Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/ccb58894-bfb2-3e10-9b03-f8056d836ddd.roa
File:                     ccb58894-bfb2-3e10-9b03-f8056d836ddd.roa (raw, json)
Hash identifier:          8gxmPpx9kUPgPPOq0osbwoO81aBPteSwFn/Cq9bj900=
Subject key identifier:   8D:CF:AF:63:F2:36:59:08:A5:C3:98:B9:F1:6B:A6:74:32:07:F8:84
Certificate issuer:       /CN=679b1148-0358-4232-b827-4a6006838da6
Certificate serial:       010D0C9F4328584ADD667386A4C4AA986395D680
Authority key identifier: 85:88:97:A4:88:EB:ED:BE:CF:9F:1A:CD:C7:0D:21:B8:50:37:50:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/ccb58894-bfb2-3e10-9b03-f8056d836ddd.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     8075
IP address blocks:        2602:801:600a::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:73:86:a4:c4:aa:98:63:95:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679b1148-0358-4232-b827-4a6006838da6
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=299005ee-2e1d-4e98-a36d-dbdc5ddeb0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:31:ff:73:b0:32:93:c9:bb:fb:8e:f0:68:b1:
                    46:3f:fd:95:92:60:a3:2c:54:f4:2d:57:e5:b3:87:
                    80:1f:06:92:87:7e:5e:b3:95:1a:bc:fc:f0:18:24:
                    22:a8:2d:2a:fb:01:98:a8:ee:84:06:f2:77:17:56:
                    fa:a7:3e:eb:17:a3:2f:98:c2:26:7d:79:69:12:bc:
                    0e:f7:c7:95:e5:40:5f:a6:84:3b:e0:f8:3f:8d:ed:
                    3f:58:ba:b8:b4:4e:c0:d5:2c:6b:55:f2:fa:7f:af:
                    a1:20:bb:5c:97:5a:e0:9d:02:b4:0b:5d:a7:1a:21:
                    64:9f:b0:67:7f:1e:39:55:27:dd:ce:f7:7c:d2:32:
                    f7:e6:9e:59:ed:7e:4d:39:80:78:53:2f:59:69:0f:
                    6a:ab:34:6a:ff:f8:cf:86:5c:1b:26:c3:71:19:9a:
                    6e:7a:bc:09:7a:60:c9:03:99:4e:f1:08:6f:14:c0:
                    88:57:e4:11:45:07:13:98:5a:b8:33:68:77:7e:12:
                    71:01:33:86:a3:63:49:e4:3d:67:d5:0d:6f:60:f8:
                    e9:f8:2a:06:be:a7:c7:7a:83:28:4e:8a:f2:27:70:
                    d9:a4:8d:5e:c5:bc:c7:f0:c9:a3:b8:61:df:46:a9:
                    fa:9e:7a:c2:a6:75:ed:49:0d:e0:d0:7a:96:f0:cf:
                    83:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CF:AF:63:F2:36:59:08:A5:C3:98:B9:F1:6B:A6:74:32:07:F8:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/ccb58894-bfb2-3e10-9b03-f8056d836ddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6/679b1148-0358-4232-b827-4a6006838da6.crl

            X509v3 Authority Key Identifier:
                keyid:85:88:97:A4:88:EB:ED:BE:CF:9F:1A:CD:C7:0D:21:B8:50:37:50:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/679b1148-0358-4232-b827-4a6006838da6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:801:600a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:1c:e2:69:70:70:7a:e3:4d:02:41:da:6e:95:91:36:c6:9e:
         d2:1f:ff:53:8b:af:5d:78:7a:85:85:eb:2f:aa:10:1d:72:68:
         d5:0e:fd:90:25:21:8a:2e:5f:d8:ac:b8:04:81:31:67:d0:4e:
         b2:43:9f:5c:01:c9:4f:f8:0a:10:77:80:ec:8b:68:35:4c:11:
         54:04:bb:6e:41:6a:13:ea:2c:ff:c4:b1:19:07:10:37:44:a5:
         dd:02:c9:6f:01:44:61:b8:a7:0a:a7:c3:00:20:8f:1b:e3:2a:
         28:75:49:e1:27:e6:37:c4:07:66:01:a9:97:8e:7e:77:df:4d:
         cc:78:55:60:e9:61:e9:21:d4:8f:9e:a5:c2:1b:31:30:01:f4:
         61:5f:35:7d:ee:f0:ff:05:80:fd:b5:b9:37:ab:13:0e:e4:53:
         6e:d8:bf:60:14:d3:58:f6:20:bb:8b:ae:c1:44:94:c5:1e:2d:
         0b:e6:6a:33:38:8f:9f:33:fd:0d:86:31:4e:73:c2:b2:4f:21:
         75:62:8c:0e:fe:03:46:3d:65:af:af:a2:22:1a:89:cf:92:eb:
         d8:35:a1:77:61:b2:88:a5:6a:b0:29:4f:2e:e6:c4:25:28:6e:
         27:b5:0b:0b:e5:b4:25:cd:c3:ef:0d:92:e5:a9:5f:5a:f7:24:
         b2:54:de:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:18:37 2025 by rpki-client