Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/67fdd9bc-f848-365e-a862-3a4a49efad0d.roa
File:                     67fdd9bc-f848-365e-a862-3a4a49efad0d.roa (raw, json)
Hash identifier:          X5DG2F08Nqyf4BGGZCQLgg7OSu4mK4P1QaNkNArOWyM=
Subject key identifier:   1C:02:88:8C:B6:E8:0C:74:FB:F2:79:28:26:15:55:28:85:56:E8:78
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584AECC1525E93A4D30185BEC780
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/67fdd9bc-f848-365e-a862-3a4a49efad0d.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     400655
IP address blocks:        2602:fd6f:e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:52:5e:93:a4:d3:01:85:be:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=58f4eb63-3f8f-4a19-bbb2-0c3a6c122bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8b:2c:bc:8b:da:08:ad:43:95:a5:19:87:f2:
                    2a:44:02:4f:c7:af:30:b3:2d:a1:d6:87:9d:53:55:
                    a8:5b:ef:bb:38:bc:39:13:02:4d:a5:5b:a7:7c:7a:
                    cb:98:a0:9c:5f:f9:67:af:58:c1:bb:12:ac:ad:95:
                    cd:fe:9f:02:07:3b:9e:b1:8a:6a:86:ff:90:88:fc:
                    5e:f0:b5:51:fb:f4:b7:40:a0:fc:11:b6:d9:b3:52:
                    6a:75:bf:7c:6f:0c:12:9c:fc:7a:0b:c5:d2:fd:86:
                    ad:aa:87:dc:8c:c6:08:ce:79:cd:e5:22:5f:cd:5e:
                    5c:58:68:f4:f4:6f:24:35:79:c2:4d:cc:2c:e3:f0:
                    69:bc:71:e6:87:d6:68:55:af:86:03:2b:fc:aa:7b:
                    3b:41:e3:c5:50:85:1b:0d:a3:19:a6:9a:80:67:01:
                    83:3f:77:9c:b1:6c:d3:b0:ac:02:d5:5b:f4:6b:40:
                    92:2d:bd:32:2d:49:6a:ff:91:6c:26:ad:da:39:f7:
                    8f:e9:25:4b:cb:c5:c4:95:20:2b:34:07:09:a5:e8:
                    ba:78:85:de:ae:ef:4b:40:a1:7a:eb:b7:7c:df:ec:
                    03:1f:1b:57:13:74:77:67:40:5c:ea:5d:c9:6d:40:
                    35:fb:07:54:2d:6e:af:6d:3c:45:2a:cf:50:ca:8a:
                    ad:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:02:88:8C:B6:E8:0C:74:FB:F2:79:28:26:15:55:28:85:56:E8:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/67fdd9bc-f848-365e-a862-3a4a49efad0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:01:7a:fc:f9:4d:fb:ad:5f:1b:1d:60:0d:3f:77:67:2e:71:
         f9:69:f3:66:91:92:c7:78:d7:76:c0:93:78:bb:ff:da:a0:67:
         66:3f:8b:f0:df:12:c6:13:9c:14:09:5f:73:54:ff:23:98:22:
         cd:e1:9d:14:e6:9e:64:a6:46:c0:44:b9:bc:e0:20:59:16:b7:
         6b:a8:cf:a0:8e:47:20:19:6b:df:bc:b6:6b:ae:76:d0:28:14:
         e0:87:2a:f0:36:e8:1b:53:cf:bd:c7:cf:58:ba:2b:8b:c4:d7:
         89:4c:aa:69:29:91:c4:94:13:55:1c:b2:dc:13:13:1b:7a:e1:
         62:92:4b:5b:0e:e5:62:28:4c:a9:1b:2a:36:cf:2f:c1:4d:e9:
         b9:84:c7:e0:d1:25:3e:28:32:18:5d:3c:95:be:10:d4:20:de:
         ed:8f:2f:3f:25:f2:82:fe:00:aa:aa:ec:0b:96:85:90:dd:42:
         f4:c4:54:1d:dc:59:b0:21:38:bd:4a:ba:1c:6d:15:28:28:71:
         2a:23:9f:48:46:76:cd:f3:9b:dd:1b:d9:1d:6b:89:40:41:2b:
         85:58:f8:97:49:7d:4a:70:d9:53:79:b5:9c:39:a5:0d:96:75:
         30:ff:b3:42:f6:a2:61:31:ed:ae:d2:38:7f:f5:da:27:26:d5:
         85:19:40:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:30:02 2025 by rpki-client