Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/0f760c1b-2287-3417-81e0-e555031d9abd.roa
File:                     0f760c1b-2287-3417-81e0-e555031d9abd.roa (raw, json)
Hash identifier:          i54lOl67i3FSgftaBg0mVd+VhxOKe/UcisUbjj3MC8k=
Subject key identifier:   B8:BE:87:F4:5C:9D:F2:08:F9:E1:14:38:6A:70:9B:E5:5F:D7:79:69
Certificate issuer:       /CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
Certificate serial:       010D0C9F4328584AC0163659539971ECB8F60E20
Authority key identifier: 17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/0f760c1b-2287-3417-81e0-e555031d9abd.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     399209
IP address blocks:        2602:807:6003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:36:59:53:99:71:ec:b8:f6:0e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=62e48f00-ad5b-40cd-a540-ccc67288978e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:88:df:7a:f1:c1:71:3f:32:88:b5:e0:b6:f9:
                    ee:52:cd:6f:b8:45:5b:04:4a:66:41:e5:ed:22:4b:
                    a6:f5:a5:7b:1a:f7:a9:06:22:3f:52:9c:b0:25:fa:
                    b2:d6:f0:eb:ae:37:04:ed:40:d3:1c:4f:f0:50:13:
                    ab:10:fb:f6:50:c8:fe:9f:6a:5f:da:d2:29:ef:55:
                    fa:a1:da:6f:bd:ce:a4:e3:64:24:30:4d:bc:33:6b:
                    ee:47:a1:ff:c9:dc:b9:77:7c:d6:df:72:6c:34:9a:
                    d9:37:d5:46:bb:20:48:55:12:01:e5:c8:ee:ba:b1:
                    c9:ca:07:ea:bf:94:6c:95:ac:cd:5e:0d:db:d6:42:
                    dc:bc:10:a8:cb:e9:22:56:29:eb:1b:d2:1e:19:3a:
                    c0:51:e7:bf:6e:bc:11:29:e6:17:d5:3a:90:42:45:
                    b9:dd:69:9f:3f:fe:44:cf:21:e1:31:6b:10:0e:e1:
                    ef:c8:1e:1c:83:87:ec:1a:51:ed:07:1c:ee:e3:34:
                    76:7d:7d:31:93:56:aa:32:5d:34:5d:82:10:20:fa:
                    77:b0:a3:98:87:3b:ed:62:f8:01:64:00:3e:3f:52:
                    af:ba:c6:99:6e:d1:d6:4a:ed:fc:6c:46:b2:b7:e0:
                    48:50:cd:d4:42:88:f1:96:f3:e0:57:96:15:62:15:
                    9c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BE:87:F4:5C:9D:F2:08:F9:E1:14:38:6A:70:9B:E5:5F:D7:79:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/0f760c1b-2287-3417-81e0-e555031d9abd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl

            X509v3 Authority Key Identifier:
                keyid:17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:807:6003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f9:ef:ff:7d:2b:b1:56:2a:ff:b8:d2:a1:2d:7a:4e:ce:e5:
         fa:94:36:ec:b7:73:cf:3e:1e:db:bc:5d:f6:72:b2:a6:23:ba:
         74:1f:bb:13:f9:03:72:35:8c:9b:4d:1f:2e:9a:a8:51:f7:ff:
         a7:a3:f2:4a:42:87:93:23:d1:ef:db:5c:8a:3d:7f:ee:16:06:
         41:6b:d7:6a:c1:08:25:d5:42:3a:0b:f1:6c:76:4c:55:8c:f6:
         e7:a7:62:49:14:67:a4:00:fc:a5:6a:32:54:f0:bf:01:1c:1b:
         cc:85:f5:76:f2:99:0f:7c:0a:ea:da:53:6c:06:51:2e:4c:bd:
         f0:04:8f:51:a0:76:bc:05:7b:37:06:ad:f4:b9:08:4f:f7:a5:
         73:94:26:3d:19:fe:57:56:a1:11:bb:31:55:d0:e0:a7:8e:8d:
         1b:3d:5b:a3:27:32:be:1d:e3:d3:ae:1c:d5:ac:0d:c9:9e:bb:
         79:7d:4c:98:40:74:eb:43:74:3c:b4:0e:a0:e2:d1:05:cb:f1:
         88:d4:0e:71:c7:00:a6:d2:b1:02:47:ee:82:80:25:9c:53:5e:
         8f:0c:86:b2:01:47:be:d2:e6:90:f9:19:6b:5e:cd:1c:10:87:
         03:ec:d9:5d:bc:18:ed:a9:5b:d1:b7:76:c7:40:62:0e:c3:6d:
         fb:ba:de:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:29:20 2025 by rpki-client