Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/527011e7-d9bd-3c19-bae5-7c9594021a4e.roa
File:                     527011e7-d9bd-3c19-bae5-7c9594021a4e.roa (raw, json)
Hash identifier:          O8pgd77Fij6LyoCjiWqjCgVXCZtVg/5EhNDp/n1Hl2A=
Subject key identifier:   4D:D1:0D:61:79:E5:4C:B6:7E:AC:56:47:8A:C4:CA:16:64:02:1C:C2
Certificate issuer:       /CN=ed700eac-da0c-4a50-a4dc-8a14e12e0088
Certificate serial:       010D0C9F4328584B1D9C275A86BBC19F280115D0
Authority key identifier: 7C:3D:BC:19:3B:87:45:7D:54:9B:01:DA:B5:06:36:EA:50:66:E1:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/527011e7-d9bd-3c19-bae5-7c9594021a4e.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     401562
IP address blocks:        2602:f747::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/ed700eac-da0c-4a50-a4dc-8a14e12e0088.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/ed700eac-da0c-4a50-a4dc-8a14e12e0088.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:27:5a:86:bb:c1:9f:28:01:15:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed700eac-da0c-4a50-a4dc-8a14e12e0088
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=38bcddfa-f8c5-41e9-8834-9dfa86a893c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cd:71:d7:4b:c7:1e:ad:44:52:a4:cb:7d:2c:
                    1a:e7:d3:cf:cf:71:71:92:11:cd:e7:1a:0f:61:ab:
                    1f:02:73:0b:7f:bf:db:da:db:5c:82:b4:e9:35:48:
                    91:c0:2d:23:c8:26:96:75:29:4b:db:20:6d:c0:f2:
                    fb:1c:79:48:d6:24:8d:25:ba:f2:83:0e:37:a2:97:
                    28:ea:55:e4:91:6e:38:18:a4:2d:3b:34:3e:33:16:
                    a8:c3:19:f3:6a:c0:41:5d:ad:8a:d6:a2:c7:2c:9c:
                    13:86:e6:52:48:30:81:19:20:b8:2e:82:75:88:5d:
                    29:10:a5:68:ff:85:fb:76:7d:de:58:74:d7:bd:d0:
                    5d:01:e3:4c:0c:d5:d1:76:12:40:a4:09:9b:c1:9c:
                    82:a0:6f:c8:82:2f:af:24:de:f9:55:fc:97:07:ab:
                    5a:58:3f:89:7d:5f:62:39:53:d4:10:44:e0:19:e2:
                    f8:92:c2:03:e1:79:e8:d8:e2:a6:78:60:cb:81:b4:
                    3f:84:67:21:30:01:b5:fc:46:92:76:59:42:03:d0:
                    53:25:04:fd:fb:ba:33:90:b5:97:d0:ac:1c:65:9c:
                    66:cb:9e:31:ee:cc:81:83:b2:42:c0:8d:ec:0e:f3:
                    b9:38:d9:1c:d0:a7:e8:8c:96:27:6e:9b:2a:76:36:
                    cd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D1:0D:61:79:E5:4C:B6:7E:AC:56:47:8A:C4:CA:16:64:02:1C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/527011e7-d9bd-3c19-bae5-7c9594021a4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088/ed700eac-da0c-4a50-a4dc-8a14e12e0088.crl

            X509v3 Authority Key Identifier:
                keyid:7C:3D:BC:19:3B:87:45:7D:54:9B:01:DA:B5:06:36:EA:50:66:E1:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed700eac-da0c-4a50-a4dc-8a14e12e0088.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f747::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:30:c1:a2:d1:0c:84:cc:4b:96:e9:b5:18:24:5c:9b:25:01:
         77:bf:11:01:b8:70:5b:f8:8f:f9:a1:cf:42:4a:40:0d:24:22:
         e3:e7:56:74:ca:36:dc:3d:70:25:3f:40:ad:9f:9c:95:8e:5a:
         72:77:07:b4:ac:33:4c:d3:a6:8f:b2:44:2b:8d:7c:05:44:e3:
         f7:3f:72:49:ee:5d:ec:6e:77:17:dc:a8:66:9a:d1:e4:6f:d1:
         b9:ce:69:e0:23:73:db:2e:7d:58:b3:5e:24:98:4b:45:29:7e:
         a8:dd:63:36:db:5d:94:55:ae:92:5c:e8:ba:6d:5d:74:c9:49:
         2a:29:d1:ce:17:88:a4:ea:6b:ff:67:81:14:ac:b2:b3:9b:01:
         f5:69:66:ee:24:ef:04:48:93:e3:ea:6b:ef:38:8f:ec:76:bc:
         cb:93:a3:dd:25:9d:2d:de:e9:b6:3b:7e:5e:45:e5:b7:83:dc:
         a9:c7:c1:0e:3a:08:96:73:3b:2b:74:f2:23:ac:37:c8:bb:85:
         22:c1:11:03:27:04:4f:2e:66:47:4a:f6:99:1a:d7:e4:90:a4:
         0e:b1:f3:39:c2:3a:cd:7e:3e:fd:e7:2e:e7:1e:3e:d9:64:7b:
         09:d7:fb:9c:42:1a:4a:84:71:4e:4f:74:58:12:51:1a:73:91:
         b4:25:0c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:44:21 2025 by rpki-client