Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/22b6363d-3f5d-3d91-9652-31215bc9d783.roa
File:                     22b6363d-3f5d-3d91-9652-31215bc9d783.roa (raw, json)
Hash identifier:          Gd6I7gu/KZktqkzxVic5ZnI9PscYPD3e0el5xyoT9yQ=
Subject key identifier:   B4:0B:4F:D7:30:78:37:29:B8:CE:DF:F7:43:67:21:50:44:CD:0D:D0
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F4328584AE46114E8FEA9F0F5D99E01F0
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/22b6363d-3f5d-3d91-9652-31215bc9d783.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     397270
IP address blocks:        2602:fea7:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:14:e8:fe:a9:f0:f5:d9:9e:01:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=06f29b7c-20ed-4e60-8655-4a491fa6e374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:20:1d:60:10:a6:0c:ed:20:1c:a3:26:2a:4a:
                    f5:0c:e5:76:11:0a:ba:da:bf:e9:3f:78:51:9c:37:
                    e9:69:5a:50:33:6b:f7:4a:d0:af:67:be:27:e6:10:
                    94:a8:0c:3e:ef:d3:d7:4e:e6:22:00:8b:16:e2:b2:
                    6a:68:d7:97:9d:95:fc:50:1b:99:f6:14:ef:3c:89:
                    86:e4:e3:66:2c:f1:23:d7:84:67:a2:ae:c8:07:8f:
                    f9:02:f8:99:d6:08:a6:9d:b7:1b:be:2f:3e:1f:22:
                    5b:33:45:ef:0b:0b:e2:d0:82:02:3b:cb:60:63:57:
                    c7:61:d8:97:84:04:e4:3f:8d:76:15:43:d9:74:43:
                    2e:65:af:bb:b6:38:f0:be:f0:4c:e0:60:23:fd:97:
                    59:e6:ec:34:b3:a3:c0:e1:5f:09:b6:b1:f6:b4:3b:
                    6c:3f:ac:b0:91:dc:69:97:e4:8f:f4:0d:e7:fe:f3:
                    27:d4:59:e8:22:48:4e:7c:fd:d2:fe:e1:bd:0c:b5:
                    58:dc:e2:7e:b5:9e:42:ef:aa:c8:45:10:11:a4:ac:
                    87:3c:af:05:6e:ca:99:7d:bb:b8:fd:a9:5d:91:fe:
                    dc:7d:a0:fe:1d:50:47:a8:cf:4b:2e:a6:3e:21:2c:
                    29:63:f9:9a:97:25:39:92:14:84:aa:24:2e:96:9f:
                    04:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0B:4F:D7:30:78:37:29:B8:CE:DF:F7:43:67:21:50:44:CD:0D:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/22b6363d-3f5d-3d91-9652-31215bc9d783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fea7:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:d3:3f:b3:89:15:35:f1:94:2a:53:a2:53:6c:fc:ad:a9:00:
         ed:1f:45:5a:44:f9:ba:8e:22:90:57:92:0d:1b:39:a6:5f:ba:
         63:21:6d:45:e1:46:e5:1e:9c:c0:3d:9d:76:f8:a2:0e:f4:34:
         bc:ef:f9:79:e1:87:e3:6e:04:c4:a8:69:f6:7a:39:d3:11:3f:
         9f:a2:7f:06:df:85:49:c9:6c:4d:12:a6:5c:c2:94:0d:be:6d:
         3f:e5:25:ce:55:39:de:51:42:8c:d1:98:4c:b2:91:b0:60:c2:
         ff:47:04:7b:38:1e:48:ca:52:97:3a:19:b8:52:e7:d1:a7:bf:
         f4:ef:e1:17:c3:34:3a:e8:cb:bc:25:2d:fc:ff:81:e0:d6:1e:
         7f:3a:9d:34:d3:48:32:33:ea:bd:ac:2a:02:08:f0:e9:08:cc:
         de:65:88:93:ec:34:06:6e:0d:35:4e:b6:9d:67:da:a2:88:85:
         c8:33:8a:23:79:b7:75:42:b4:0c:b2:9c:44:bf:50:a5:df:87:
         48:fe:ab:e4:f4:11:c8:ac:c0:1c:d4:5f:1c:2d:64:c9:f5:3d:
         57:91:dd:19:54:f8:8c:12:7d:f1:ae:96:40:5a:a4:4b:2e:b4:
         e5:0a:e5:98:00:47:de:59:2e:2a:df:18:b9:97:8f:bd:13:91:
         95:14:85:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:03:29 2025 by rpki-client