Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/4aefe46d-a1ac-3521-a56a-a07d158cf3bb.roa
File:                     4aefe46d-a1ac-3521-a56a-a07d158cf3bb.roa (raw, json)
Hash identifier:          1oJYISV1xk4jDWJeCsv8BB3Kz6CCsA5meAzRj79unsc=
Subject key identifier:   07:0E:03:A5:EC:B2:3D:DE:05:E9:1A:C5:CA:F1:E4:5D:3F:64:36:5A
Certificate issuer:       /CN=9af44307-21f9-411b-ba04-dedf105fd206
Certificate serial:       010D0C9F4328584ADD669B842EC84528CCCBC6C0
Authority key identifier: 73:39:24:7A:51:CC:FB:32:E2:8F:DB:CD:D0:3D:8E:32:83:F7:E9:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/4aefe46d-a1ac-3521-a56a-a07d158cf3bb.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     54365
IP address blocks:        2602:f6c6::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:9b:84:2e:c8:45:28:cc:cb:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af44307-21f9-411b-ba04-dedf105fd206
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=d74f0fa0-485b-4296-88d9-320cc5f57d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ff:44:41:37:85:03:26:0a:94:10:50:92:a9:
                    fc:23:d8:53:40:a2:91:d3:e2:db:5a:0b:a5:d3:ca:
                    6b:1a:9b:22:20:6c:c5:fb:1d:47:9d:9e:5d:2e:4e:
                    02:18:9d:6d:19:45:d7:03:41:b0:bc:19:29:78:30:
                    09:93:fd:7b:f0:d7:70:7b:fc:d1:05:40:b7:a2:6e:
                    e8:b6:3e:58:04:b3:4d:bb:3c:28:e3:df:e4:6e:ec:
                    07:db:ce:d9:ba:25:8b:54:fc:ce:1c:f0:69:dc:24:
                    a0:d7:e6:e7:02:0f:b3:e6:10:78:ba:0a:a2:57:15:
                    6f:d8:9c:9a:64:3d:3e:08:7c:ad:07:8a:85:94:f5:
                    15:28:56:06:a7:e4:9c:c6:74:02:d5:3e:9c:08:94:
                    4f:ee:fd:7d:32:05:14:a0:d2:92:24:c4:1e:86:8a:
                    b6:90:47:95:5f:d8:dd:83:7f:fa:52:36:e2:77:22:
                    1d:74:b7:c4:f5:e0:55:16:26:c8:c0:6e:6b:3f:cf:
                    1b:ec:19:cc:13:73:9c:a8:12:30:e4:80:ac:05:55:
                    30:15:1b:0a:2c:17:e3:5f:45:58:ed:92:00:76:8b:
                    3a:94:9c:92:93:1c:ac:dd:6c:64:07:0e:79:c1:e9:
                    93:44:5a:9d:ec:ea:0a:0a:64:da:9f:61:f9:d9:78:
                    65:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0E:03:A5:EC:B2:3D:DE:05:E9:1A:C5:CA:F1:E4:5D:3F:64:36:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/4aefe46d-a1ac-3521-a56a-a07d158cf3bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.crl

            X509v3 Authority Key Identifier:
                keyid:73:39:24:7A:51:CC:FB:32:E2:8F:DB:CD:D0:3D:8E:32:83:F7:E9:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6c6::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:8f:ec:14:f5:85:9c:8e:1f:e3:1b:48:b9:91:df:f4:ef:43:
         34:69:af:0d:8d:12:fc:16:f6:e7:63:8a:68:79:10:1f:a0:4b:
         79:ca:6e:a2:5e:f1:6f:ff:22:ba:27:66:a4:3f:a9:48:8d:0b:
         49:c7:25:40:58:c3:10:98:f0:e1:bf:f4:4b:52:08:77:c8:9c:
         4f:7e:3d:a4:77:a8:f1:7d:ed:7a:8a:80:13:d5:ca:19:ff:1d:
         11:d0:55:08:35:6b:0f:63:d5:6f:fc:1a:95:4f:e5:aa:c8:15:
         4b:9e:5a:9d:06:75:d3:9e:4c:c0:ee:1f:a1:1f:4c:0a:0a:71:
         75:aa:e3:ba:6e:ab:db:c6:29:64:15:df:77:60:0a:9f:bd:60:
         ee:b6:87:28:11:50:10:8f:72:0a:78:86:aa:9c:5a:15:09:74:
         a5:47:8f:07:f2:2d:0a:fe:36:63:ce:1a:48:4b:a6:e4:bc:3d:
         0d:d7:8a:aa:e6:56:63:e6:b6:7f:18:a6:25:a2:0b:46:65:9b:
         cb:50:5a:19:07:2d:96:fb:38:4b:63:6f:e5:f2:bd:51:95:5d:
         a5:71:56:1c:23:21:85:ef:c9:34:74:0e:d8:45:0f:37:5b:07:
         a6:af:e0:b3:19:d5:62:1e:fe:e4:7e:b2:4a:36:64:9c:92:b4:
         40:2b:87:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:15:13 2025 by rpki-client