Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/5e4dbc0c-0321-32d5-a924-0b7c07b5752a.roa
File:                     5e4dbc0c-0321-32d5-a924-0b7c07b5752a.roa (raw, json)
Hash identifier:          q8+IHPk84xqFuyP3Pclm/52UOpBd5o4R24dpobcjE2Q=
Subject key identifier:   61:92:E2:DC:48:E4:97:9A:5B:30:EA:BD:99:B6:9D:8C:C5:68:3A:43
Certificate issuer:       /CN=65f8721d-b6b4-4e88-9328-3a834dc36005
Certificate serial:       010D0C9F4328584AE5C67426B43A17215DAEF600
Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/5e4dbc0c-0321-32d5-a924-0b7c07b5752a.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     4226
IP address blocks:        2604:f587:8000::/34 maxlen: 34
                          2604:f587:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:74:26:b4:3a:17:21:5d:ae:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=5c656fd2-9664-45c3-a015-487e9e586b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:d4:d7:bd:60:41:6b:9c:97:95:4e:62:bb:
                    72:35:13:f7:86:6a:cc:5e:49:c0:0a:8f:33:67:22:
                    ce:d5:40:8c:d1:ae:a0:f6:c7:82:11:fe:5a:a7:42:
                    76:01:d4:28:f4:97:d9:4b:6d:13:a7:54:19:ac:32:
                    b3:04:9f:63:83:f4:89:46:b6:6c:90:1a:c5:e1:74:
                    d9:76:28:75:1d:20:ed:8d:d7:58:9d:2f:37:a2:e0:
                    e1:ea:bc:1e:b8:0a:8b:f4:7f:c5:70:7c:ac:5f:40:
                    c1:f8:a7:36:07:fb:3d:16:aa:f2:84:5a:87:c7:3c:
                    bc:00:8b:2f:39:12:42:a1:29:ff:8f:63:43:f8:98:
                    3f:97:5b:54:df:14:75:a8:a5:40:0e:c6:27:4d:7f:
                    5a:3d:56:74:ad:55:c6:c4:dd:b6:58:2f:db:55:a6:
                    72:1f:b9:ed:98:b8:89:27:59:a4:33:5c:4a:8b:e5:
                    84:0e:e4:57:bd:0e:37:bc:ba:0b:cb:55:b0:3c:4d:
                    7c:4d:af:61:70:74:2b:f5:52:69:86:78:03:01:36:
                    14:ff:bf:49:d1:be:90:22:ee:81:c4:0b:80:6a:bd:
                    13:cc:dd:91:fa:6f:bc:2d:d4:23:81:75:fa:04:6b:
                    ae:a8:8e:4e:a8:c9:4f:e9:2b:e5:44:7f:62:05:f3:
                    34:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:92:E2:DC:48:E4:97:9A:5B:30:EA:BD:99:B6:9D:8C:C5:68:3A:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/5e4dbc0c-0321-32d5-a924-0b7c07b5752a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl

            X509v3 Authority Key Identifier:
                keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f587:8000::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:2b:af:5a:35:3a:04:e9:52:58:76:dd:2a:08:94:e1:3d:a1:
         c6:2c:32:f8:83:54:f2:82:f3:5c:6b:08:87:d8:e9:8a:94:30:
         8f:62:ce:76:e5:0f:f3:cb:3f:da:fe:8d:17:f4:a0:d8:9c:2c:
         a0:9e:60:b0:53:f5:86:b2:d2:2b:27:63:5e:16:a9:46:83:f4:
         28:55:61:0d:cc:7a:a5:ac:a1:60:28:c2:a4:9e:b5:f3:63:40:
         8f:80:5c:22:45:29:39:b6:72:00:79:fa:23:c2:43:32:2f:12:
         7d:0b:49:2d:06:ec:b1:03:eb:75:ba:4a:5b:c0:29:ce:02:e9:
         e1:8b:20:60:a0:64:38:68:bb:f3:20:5d:c2:f9:e0:6c:a5:f7:
         7f:6d:88:d9:d7:b4:cd:1d:4d:9e:a1:51:cd:6b:e5:57:38:1b:
         3b:f6:d6:d0:f0:c7:cb:bd:33:fa:0c:27:13:b8:45:cb:df:84:
         7f:f9:b8:cd:39:20:bf:f5:50:c5:2a:57:75:0f:cc:cb:85:0f:
         94:87:88:2b:d8:01:97:ae:0b:34:02:72:8e:18:68:54:8b:51:
         0e:e4:a9:4e:28:00:3c:cc:1a:e4:aa:13:ff:6a:4d:c3:5e:fb:
         88:f6:c4:58:df:d8:29:a8:92:74:33:a0:f0:b4:7e:02:7d:b9:
         f0:66:76:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:54:13 2025 by rpki-client