Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/700a3682-aed5-38cd-9733-139d2b4668a7.roa
File:                     700a3682-aed5-38cd-9733-139d2b4668a7.roa (raw, json)
Hash identifier:          iQvkBzl+bbZx8tPByZrhLusaKwZB6CHOXL9zWtRiJLc=
Subject key identifier:   1C:78:EC:25:CA:78:CD:17:71:0C:AB:4E:D7:04:91:C1:AF:AC:E4:65
Certificate issuer:       /CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
Certificate serial:       010D0C9F4328584AD23BD9ED7566B0AF10145480
Authority key identifier: 1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/700a3682-aed5-38cd-9733-139d2b4668a7.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        2602:f775:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:d9:ed:75:66:b0:af:10:14:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=3d1dbd1b-fcd6-466e-a13a-e6a312532473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:e6:37:08:7f:6f:bc:f5:09:42:46:82:ec:
                    8a:50:dd:1d:5c:05:4d:68:ed:a2:08:30:f3:e1:58:
                    2c:6c:f8:7b:4b:0b:a0:ac:96:c2:00:2f:f2:1f:c8:
                    aa:18:51:65:4b:c8:89:42:bd:c9:2c:51:a7:44:27:
                    ce:ea:dc:2c:52:0e:13:ef:af:b6:ae:60:43:2c:3f:
                    5c:e2:41:7b:ec:2a:33:47:4b:eb:fb:93:92:a4:b7:
                    56:6a:ee:df:9b:e9:2b:9f:72:58:73:60:51:88:54:
                    f2:57:af:7b:5f:29:67:7d:a4:a1:d6:b8:c2:63:aa:
                    d2:b3:43:3e:b4:88:37:ea:cf:12:7a:f3:62:c4:f0:
                    94:8b:63:50:c8:4c:61:1b:c0:af:2d:a6:42:99:7d:
                    6e:f1:f3:71:75:29:3d:f8:81:74:46:b9:db:6b:20:
                    4d:7a:29:75:e3:f2:a4:27:9a:97:7f:5a:e5:16:34:
                    be:92:38:aa:fc:44:12:8e:8a:ec:d6:80:27:fd:10:
                    c8:a2:56:f6:74:60:ba:e1:f7:07:56:5b:30:cc:06:
                    77:e9:87:17:d4:b2:18:52:b2:6a:a6:45:47:ab:b5:
                    b3:b5:4c:c4:b1:78:d5:c4:82:2c:5f:7e:4f:e5:2b:
                    01:54:64:c6:f2:bb:25:c3:54:1b:e2:b6:45:4e:79:
                    d3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:78:EC:25:CA:78:CD:17:71:0C:AB:4E:D7:04:91:C1:AF:AC:E4:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/700a3682-aed5-38cd-9733-139d2b4668a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl

            X509v3 Authority Key Identifier:
                keyid:1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f775:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:06:26:20:67:9d:2f:a7:d8:0b:2c:22:4c:7d:29:0a:25:9e:
         1d:76:b3:70:78:ef:24:76:34:f7:f8:d0:9d:58:8e:29:13:2e:
         b2:8e:ed:5f:e2:42:d0:39:da:af:92:64:e8:83:ab:e6:de:c9:
         9e:01:4a:69:9c:45:85:26:90:bf:d8:4b:0b:55:2e:9b:da:10:
         40:6b:58:63:fd:8a:5a:86:4c:d7:41:d6:8b:60:e6:0d:34:ed:
         b2:2b:7c:07:08:b0:d5:43:f7:a3:56:f7:cd:07:ec:10:05:36:
         0f:9e:55:b5:2b:30:06:25:17:05:8f:59:c0:47:fa:62:7d:41:
         8a:14:c2:dd:53:dc:54:fb:ae:92:85:d8:9f:4e:e0:b2:44:85:
         da:a5:9b:ef:e3:8b:57:97:e5:25:27:ad:5b:74:0e:e6:a4:1d:
         3e:a8:1c:08:29:84:39:02:c9:22:f1:9a:44:05:f7:78:af:d9:
         a7:e0:3f:85:c5:f6:29:94:f7:53:7a:e9:4d:44:1e:4d:84:58:
         63:08:8b:e3:15:6a:d8:ef:ff:64:ae:a6:67:c9:54:b1:d1:b0:
         b1:d1:16:4d:ec:8b:a3:47:3e:97:45:18:71:ea:71:61:7d:c3:
         09:57:60:a4:8e:af:5d:34:ed:47:6e:d3:09:b9:56:c2:80:06:
         5b:1c:85:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:51:50 2025 by rpki-client