Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d30fb522-ec5b-3e28-be2d-99ef91f51011.roa
File:                     d30fb522-ec5b-3e28-be2d-99ef91f51011.roa (raw, json)
Hash identifier:          I8OdIDTyBuq1ej48aFeNbbV4qu7n2bqTI5KZ+CZc1fM=
Subject key identifier:   A9:8B:AF:67:79:28:0D:E0:73:2F:62:8A:77:33:4E:45:26:3C:27:CD
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F4328584AEE268F623D8AA523E9A209E0
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d30fb522-ec5b-3e28-be2d-99ef91f51011.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     398493
IP address blocks:        2602:fd37:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:8f:62:3d:8a:a5:23:e9:a2:09:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=1c6490bc-3952-43b5-9242-f1ee27b7a87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7f:cf:36:cc:1c:a9:f8:d1:d3:f3:f3:01:96:
                    2f:3f:a8:ff:34:d3:cd:49:79:53:82:96:a2:7d:c0:
                    28:37:53:87:75:9e:36:a2:c8:dd:ff:a0:8e:2f:0d:
                    d3:5d:db:ac:0c:bd:d4:8e:07:86:6b:34:2e:cb:0d:
                    f4:83:0f:06:25:bb:98:07:00:06:5d:39:f7:6e:9b:
                    91:30:66:19:44:37:5e:85:05:7f:79:e1:67:60:25:
                    31:00:2d:04:c4:cd:54:b8:b0:7a:2e:19:2b:08:7a:
                    cd:c0:f9:76:74:7e:ca:74:4e:d9:8d:56:74:fe:bd:
                    a0:d9:0a:37:85:18:90:66:46:6e:e3:dc:1f:4e:bc:
                    fd:c3:5a:0e:b7:42:1c:4f:aa:96:11:0f:99:7d:fc:
                    9b:5d:53:7f:aa:ad:c4:51:88:28:24:52:8a:78:97:
                    79:1d:4a:25:4c:30:5a:f4:4f:16:86:03:15:4a:1c:
                    61:0a:39:83:31:ec:eb:48:d6:11:ed:ac:c2:87:b3:
                    05:97:1d:97:61:7d:43:0e:3b:51:da:f1:7b:39:a4:
                    93:60:18:d7:23:2b:2b:ce:72:7a:55:98:92:58:c4:
                    cd:be:c5:2f:8d:83:4f:e6:69:86:34:99:68:39:62:
                    90:31:88:1b:2c:26:7c:f3:74:3f:56:5d:c7:e6:5e:
                    48:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8B:AF:67:79:28:0D:E0:73:2F:62:8A:77:33:4E:45:26:3C:27:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d30fb522-ec5b-3e28-be2d-99ef91f51011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd37:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:9a:37:78:9a:8a:fd:45:29:64:1a:e7:b2:2f:b6:c0:b9:a0:
         05:b8:7d:d2:1b:9e:a3:c1:47:df:c1:2d:c2:39:eb:36:67:3e:
         96:85:0d:34:c9:c0:a7:f7:21:2f:46:fe:0f:3b:18:f4:c7:52:
         72:6a:3f:81:34:fe:d4:2b:16:6b:bb:a2:c5:34:46:8a:80:2c:
         d8:5e:de:5d:da:71:5b:bb:16:86:f0:2e:93:3e:d5:d8:b6:83:
         3c:9c:97:83:08:e1:ef:d8:a5:15:99:fd:7a:c1:07:79:ef:12:
         3b:65:2e:a9:e4:5a:9f:6b:05:2e:ad:b8:06:6c:30:83:f1:55:
         39:da:2c:e0:e1:d9:3f:cb:c0:95:1f:dc:a7:14:39:4b:40:59:
         8b:ee:67:ef:e3:95:04:b3:65:85:1b:b5:98:06:78:20:58:d9:
         80:40:74:2d:da:8f:09:5e:4d:da:0c:fe:a4:d9:c7:22:60:74:
         00:5f:e2:3e:01:0a:7e:ae:94:78:40:92:c9:21:e1:6d:4c:ce:
         5a:56:8a:90:3e:9a:10:cd:06:ac:47:3f:0f:8d:3a:7c:0d:b8:
         c6:2e:15:73:b0:f0:07:b4:f3:90:7b:34:f2:b5:6f:b8:79:da:
         f7:06:18:b2:56:f9:ce:71:18:67:f8:5a:09:60:8d:63:a5:2c:
         68:14:0c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:37:46 2025 by rpki-client