Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/e5f6bf23-93c1-32ac-8db5-c571a06c7fea.roa
File:                     e5f6bf23-93c1-32ac-8db5-c571a06c7fea.roa (raw, json)
Hash identifier:          sZ09WxrRhfW1ZQOXs21vbU4HiODoeAtC5P8wN5IcWYM=
Subject key identifier:   86:0F:32:7A:21:03:4F:FD:86:FC:90:95:7D:99:2F:9F:5D:AE:4A:8C
Certificate issuer:       /CN=b12072dc-8b29-49de-800e-2439a1f4bf97
Certificate serial:       010D0C9F4328584AF52150539D063A511D91B900
Authority key identifier: 6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/e5f6bf23-93c1-32ac-8db5-c571a06c7fea.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399737
IP address blocks:        2602:f9dc::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:50:53:9d:06:3a:51:1d:91:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12072dc-8b29-49de-800e-2439a1f4bf97
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=8e3279fb-1ad2-444c-bced-da31e23d680a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:fa:24:36:18:72:ab:64:74:e4:b0:1f:48:
                    39:ce:2e:66:eb:23:0e:f6:58:3a:4a:a9:f2:ce:d6:
                    9f:20:ab:90:78:81:9f:b2:66:de:f5:9c:c2:46:df:
                    18:68:83:ae:a8:b7:2b:ac:f2:72:64:f5:a0:a8:fd:
                    6e:ff:e6:ec:08:54:59:5a:f3:de:84:c5:c2:1e:8e:
                    9b:93:74:8c:0a:1b:6e:31:e0:80:9a:ea:ad:19:6b:
                    c3:c8:87:67:68:1c:e5:cd:3e:00:c4:38:8e:51:b9:
                    c7:10:10:98:66:1d:6a:0d:57:03:47:d5:07:e9:13:
                    cf:01:d2:91:f0:f7:23:f3:54:e6:a4:74:35:4e:fe:
                    cb:5b:d1:e2:e5:ae:19:7f:db:c6:aa:ff:d7:75:6f:
                    3a:2d:38:d4:de:20:00:b7:49:fd:da:26:76:b9:ce:
                    5c:f0:5c:33:ae:99:b3:07:2d:af:88:08:cc:8d:14:
                    6b:bd:11:0b:3b:26:d9:83:92:ac:ff:a0:08:40:96:
                    94:97:62:8a:30:ee:34:5d:2c:54:f9:c3:8f:fa:30:
                    73:ed:e0:b0:19:b3:c9:fd:cd:9f:ee:00:a9:b9:ec:
                    28:93:c4:71:52:47:5c:3b:e3:1e:9e:bd:2c:d9:c5:
                    ed:e6:3c:31:30:ca:76:c3:9a:ab:d8:2f:8c:de:87:
                    17:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0F:32:7A:21:03:4F:FD:86:FC:90:95:7D:99:2F:9F:5D:AE:4A:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/e5f6bf23-93c1-32ac-8db5-c571a06c7fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9dc::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9b:df:0e:e5:dd:7c:ee:9e:7f:8e:ca:43:59:3d:5b:40:9c:
         c8:c5:dc:f1:e8:70:65:a4:75:b1:0b:fe:78:62:38:f8:29:80:
         73:a8:ca:a4:89:dd:d5:36:1e:91:b8:5c:08:bb:77:0e:c3:a6:
         03:b6:9d:f1:d3:ea:dc:b2:05:cb:3f:cf:ea:4e:44:28:85:0b:
         8d:ad:ba:f3:b7:77:8c:a8:25:69:e9:f3:e8:fe:3c:ed:4d:37:
         0e:99:d4:27:53:46:4d:ad:9a:5e:82:e9:8b:58:11:1f:2c:91:
         07:10:7f:9f:2d:29:9c:b6:8e:b9:b9:0f:ea:a3:8b:f8:d9:f9:
         a0:83:85:a6:4e:7b:49:14:e7:5b:c6:02:20:96:ad:0f:1c:d7:
         f7:c9:ce:6f:f1:e7:21:0c:bc:39:a8:06:02:57:fa:12:28:11:
         e7:3d:60:ca:5e:7c:5f:62:6b:2d:6b:f8:12:ec:13:b7:8a:5e:
         7e:63:54:0e:a5:40:e8:1f:9c:33:c7:71:c2:70:5d:5d:66:90:
         fb:e2:51:de:b5:d9:7b:1e:5f:7e:38:a1:3b:20:0e:aa:71:21:
         90:a8:bd:ec:d2:2a:a2:7a:1c:9d:65:94:dc:c3:55:de:ab:0b:
         d6:77:20:43:a1:ff:b8:91:be:06:66:8d:1a:4b:a3:99:2b:65:
         f8:e6:2b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:27:16 2025 by rpki-client