Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/67048364-819f-3191-853f-4269ffe18a99.roa
File:                     67048364-819f-3191-853f-4269ffe18a99.roa (raw, json)
Hash identifier:          kE2JsJn9dIcrutRZQ7oARLYUZDivF1Ie8tTj7ChrFl8=
Subject key identifier:   CD:80:7A:8C:DF:CB:86:CF:E7:F8:FF:67:5B:01:7C:40:28:80:CC:75
Certificate issuer:       /CN=af4b288d-bc7b-443a-b3f4-52662b22717a
Certificate serial:       010D0C9F4328584ACCA65A40E5B02B6FF38C1700
Authority key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/67048364-819f-3191-853f-4269ffe18a99.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     53667
IP address blocks:        2602:f7c5::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:5a:40:e5:b0:2b:6f:f3:8c:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4b288d-bc7b-443a-b3f4-52662b22717a
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=66b3c8dd-007c-4c49-ac80-5c2a654963b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:54:b1:e2:2e:c5:ef:b8:a3:e7:e1:4b:89:f8:
                    d6:2d:30:b4:ad:0c:35:82:53:75:98:77:1a:a1:0d:
                    c9:5d:48:42:1a:8b:ff:e9:09:89:48:32:a6:9e:16:
                    5c:11:b7:51:7f:61:c1:e4:d9:89:56:5b:62:c1:36:
                    fb:61:b8:b4:77:c0:c2:4f:95:0a:a3:c7:26:5e:67:
                    83:1c:ae:54:7b:6a:eb:6d:74:59:39:03:7f:8e:ff:
                    8c:2b:53:6f:a2:91:ae:49:79:32:2c:b8:22:23:6e:
                    11:7c:6b:0b:70:02:05:85:be:b0:08:15:cc:8d:b9:
                    0d:45:51:39:1f:f1:37:d8:ce:5c:2c:3b:eb:27:58:
                    1d:16:96:48:a7:a3:66:74:2c:c2:ae:7d:38:e4:d6:
                    23:9e:bf:92:cf:70:ce:e1:6d:4a:cc:c5:2f:30:d3:
                    c2:3d:ad:f9:67:e2:84:a1:0d:03:08:40:03:67:6e:
                    22:cb:9f:ff:93:96:ab:8b:da:4d:c6:32:73:46:7d:
                    27:83:75:24:49:6c:93:88:fd:e2:f3:d5:e7:02:64:
                    a1:d4:8a:a7:7f:e9:e0:3c:ee:28:b2:9a:08:02:53:
                    b0:37:d0:2f:b2:ee:69:58:50:93:07:76:af:c8:f8:
                    3e:55:96:bc:e1:bd:40:eb:3b:f0:3d:0b:78:38:63:
                    d5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:80:7A:8C:DF:CB:86:CF:E7:F8:FF:67:5B:01:7C:40:28:80:CC:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/67048364-819f-3191-853f-4269ffe18a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl

            X509v3 Authority Key Identifier:
                keyid:33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7c5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:35:78:ed:46:3c:6e:1c:a4:53:05:1c:05:2e:6c:08:46:7f:
         f6:11:38:6e:0c:43:c5:3d:66:27:c9:f3:a3:1b:83:d7:4d:5d:
         8b:4c:a7:8a:19:f7:7d:d6:18:7b:2d:6c:b1:d7:a3:d4:d6:72:
         bb:35:94:cd:84:0e:52:79:3e:2e:68:4c:16:8a:b2:93:da:79:
         d4:68:85:b2:18:42:c7:a2:e4:cc:a2:fe:b6:10:cd:05:27:1f:
         ed:27:24:28:3a:29:3c:7e:53:6e:21:0c:e0:06:d9:c9:cf:f6:
         6a:11:83:b4:f3:04:7a:31:ac:f2:51:a1:93:67:a2:15:b1:81:
         3f:19:88:5f:06:b8:22:79:50:86:ae:1c:b4:7b:73:c9:a3:91:
         3f:ac:6d:77:84:9b:b0:29:95:6b:5b:b2:62:22:15:b4:68:b6:
         32:99:61:9e:18:af:a6:32:7a:9e:ad:a0:3b:1a:0a:46:df:88:
         34:30:da:31:b6:13:43:36:af:3a:00:e7:ef:ea:56:81:5f:4a:
         09:fb:43:19:ca:56:1b:74:72:db:6f:01:b2:24:10:24:ef:a7:
         1b:48:2e:44:aa:a0:a9:14:1d:11:d9:1d:90:d6:da:f5:4d:8e:
         8f:1d:e9:2a:57:93:82:19:4f:1c:79:5c:c8:bb:46:40:a8:03:
         2d:a1:d4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:21:09 2025 by rpki-client