Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/853e6815-3cff-39ed-b794-d2a4d03b5877.roa
File:                     853e6815-3cff-39ed-b794-d2a4d03b5877.roa (raw, json)
Hash identifier:          Xu7FSVpp+n5FMdwPuobT2I1s58UEU6monpYtCehzaog=
Subject key identifier:   53:35:F9:7F:A8:33:98:1F:54:32:7D:03:8C:7B:1D:0A:EE:E5:21:DD
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AD7D128A640BC7298CF9B4F80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/853e6815-3cff-39ed-b794-d2a4d03b5877.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     0
IP address blocks:        2602:107:2b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:28:a6:40:bc:72:98:cf:9b:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=98425665-f870-4548-836a-c694dd625964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f8:2f:45:b6:d3:c0:9c:99:dc:03:27:13:44:
                    89:55:ee:5f:2f:63:ce:99:1f:26:1b:6a:70:31:90:
                    c4:90:6f:cb:f6:d4:06:77:f2:ec:7e:52:9f:08:44:
                    2c:c7:35:d2:7a:51:79:66:7c:f7:3d:32:b8:07:66:
                    e8:e2:49:fd:42:9a:7c:28:40:2d:8c:dd:dd:85:d0:
                    a7:fe:f4:77:ad:0c:b3:66:ac:37:99:11:82:d1:d5:
                    05:e7:64:f4:14:1e:70:9e:0f:ec:3b:97:90:2d:3e:
                    47:f3:94:a9:53:bc:6a:5f:55:7f:96:29:f4:e5:a7:
                    f9:a4:f7:5e:e1:5e:70:31:df:97:8d:47:c5:c4:b3:
                    dc:ed:f0:3f:91:45:81:72:4e:c0:4e:ca:92:93:73:
                    e8:74:31:7c:8d:a3:1f:2e:b8:75:81:5b:46:74:2d:
                    25:e8:23:63:84:ac:cd:54:d7:d1:92:5f:de:30:a0:
                    85:ad:9a:2e:b3:9f:3e:cb:cd:90:06:bb:bc:1a:dc:
                    b6:58:55:41:f4:98:f1:8b:e4:51:f0:38:bc:18:a9:
                    46:c2:ac:c8:1a:1b:b3:62:90:5a:86:0f:59:5b:2d:
                    e7:36:60:17:ac:7f:80:3d:46:b4:a6:18:d1:45:a2:
                    1e:98:a6:e1:72:63:cf:7b:ef:70:fe:4f:b2:a7:d3:
                    73:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:35:F9:7F:A8:33:98:1F:54:32:7D:03:8C:7B:1D:0A:EE:E5:21:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/853e6815-3cff-39ed-b794-d2a4d03b5877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:107:2b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a4:d8:ff:ae:af:99:b1:70:61:e0:a3:7f:35:a9:a3:66:05:
         c2:22:6d:a1:9a:e4:64:20:01:4b:58:08:f6:b7:76:9e:42:61:
         47:06:8c:46:53:8b:8f:09:9e:55:d2:4b:5e:e9:3b:45:e6:dd:
         65:d4:95:64:ff:65:b2:92:93:61:c4:d2:99:3e:77:4a:83:79:
         95:1f:ff:a1:44:4e:d3:62:4d:64:0d:38:8c:0c:db:c4:39:4e:
         d5:92:c1:46:4b:2a:ce:55:b9:65:7c:70:2d:06:d3:e2:f1:6b:
         d8:b5:8c:03:16:42:0f:1b:9d:e9:75:67:3b:e7:8e:03:4a:27:
         d2:da:33:fc:80:43:cf:43:6d:04:a9:e4:0d:f4:ad:d3:3c:ee:
         22:84:1a:91:77:b6:41:d4:46:93:46:46:92:1b:cb:5b:c5:db:
         e7:f2:c1:25:ee:0f:4f:7c:54:4f:b7:91:4f:15:4d:8a:15:e3:
         8f:d8:5f:10:71:10:fc:40:63:b9:3c:1a:ee:2b:32:2e:9f:e6:
         36:f8:f4:47:d2:26:ab:84:22:c4:16:67:88:b9:22:bd:77:0f:
         44:e8:3a:b5:8d:8c:31:fe:6f:d4:99:16:58:1d:e3:3a:82:b1:
         43:5c:39:c3:33:90:27:24:c6:b3:67:e9:59:c8:d4:a7:c4:49:
         47:3f:63:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:32 2025 by rpki-client