Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079/48059e2b-b5fb-31e4-9330-3d3e0ff53250.roa
File:                     48059e2b-b5fb-31e4-9330-3d3e0ff53250.roa (raw, json)
Hash identifier:          vtT2g6pfrx89ObUUQP+Nb/zQ3ffGY8mkBjqBBN5EWdg=
Subject key identifier:   9F:D1:17:0C:C1:33:79:D9:BA:40:41:70:58:5F:71:20:11:CE:9C:8D
Certificate issuer:       /CN=e7dfb913-c249-4fb1-816b-a01434dbe079
Certificate serial:       010D0C9F4328584AE19683A1E4FC40B2A59C4AC0
Authority key identifier: 28:06:C8:9F:CB:16:D7:4B:E9:C4:87:26:1A:6E:F5:F6:62:5A:5F:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079/48059e2b-b5fb-31e4-9330-3d3e0ff53250.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     26533
IP address blocks:        2602:fa76::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079/e7dfb913-c249-4fb1-816b-a01434dbe079.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079/e7dfb913-c249-4fb1-816b-a01434dbe079.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:83:a1:e4:fc:40:b2:a5:9c:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7dfb913-c249-4fb1-816b-a01434dbe079
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=8b0870a7-6917-49ff-a4b8-24e81b1b3847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:ed:04:ae:4a:d9:75:cc:de:ad:91:26:3f:
                    c1:48:eb:fb:1c:f9:b5:7b:31:5d:5a:50:5e:be:72:
                    79:b1:55:cd:07:61:53:57:23:40:ec:b6:b1:bf:5b:
                    1f:e0:6a:6a:14:98:ed:a5:f8:50:cb:4e:7e:e4:c3:
                    a8:fa:6d:65:6f:47:ab:db:cf:0d:ee:de:08:9a:8c:
                    21:b4:0f:32:0a:62:dd:d3:ee:c8:b4:ac:39:90:f0:
                    fc:fe:2c:81:5e:46:a7:64:e1:02:81:cb:fb:4a:35:
                    b5:c3:95:8c:73:82:2a:f5:7e:2f:b6:5d:0c:4a:03:
                    c8:12:71:ae:07:aa:71:28:d8:be:c9:38:90:25:c0:
                    70:a7:91:a6:19:53:f5:49:d3:72:f6:e3:82:58:89:
                    ce:bb:55:49:9e:f3:0e:a9:3b:6a:fa:7c:99:0a:1d:
                    85:01:de:00:ad:31:09:c9:b6:e0:fc:ea:be:4a:13:
                    24:ab:dc:ce:39:28:38:17:81:3e:74:b4:bc:01:bc:
                    da:45:01:e8:92:3a:cc:ee:ac:be:9e:a8:da:59:64:
                    87:0f:90:8b:65:e7:3a:ad:fa:f3:ee:60:d1:47:bc:
                    7a:eb:ad:05:3c:51:ed:87:01:51:b5:b2:02:3f:ff:
                    b9:78:c9:91:6c:39:86:51:35:cf:00:ba:5f:e2:1a:
                    2d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D1:17:0C:C1:33:79:D9:BA:40:41:70:58:5F:71:20:11:CE:9C:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079/48059e2b-b5fb-31e4-9330-3d3e0ff53250.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079/e7dfb913-c249-4fb1-816b-a01434dbe079.crl

            X509v3 Authority Key Identifier:
                keyid:28:06:C8:9F:CB:16:D7:4B:E9:C4:87:26:1A:6E:F5:F6:62:5A:5F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e7dfb913-c249-4fb1-816b-a01434dbe079.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa76::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:7d:02:df:0f:a0:a1:7f:48:6d:4b:49:2b:48:0c:cc:05:cf:
         a4:eb:8b:cc:fa:16:90:12:36:8a:6e:8e:6f:ef:32:54:71:48:
         97:e0:58:55:7c:19:96:64:87:25:00:1f:f1:c6:57:c1:71:00:
         32:8a:99:46:74:df:d5:65:ab:9e:d5:46:a9:72:20:bf:7e:95:
         2a:fb:b9:46:df:bf:f3:8b:7e:b4:13:5b:6c:92:73:5e:9f:56:
         b0:f9:51:48:45:f2:2b:39:36:36:cc:44:fe:0c:4f:36:44:b3:
         eb:3f:89:74:be:67:32:81:f5:92:bd:19:08:54:6a:42:3f:a6:
         dd:5e:d8:7a:2f:94:75:94:59:6d:6e:d3:3f:d1:8a:22:ec:e8:
         1c:bb:a0:98:3e:f8:85:14:a2:13:94:9e:4c:10:94:0c:9e:a6:
         f7:6c:a2:f4:53:60:81:18:51:2d:ff:b7:80:1a:5e:ff:61:1a:
         f4:ba:1a:62:1f:be:7e:32:a8:2d:e1:b8:6c:f1:eb:7b:64:6a:
         cd:c2:43:37:0a:58:9a:9e:69:26:1f:b4:db:ce:78:1b:0e:b4:
         4a:b9:72:b9:d4:fb:36:f1:d8:2f:2c:e9:29:d3:f5:90:9b:fc:
         f5:db:68:97:2a:65:85:97:82:bd:07:94:14:ac:9e:7f:d1:7b:
         ca:2f:6f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:49:01 2025 by rpki-client