Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/244759fc-1226-3aff-bfda-56910d5709ee.roa
File:                     244759fc-1226-3aff-bfda-56910d5709ee.roa (raw, json)
Hash identifier:          UnhbdChSROXAUw2sPM+e2CgyZw5q0zbf+AOdNsNAnhU=
Subject key identifier:   93:25:72:B7:01:66:55:53:22:CB:1C:D8:49:6B:B6:FC:E3:C1:3D:BD
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F4328584AD3A0F77B2B36862AC780FD00
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/244759fc-1226-3aff-bfda-56910d5709ee.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     399139
IP address blocks:        2602:fea7:d00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:f7:7b:2b:36:86:2a:c7:80:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=51f92a5d-3c6e-4f1a-9c35-8396d6100db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d1:e2:95:2f:90:82:92:da:b2:12:34:11:e6:
                    71:8e:3c:cf:d3:69:4b:89:4f:93:e9:b9:8f:9b:58:
                    f4:24:51:98:19:41:29:eb:15:29:06:12:9a:77:fd:
                    7f:06:19:fd:51:6b:3c:e3:92:86:d1:e3:45:77:1e:
                    ff:df:fa:6f:e4:46:20:5c:ba:fd:c9:e5:52:9f:8b:
                    63:47:d7:7d:85:f2:2b:b5:fb:d7:35:0c:92:14:0e:
                    fc:59:fd:93:1e:2f:02:4e:6c:48:be:d8:9d:80:f9:
                    7a:e1:26:39:91:2c:b8:dd:7c:35:96:ff:40:8e:4d:
                    92:6e:aa:6b:77:51:3f:79:49:23:b0:7f:b0:e5:f5:
                    1c:87:d0:44:87:26:89:06:0d:c2:35:93:66:c2:12:
                    2a:55:7b:d1:aa:bb:a3:d5:3c:6d:ba:a1:94:23:c6:
                    be:d9:fb:e4:2e:5b:fb:c5:ce:fb:77:b7:4b:11:54:
                    31:77:05:5c:68:ad:9f:ab:0e:d0:e8:2e:55:68:f9:
                    52:1d:b1:a3:8d:62:52:69:6e:bf:99:ea:c7:e4:45:
                    5c:cc:9b:21:60:f7:b7:02:68:bd:a2:1b:97:ac:3e:
                    01:8e:9f:89:5a:ac:1f:97:5a:54:ac:96:22:92:fc:
                    f1:75:05:0c:f7:d0:de:17:b2:ac:1b:3c:4a:5b:9c:
                    0a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:25:72:B7:01:66:55:53:22:CB:1C:D8:49:6B:B6:FC:E3:C1:3D:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/244759fc-1226-3aff-bfda-56910d5709ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fea7:d00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d5:a9:75:60:f0:80:fb:bb:cc:a7:b8:96:eb:38:6d:08:ed:
         d7:63:cc:27:5c:e0:15:f0:e9:22:58:8f:1b:a3:bf:f0:e7:93:
         47:39:f5:1e:d3:08:40:2f:49:20:f6:51:d0:e0:fb:fe:69:7e:
         72:3b:5e:4c:f3:15:1e:72:9c:dd:6d:67:3d:1b:73:bb:ba:18:
         d1:5f:8c:4e:7c:5f:49:6d:20:4b:b8:7c:b0:d2:1a:37:19:76:
         fb:ed:39:fa:eb:f2:e4:21:10:8b:04:39:b0:52:7c:8a:b4:77:
         a7:81:b7:3d:27:e3:40:b4:87:37:dc:f1:84:55:d0:9f:ab:e1:
         e5:03:1a:a1:87:8c:ee:c3:5d:fa:c8:35:cc:8f:19:56:99:fe:
         51:60:8f:50:60:37:18:f1:0a:23:18:50:fd:45:34:2f:fa:a5:
         85:e1:37:ae:d3:37:7c:04:5c:c6:63:17:11:29:5d:90:79:6a:
         d3:09:00:13:dc:d1:da:0c:d5:08:d0:e8:5b:20:db:8a:84:a8:
         74:f1:df:61:42:86:e5:c8:a9:b3:89:a9:eb:26:da:1c:df:10:
         f7:58:78:70:82:5e:0c:e0:6e:ca:11:c0:30:7e:99:a9:78:15:
         09:3d:13:39:c5:6d:d0:54:7a:eb:73:cc:45:c4:f5:3e:83:33:
         87:78:e1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:57:24 2025 by rpki-client