Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/e67bfd16-b8e0-3e32-ac6b-19ca653a7841.roa
File:                     e67bfd16-b8e0-3e32-ac6b-19ca653a7841.roa (raw, json)
Hash identifier:          bEddeRhvdjSqu6bk7sSwpo5IpjhAgXqAO2iQA9sJ7I4=
Subject key identifier:   82:C5:39:7A:B8:20:76:F0:1A:11:52:54:AE:92:79:F7:5B:34:61:0E
Certificate issuer:       /CN=998a132f-4994-4d96-a767-25e4ce264bc4
Certificate serial:       010D0C9F4328584AD50659FBA91BD1DF3701C280
Authority key identifier: 58:61:99:D7:A0:9B:63:D6:A3:67:92:0C:03:B4:B8:28:F1:D6:2C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/e67bfd16-b8e0-3e32-ac6b-19ca653a7841.roa
Signing time:             Tue 12 Aug 2025 13:00:43 +0000
ROA not before:           Tue 12 Aug 2025 13:00:43 +0000
ROA not after:            Mon 10 Nov 2025 14:00:43 +0000
asID:                     19520
IP address blocks:        2602:fb4e::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/998a132f-4994-4d96-a767-25e4ce264bc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/998a132f-4994-4d96-a767-25e4ce264bc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:06:59:fb:a9:1b:d1:df:37:01:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=998a132f-4994-4d96-a767-25e4ce264bc4
        Validity
            Not Before: Aug 12 13:00:43 2025 GMT
            Not After : Nov 10 14:00:43 2025 GMT
        Subject: CN=b59f3b58-f9de-474b-96c0-5028b9253169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fa:5b:6b:11:a4:5f:c1:41:2d:ca:97:38:4f:
                    a4:4c:f1:23:ae:f8:1a:87:c3:09:4b:87:1a:28:21:
                    78:cc:9e:d0:6e:67:bf:b7:cc:ab:c2:69:d2:f0:66:
                    82:12:11:a5:d8:87:cb:51:80:d5:e6:d4:40:9c:6c:
                    8d:01:98:b5:67:f6:71:80:e7:6d:47:2a:b8:28:87:
                    db:2d:57:bb:c3:06:36:b0:dc:d1:2f:53:56:20:06:
                    ab:cb:cf:89:f8:63:65:6a:01:1e:41:20:33:24:83:
                    90:9f:21:f1:d3:a7:cf:dc:d1:13:cb:d9:a1:16:55:
                    83:9e:4b:f5:51:2b:8e:93:92:75:53:59:0b:eb:5f:
                    a6:6d:c3:cb:cb:5e:0e:f1:af:f4:84:69:19:ec:ca:
                    4a:84:a0:ae:f5:17:ea:27:75:73:ef:6c:ec:66:9c:
                    88:48:68:50:fe:44:ff:49:5d:8d:9b:9d:32:fb:12:
                    5a:d3:ae:94:c6:00:31:d7:1b:62:f9:bf:43:ba:bd:
                    70:fc:57:d7:b3:96:56:d2:52:bf:00:02:fc:16:d7:
                    56:b8:41:3d:9e:bf:4e:d1:e0:d5:f5:5a:7c:cd:05:
                    a8:29:ff:dc:2f:c4:98:29:81:de:41:2a:0f:e4:61:
                    9f:d0:cd:ac:83:5b:b2:72:f5:84:90:1f:e9:9d:6e:
                    93:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C5:39:7A:B8:20:76:F0:1A:11:52:54:AE:92:79:F7:5B:34:61:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/e67bfd16-b8e0-3e32-ac6b-19ca653a7841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4/998a132f-4994-4d96-a767-25e4ce264bc4.crl

            X509v3 Authority Key Identifier:
                keyid:58:61:99:D7:A0:9B:63:D6:A3:67:92:0C:03:B4:B8:28:F1:D6:2C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/998a132f-4994-4d96-a767-25e4ce264bc4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb4e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:18:00:b1:4c:1e:ee:08:71:a1:b3:d1:c9:7c:30:e6:9b:59:
         31:5f:d3:73:8d:d9:3a:7b:db:2a:f7:8d:db:d0:25:a2:14:2b:
         ba:9e:9c:e8:5a:4a:eb:21:0f:9e:ac:20:82:38:dd:b4:e8:a0:
         16:79:f5:e1:41:86:ae:29:14:1c:27:19:ca:13:85:a1:9d:50:
         cd:81:17:9c:85:91:75:5d:d6:b3:80:76:20:25:29:57:e0:ac:
         cd:00:26:19:56:e3:b7:e8:ad:c7:7a:08:86:20:d5:73:17:82:
         8b:84:71:ef:1b:8b:38:c6:44:35:1d:3a:e2:93:9a:d2:53:6a:
         52:ef:a2:05:e6:0a:36:22:8a:9c:59:3f:1f:10:fd:74:12:b0:
         1e:63:cd:39:2c:ee:02:17:02:67:43:b4:19:fe:8d:e2:7a:9e:
         bd:24:6e:9e:91:d9:6e:78:5d:d4:f7:38:e4:92:7c:21:76:50:
         44:18:a6:a1:5f:af:2a:4a:85:29:18:cd:87:48:55:80:d4:ac:
         88:49:bf:fc:3b:78:0e:c9:19:95:e8:1b:b9:d5:77:6d:01:19:
         e6:e5:86:0a:da:73:f1:10:2d:64:a8:f8:fb:5b:5f:09:5d:30:
         05:78:b8:45:8e:03:08:15:0b:bf:9e:74:6e:8b:bf:81:97:e0:
         35:03:aa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:52:22 2025 by rpki-client