Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/53a69f44-f0d8-3d61-948b-3188123e3a6b.roa
File:                     53a69f44-f0d8-3d61-948b-3188123e3a6b.roa (raw, json)
Hash identifier:          VpqFQ+zmjEf7Kc8qW1uWkclHRBSQbc7iVBU+q9SS1A4=
Subject key identifier:   AE:1A:1B:B9:79:40:88:F8:AD:BA:03:FD:3F:E5:8D:0B:D8:F6:E0:2A
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F4328584AEE268FD0DDD1A52029C80000
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/53a69f44-f0d8-3d61-948b-3188123e3a6b.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     398493
IP address blocks:        2602:fd37:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:8f:d0:dd:d1:a5:20:29:c8:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=b0d4c623-1053-449d-a114-80c92c0be224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:95:3b:e8:99:55:e3:18:7f:9a:3e:08:ab:99:
                    80:74:92:5c:84:56:0c:29:8b:b1:02:86:45:c1:2a:
                    30:d3:ab:d3:14:df:0d:c6:5e:da:5d:77:fd:5d:78:
                    78:36:3d:91:59:d6:9b:8d:5d:fc:81:dd:68:4e:e6:
                    4c:06:7d:26:e1:c7:21:a5:ad:2f:de:c5:42:1b:f8:
                    65:94:a1:75:82:f3:e6:32:b4:53:99:02:2e:37:01:
                    e6:7c:9f:e0:55:6f:42:7a:b7:0d:48:c1:42:00:33:
                    14:4d:66:41:6f:ed:3d:7a:bb:f1:b8:0b:fd:1c:96:
                    23:bd:63:81:b8:80:ac:a8:3e:ec:86:4d:8a:d3:b8:
                    cc:6f:75:7f:79:ad:ab:af:88:65:99:49:c2:aa:c1:
                    06:2e:e8:39:64:0e:1e:b3:88:1f:8b:a1:69:06:ea:
                    ee:09:68:49:82:ba:8a:b9:e8:0c:3d:af:e5:7a:8c:
                    91:5f:34:27:f4:f3:b2:53:3d:ce:07:6e:47:9e:54:
                    ab:8a:04:90:6d:3a:32:0f:ea:d9:2c:2b:98:c4:dc:
                    06:83:44:16:14:9d:c2:f4:6b:69:4c:f9:da:01:ee:
                    fd:42:ed:32:6d:13:c8:fe:5d:43:90:59:e5:ed:17:
                    1d:36:07:22:46:9b:8f:d7:49:1e:75:25:17:1f:c9:
                    28:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1A:1B:B9:79:40:88:F8:AD:BA:03:FD:3F:E5:8D:0B:D8:F6:E0:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/53a69f44-f0d8-3d61-948b-3188123e3a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd37:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c3:8b:ac:56:5a:ea:7c:42:e4:74:b2:98:ea:92:2a:71:aa:
         b2:4d:37:44:b1:5d:10:9f:52:8b:c7:19:a4:b7:de:4c:d2:cb:
         85:6f:5a:79:da:0a:aa:45:87:dd:a0:38:53:3f:cf:73:07:5d:
         c2:0a:70:b1:84:0c:3f:f7:8e:cd:1f:55:8a:09:41:d8:81:f0:
         b0:7c:be:e8:14:a1:78:da:86:c1:c3:53:cf:81:50:a7:a6:87:
         5a:b1:f3:70:5d:43:7a:e2:35:0e:e1:30:92:f8:db:70:bc:e6:
         46:9d:de:1f:d6:f6:0c:3e:fb:d8:23:ed:ee:62:43:8d:5b:fb:
         c0:0c:42:38:c2:48:d7:a8:fa:d5:7c:45:ec:ae:aa:5b:ba:92:
         b1:b6:29:f2:67:6b:3e:40:7a:e0:ed:5b:94:22:3b:84:73:da:
         00:8c:91:9d:64:ec:40:4f:ff:c6:70:5e:27:17:1d:68:67:88:
         10:cd:ac:0e:f6:cb:7f:5d:9b:82:82:20:ba:06:c1:5c:0b:1f:
         5b:bf:b9:2c:0c:a8:58:95:03:c0:e0:43:37:0e:41:b5:13:2d:
         63:19:1f:33:e3:fe:75:c7:58:ab:08:16:95:9c:9b:dc:2d:f5:
         fd:6c:2b:2b:53:40:b6:a8:d8:39:9a:92:a9:62:7d:03:6e:8c:
         ae:56:05:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:00:39 2025 by rpki-client