Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa
File:                     ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa (raw, json)
Hash identifier:          0Zcgoq7nIBvyEUA6l0H+oPpjCETUwLpuHXPNWrvwxv8=
Subject key identifier:   7C:96:56:16:DC:BC:0C:2A:7F:B1:A2:A5:58:32:97:19:70:B8:B8:12
Certificate issuer:       /CN=04bd1965-5757-479c-b2af-44967b5e0539
Certificate serial:       010D0C9F4328584AFC1BF5B7A66490A7F444F800
Authority key identifier: B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     400671
IP address blocks:        2602:fb7e::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:f5:b7:a6:64:90:a7:f4:44:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bd1965-5757-479c-b2af-44967b5e0539
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=278beef1-2b66-4033-b76f-a25962f7637f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0d:4f:ef:c8:a3:f8:b9:62:1e:68:9b:30:8b:
                    a3:7f:98:60:d2:61:ec:15:c7:ff:27:71:09:4a:b9:
                    f3:24:50:8c:16:06:23:2f:89:1b:9b:30:ef:44:1a:
                    1d:4b:cc:23:ce:01:57:0e:1f:f5:6e:bb:27:13:d7:
                    0c:fa:71:e4:15:d2:d3:00:39:76:04:be:8f:da:ec:
                    9b:41:1e:fb:ed:a4:f9:74:4d:1d:12:92:00:59:15:
                    46:1b:55:ec:4c:ae:df:e8:4c:86:c4:54:c4:9d:ce:
                    0f:3f:8f:8c:d2:03:bc:66:50:48:32:5b:d6:c9:ae:
                    b6:1c:67:69:e0:5f:d9:82:f5:e5:f4:76:f8:1b:fb:
                    33:58:71:d5:50:10:0a:36:31:ec:e1:56:fc:f5:5c:
                    67:25:c0:e7:97:52:8c:08:87:c4:23:aa:79:35:1d:
                    d7:60:5c:ad:49:0f:88:60:d3:94:43:61:63:07:96:
                    61:4a:34:b9:b7:1d:40:e0:41:d6:b7:b5:91:4e:ff:
                    03:9d:36:ed:2d:60:fd:56:3e:70:0a:ad:d5:5b:e7:
                    76:76:ac:74:ed:99:f9:c4:10:a2:78:b7:35:a5:19:
                    59:95:8c:b6:df:ee:14:24:39:ed:37:0c:db:71:7b:
                    fb:35:6d:01:49:8c:67:47:05:10:4a:c9:d0:25:c5:
                    9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:96:56:16:DC:BC:0C:2A:7F:B1:A2:A5:58:32:97:19:70:B8:B8:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/ad21d0e5-9b1e-3eab-9a5b-b8298a2e71cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539/04bd1965-5757-479c-b2af-44967b5e0539.crl

            X509v3 Authority Key Identifier:
                keyid:B5:78:2D:55:7A:A0:51:AA:E0:15:64:BB:40:15:08:8D:34:54:FF:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04bd1965-5757-479c-b2af-44967b5e0539.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb7e::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:8f:4f:17:86:c5:c3:bb:65:ff:28:48:7e:b1:42:66:f7:3e:
         56:68:bb:0b:2b:ff:ba:33:5f:b8:45:cf:a4:45:b8:aa:ce:fc:
         ee:a3:6f:94:b9:de:90:eb:f4:9d:fd:4a:df:fc:db:fe:e6:5c:
         ff:7e:1b:ad:4a:20:fc:b8:56:e0:ed:a7:ca:f9:d1:71:b1:21:
         d9:86:fb:51:6a:92:28:de:3f:d1:9e:13:35:5c:4b:07:b5:4c:
         ff:a1:39:a5:90:48:52:83:f9:cf:da:65:07:c3:3e:96:90:77:
         e7:1e:3e:3f:b1:27:84:ce:3a:88:ed:de:9f:36:eb:7e:9e:a2:
         3c:bf:38:a9:62:3a:66:8e:46:78:9b:15:34:14:f6:84:07:70:
         c0:ad:22:8e:cd:f2:02:63:f1:48:f7:ad:11:c2:ba:de:df:0c:
         8f:6b:43:8c:87:cd:44:fb:d7:51:f5:41:20:4d:02:a1:fa:4b:
         6b:44:98:42:bc:8f:70:a9:39:c1:7e:1d:83:f7:52:25:e0:bd:
         94:35:2e:0b:b4:b8:50:6e:7e:7a:3a:9b:1c:1d:ea:83:09:85:
         9e:8e:d1:20:22:01:bd:b4:71:ec:84:db:44:c0:f2:dd:91:fc:
         41:4b:e3:ce:0b:10:4a:0b:05:2c:9e:cb:2c:74:a2:d1:c0:0e:
         32:ac:76:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:33:05 2025 by rpki-client