Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/c062b811-5af4-3d93-883f-cd801dbdc422.roa
File:                     c062b811-5af4-3d93-883f-cd801dbdc422.roa (raw, json)
Hash identifier:          10wVjiYwmby8A1dIOihOuqvNBZSoGAEm/tydDLdtC9E=
Subject key identifier:   97:B1:5E:CC:AB:23:98:53:99:12:DA:D2:04:35:8F:A6:7F:C6:46:84
Certificate issuer:       /CN=68b39235-773a-4108-9528-465304a966b3
Certificate serial:       010D0C9F4328584AD23BBE4B0D317BD391813180
Authority key identifier: BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/c062b811-5af4-3d93-883f-cd801dbdc422.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     63296
IP address blocks:        2605:fa40::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:be:4b:0d:31:7b:d3:91:81:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b39235-773a-4108-9528-465304a966b3
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=1afc3c3b-c98c-4806-86c5-7f6769a06186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d4:4c:81:b8:8e:91:60:a0:05:bb:49:d8:7f:
                    33:d7:48:87:3c:af:19:c4:d0:69:b7:1f:f2:f6:05:
                    3a:ea:0c:da:b1:95:21:03:f7:8c:10:95:1a:9e:7e:
                    70:60:f9:ed:a0:6b:97:99:56:f7:af:29:d5:4f:49:
                    c0:c9:90:6b:1e:9a:53:99:74:14:b7:2b:d1:c2:04:
                    f2:98:97:e6:75:08:ea:6b:e0:ab:09:8e:a6:39:04:
                    14:27:f7:69:61:2f:23:ba:e6:44:98:f9:d8:52:0a:
                    a1:45:52:0c:58:df:73:ff:b0:ad:c2:47:1c:15:cd:
                    c0:c8:5e:a4:b0:57:55:b6:78:ed:43:c2:43:6e:45:
                    32:d8:c9:c9:7c:4e:48:6a:4e:3c:73:de:e1:2a:89:
                    7a:80:dc:33:0d:d0:2f:ab:9b:ea:f5:d4:08:4c:53:
                    bb:42:4a:70:cb:19:54:56:fa:05:9d:79:6c:1a:86:
                    b8:02:15:bf:b1:95:a7:db:e0:10:56:e0:fa:72:14:
                    e1:68:3c:4b:cb:f9:6d:c9:bb:b4:9c:c0:bf:6d:00:
                    d9:a9:e4:ab:e5:be:ca:c5:39:66:85:f3:e1:30:04:
                    4a:3b:2a:d0:7b:e4:8e:ae:9a:12:9e:5a:ff:1d:4a:
                    01:4f:f7:25:ca:b7:77:67:0e:e9:fe:d2:92:13:5b:
                    3e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B1:5E:CC:AB:23:98:53:99:12:DA:D2:04:35:8F:A6:7F:C6:46:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/c062b811-5af4-3d93-883f-cd801dbdc422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.crl

            X509v3 Authority Key Identifier:
                keyid:BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:fa40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:4f:ab:67:50:a1:72:d9:11:8d:00:6a:bf:a3:07:b1:da:95:
         59:0c:3e:36:6c:23:4c:bc:f8:64:4e:2a:51:1c:6d:28:b5:c8:
         f4:f7:7a:9e:14:4c:51:a5:87:04:30:a5:16:df:87:37:fa:8f:
         a5:86:56:52:ae:87:4c:30:36:04:d2:8d:16:8f:39:92:09:25:
         52:36:ee:25:93:08:07:98:78:ad:9e:72:ea:1a:af:64:2a:cb:
         bd:19:be:79:b2:9b:32:e0:5c:b2:58:cd:dc:a4:cd:fe:2d:30:
         72:74:d0:e8:74:14:5f:71:ff:df:9b:98:83:07:79:a2:38:28:
         a7:49:20:2b:12:a5:45:5e:a1:03:27:28:d2:31:ee:02:f8:2c:
         51:b7:1f:70:94:53:b3:93:60:b0:75:4d:62:c8:55:d4:26:9e:
         f1:db:86:a3:58:30:dc:57:c5:5b:de:4e:78:0b:5c:28:46:22:
         0d:ca:65:38:30:b8:cf:3a:6e:56:c6:c9:de:b9:40:7c:8c:ca:
         b9:2c:bb:2d:d9:74:a7:f3:18:ff:a3:39:48:f7:95:4f:5f:52:
         90:1f:26:cb:18:9c:78:26:06:1d:37:74:3c:0e:dd:72:65:82:
         ef:fa:be:89:e1:1e:20:0a:f7:90:97:a6:00:a8:d4:10:cd:c2:
         a3:fe:15:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:35:25 2025 by rpki-client