Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398/0a00b049-4ee7-30cf-9896-aa802a8a30b4.roa
File:                     0a00b049-4ee7-30cf-9896-aa802a8a30b4.roa (raw, json)
Hash identifier:          2uhJpxrVBCQ3Kpg+fmwHERwzkacmsoRVSG6Wp04S7SQ=
Subject key identifier:   9D:07:CE:A0:B8:09:5F:79:D5:68:A8:9A:A1:8B:24:F8:21:B7:3D:6E
Certificate issuer:       /CN=67f18c85-4b4b-447b-99f3-764300e28398
Certificate serial:       010D0C9F4328584AF521431D6504F1634ACF7408
Authority key identifier: 6C:C1:CA:14:20:93:95:EF:8B:4F:61:26:36:8B:1C:9E:04:AF:F4:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398/0a00b049-4ee7-30cf-9896-aa802a8a30b4.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     18792
IP address blocks:        2602:80b:5000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398/67f18c85-4b4b-447b-99f3-764300e28398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398/67f18c85-4b4b-447b-99f3-764300e28398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:43:1d:65:04:f1:63:4a:cf:74:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f18c85-4b4b-447b-99f3-764300e28398
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=8db8d9bd-5c92-4b2e-b33e-6cf92006ab15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fb:15:44:4d:6f:81:92:74:38:2e:40:b5:e0:
                    93:83:af:2c:2a:54:f3:e2:4b:ba:19:fd:73:1e:1f:
                    5c:48:fb:41:3d:d4:85:a9:6d:d6:09:36:64:4e:46:
                    e4:ea:1c:c8:66:68:f9:56:a8:13:74:3c:4c:f2:b1:
                    07:d9:c2:23:7e:bb:ca:74:b1:a5:83:d7:05:ca:b4:
                    8c:18:d4:f8:33:17:f8:81:93:73:11:5f:4e:ef:38:
                    22:4d:dc:2e:2e:8e:41:ec:3d:c9:a9:d1:8d:9d:53:
                    b8:50:6f:de:36:15:bb:7b:62:04:26:db:cf:ed:e5:
                    4f:95:07:9a:b1:b2:36:d8:21:19:b6:26:09:e5:14:
                    1d:fc:e0:6e:ee:2f:29:24:a0:3e:bb:ef:af:db:d3:
                    10:c7:6a:91:85:14:84:ad:38:62:e6:9d:11:4c:19:
                    5c:23:7b:8b:04:0e:e0:5b:99:37:ab:28:0d:0d:2d:
                    c8:fe:65:a2:67:de:e0:aa:02:6b:47:c4:7b:0d:4c:
                    c9:68:47:60:a6:58:23:ea:34:6a:f7:1b:17:11:6e:
                    f8:62:3b:84:62:95:b5:58:47:f7:01:27:71:42:0f:
                    b1:24:55:4f:96:5a:bd:4b:f0:43:1c:56:81:54:d2:
                    34:e7:e9:52:71:89:3f:7f:1a:d4:ea:de:8d:4d:71:
                    72:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:07:CE:A0:B8:09:5F:79:D5:68:A8:9A:A1:8B:24:F8:21:B7:3D:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398/0a00b049-4ee7-30cf-9896-aa802a8a30b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398/67f18c85-4b4b-447b-99f3-764300e28398.crl

            X509v3 Authority Key Identifier:
                keyid:6C:C1:CA:14:20:93:95:EF:8B:4F:61:26:36:8B:1C:9E:04:AF:F4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80b:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:3c:25:ed:c8:94:fc:ca:9c:4b:b2:bf:7d:b6:df:3c:3f:46:
         ce:11:c0:d8:23:a2:dc:ba:dd:24:e9:26:33:de:20:81:6f:c1:
         4d:8f:43:54:c0:44:d1:16:99:8e:57:d6:7a:9f:9a:83:99:6a:
         b2:2f:cd:02:39:43:73:a7:fb:54:fd:03:7e:a9:51:4b:2c:c9:
         c4:cf:c8:c7:28:c5:6a:8a:2b:29:22:d0:42:35:ea:52:8b:ee:
         fe:a3:c3:90:9b:c1:25:a8:ce:47:31:d4:e8:2b:e3:a9:c8:5d:
         54:a9:67:10:0d:b2:56:77:8a:8f:ab:93:bf:dc:14:f4:85:60:
         aa:2c:70:99:5f:d2:01:8c:51:98:e5:32:8b:b0:2f:a4:63:71:
         0d:4a:12:87:75:e4:83:e9:e2:6f:e4:eb:a5:3c:e5:62:7d:96:
         47:85:83:e6:24:60:f1:16:14:7d:4a:b3:5e:00:c0:39:0f:46:
         f3:29:3a:f0:30:aa:2a:32:5b:2f:c8:35:3f:9d:ef:d9:7e:e2:
         84:37:3b:69:13:e2:32:48:70:f4:c5:25:10:1a:05:42:b4:a5:
         8c:d2:ef:95:52:ed:7b:c3:45:0d:5c:2e:7d:97:12:10:f9:f2:
         3f:3d:33:51:82:4d:34:93:c1:c4:ed:15:fb:3f:f9:aa:df:8c:
         59:bb:a2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:26:50 2025 by rpki-client