Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/e460a3d4-77a9-3703-a570-b84497ae152e.roa
File:                     e460a3d4-77a9-3703-a570-b84497ae152e.roa (raw, json)
Hash identifier:          aPsO01feyqhfw5CUEaf7O5i6W+SpZVhSBHo/4fa3r4s=
Subject key identifier:   81:0D:BB:31:1F:33:17:12:D8:47:DC:49:EC:BB:C7:AB:A8:26:E5:FD
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584AE9F67F0E98F66B1894E49000
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/e460a3d4-77a9-3703-a570-b84497ae152e.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     22400
IP address blocks:        2602:ffb7:596::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:7f:0e:98:f6:6b:18:94:e4:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=67553204-28e3-4ab1-bb8e-b67397bffc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8d:42:e8:80:f2:e5:c1:33:37:09:1b:64:e2:
                    20:5d:dd:b1:d8:d5:f9:14:b0:ff:5a:e1:06:90:dd:
                    e9:28:e3:e7:2a:f7:e4:8f:4a:48:56:3c:d7:a2:d7:
                    6c:23:b0:bb:36:04:02:a4:68:4a:90:89:37:18:89:
                    b5:b2:50:c3:28:e8:4e:ff:9e:27:8d:4a:0e:ec:20:
                    2c:46:a0:27:1d:45:61:00:21:b0:86:b2:83:3f:5f:
                    8a:dd:4b:98:f4:de:be:62:48:0a:c2:d0:3e:52:af:
                    e4:39:42:90:1b:58:b5:3c:81:85:7d:a4:25:50:8c:
                    ab:7f:a7:f5:17:05:2c:00:52:ab:a7:56:fa:55:5d:
                    9d:aa:aa:c7:b9:77:fc:f6:2b:5f:51:dd:49:ae:f8:
                    86:90:a5:07:51:25:6b:bb:be:64:cd:ff:f1:0b:5f:
                    bb:8e:17:96:d0:69:df:e0:27:57:af:1c:37:a5:b8:
                    ba:0b:20:13:7c:aa:a9:25:b4:87:f6:45:fa:65:ba:
                    b7:95:aa:63:d4:3b:6d:2b:bc:bb:8e:e6:0e:30:8c:
                    6a:bd:c9:f9:cb:8d:66:1f:ec:ec:bf:4c:f8:67:d5:
                    a8:81:75:73:36:43:5d:1e:b8:c3:0b:b4:de:b1:1d:
                    aa:9d:96:a7:b0:21:86:80:b1:89:52:17:bd:34:d1:
                    0c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0D:BB:31:1F:33:17:12:D8:47:DC:49:EC:BB:C7:AB:A8:26:E5:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/e460a3d4-77a9-3703-a570-b84497ae152e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffb7:596::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:2d:30:6f:4c:61:09:ae:ba:3a:48:9b:68:b1:9d:bb:2c:39:
         46:04:0f:6d:7b:53:4f:93:24:79:7f:af:04:35:32:68:fe:f6:
         c0:a4:59:5d:78:45:aa:42:4c:cc:3f:62:ea:10:04:f5:4d:ed:
         fe:58:fd:6d:66:dc:57:eb:7d:f9:ad:8c:01:6c:b2:ff:7b:23:
         ce:85:6d:5a:ec:41:ef:42:d5:68:74:7e:4b:f7:b3:da:13:cb:
         1e:26:ed:5e:11:a5:bd:4a:7a:d9:e1:7e:06:7b:da:c7:37:39:
         e6:8f:29:4d:e9:68:97:e4:7b:0f:4b:04:86:c1:ff:33:39:ee:
         60:1d:ac:51:3d:d1:0f:1e:8f:f4:2f:2d:dc:1c:25:c4:74:e8:
         40:56:6a:74:b0:87:bb:bc:94:93:07:93:57:b2:a8:04:ff:82:
         28:9a:55:d0:28:90:69:27:45:bc:82:a3:83:95:a1:b0:76:3e:
         e8:36:2d:4c:31:5d:da:2f:31:ca:dc:cf:63:54:ef:d0:d2:0d:
         7a:46:8e:14:11:ea:16:0a:f1:79:bb:ab:16:e5:ed:5a:f3:13:
         86:7e:5a:15:38:eb:be:4c:f0:2b:01:8a:14:4c:90:b5:b7:f6:
         98:16:c6:86:6e:67:6e:a5:23:0f:f2:6d:6c:e0:6f:fd:dd:8f:
         eb:79:ed:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:46 2025 by rpki-client