/932105b1-ce56-44a7-9670-6f4e56578ef8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7f8:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:9e:f3:72:74:38:fb:be:8e:11:80:53:4f:49:3f:cb:e6:3c:
         7a:1a:40:16:40:ba:00:e2:73:fb:07:1c:0a:a5:51:38:18:79:
         89:43:e1:d8:c1:d7:7b:9d:04:52:bf:e9:b6:83:64:44:bf:03:
         0c:f9:f1:94:21:c9:19:f5:32:77:b0:1a:45:37:98:a1:a1:d7:
         92:f8:61:70:e1:6c:25:7f:be:8c:eb:1d:d3:e5:8a:4f:1a:81:
         f8:db:7f:1a:96:77:bd:7a:18:62:02:15:2a:61:47:41:98:ee:
         1d:e7:12:dd:1b:e8:cb:0c:e2:f5:ae:16:8d:d4:24:51:cf:fc:
         cd:ce:82:2d:de:66:55:30:2d:ea:c6:13:fe:c4:3e:57:3f:b4:
         bd:ea:00:4e:d8:e4:34:ff:f3:4d:df:92:4e:f3:2f:b1:70:01:
         1f:e8:a6:29:c5:7f:0c:9e:2b:7b:41:38:40:bc:dc:1c:8f:3c:
         64:78:68:52:4f:e9:13:db:41:12:b1:1c:60:cf:22:8b:55:a5:
         d1:73:80:dc:7a:db:6b:8c:27:b3:c7:8b:af:ad:a2:98:fe:80:
         4e:72:af:a4:de:73:bd:f6:88:d1:02:b9:ce:8f:b3:0e:73:b5:
         44:c8:9d:3c:40:f8:b1:76:fb:c9:31:ea:39:48:97:d3:bc:2c:
         7e:35:89:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:44:52 2025 by rpki-client