Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/896b036b-108b-332b-bc99-80c95a5b6278.roa
File:                     896b036b-108b-332b-bc99-80c95a5b6278.roa (raw, json)
Hash identifier:          HWXBpqF36VIHTM5lo36BntZcC9UXmo7kDb+zDP40pNA=
Subject key identifier:   C8:47:6F:1A:8F:CB:78:D0:FC:DB:7C:CB:E5:FD:CC:2B:CC:34:3C:CE
Certificate issuer:       /CN=66610284-035b-4928-833d-55f67bcdadc1
Certificate serial:       010D0C9F4328584A4F05C680CCF9A0057DA1F4C0
Authority key identifier: 32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/896b036b-108b-332b-bc99-80c95a5b6278.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     400587
IP address blocks:        2602:fb95::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c6:80:cc:f9:a0:05:7d:a1:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66610284-035b-4928-833d-55f67bcdadc1
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=5317971f-156d-48b7-852e-2bf06f5e84c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cd:f1:71:ea:e7:d8:e8:3b:2d:d5:f1:3c:f1:
                    a4:9b:ef:5e:92:10:ec:7e:ed:fe:91:f0:8f:6b:31:
                    44:75:07:1d:5f:78:cd:32:5e:a4:f1:55:c0:0e:e6:
                    45:bc:89:1f:11:1c:8a:36:e2:54:06:4e:31:77:83:
                    7a:82:d4:de:c5:43:ef:54:b7:f7:33:f5:ed:47:44:
                    3a:8d:44:6f:60:7e:a9:0e:c1:23:d2:01:0c:67:e8:
                    26:5e:da:fa:b7:a5:28:a3:6c:6e:08:37:ed:45:b2:
                    d8:7e:6b:4e:11:bb:5c:27:8b:04:f2:d7:fb:27:23:
                    2f:43:7b:1a:93:5e:f3:c2:9a:57:16:17:65:a8:e0:
                    ce:14:de:4c:93:5c:f6:a1:94:81:de:6b:0e:c9:e2:
                    e9:39:b7:2c:1a:55:48:9e:1d:bb:a7:64:96:39:91:
                    e7:34:0d:fa:4f:82:5e:29:db:f3:43:66:74:0b:37:
                    44:a9:b5:11:fe:f9:18:06:24:2d:da:9e:8e:7d:1a:
                    bb:59:d9:53:66:fe:3a:ae:34:7c:1f:77:47:2f:ac:
                    79:c6:4d:aa:ec:f5:6b:fe:f7:e2:4e:94:54:36:11:
                    40:08:52:2f:db:c3:77:0d:be:f1:38:d6:3b:f1:f7:
                    fb:03:b3:f5:78:c2:ca:f5:67:0e:a3:3a:a6:ce:ea:
                    e9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:47:6F:1A:8F:CB:78:D0:FC:DB:7C:CB:E5:FD:CC:2B:CC:34:3C:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/896b036b-108b-332b-bc99-80c95a5b6278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1/66610284-035b-4928-833d-55f67bcdadc1.crl

            X509v3 Authority Key Identifier:
                keyid:32:AF:D3:AC:41:06:54:F4:2A:D6:37:1C:C5:76:F9:3A:2A:AA:30:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/66610284-035b-4928-833d-55f67bcdadc1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb95::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:70:e5:4d:cc:d6:92:2e:e8:9d:26:07:de:29:6d:6b:8a:a5:
         51:f0:e3:4d:2c:b7:97:fc:4b:9c:e0:56:11:0d:4c:c6:d6:74:
         3d:a1:2e:45:40:7a:1e:2e:4a:0c:9c:1a:e3:3f:b7:39:a7:c2:
         fa:8f:4b:b1:7d:d1:3e:46:3f:fa:78:3a:c8:ee:56:8b:6c:b5:
         12:4c:63:0b:46:f7:5d:a0:f3:67:3f:6d:aa:14:6f:7e:4e:28:
         ed:a5:9d:29:5b:9a:a8:b8:00:b2:7c:02:50:35:10:79:82:c2:
         13:8b:00:57:df:76:d1:be:39:b3:57:b6:3d:d1:ec:54:e0:ca:
         24:37:2b:66:28:bb:b1:0f:8d:b8:e7:94:a5:e4:cb:a3:64:ea:
         64:e0:ae:80:5f:44:81:d4:aa:db:2e:37:de:41:d2:e7:a6:b8:
         9b:5f:09:85:32:f2:94:12:27:7b:19:a3:fe:08:9d:3d:c9:07:
         a2:08:7d:93:34:30:91:e6:d6:1a:df:df:14:d4:42:15:f1:63:
         4c:0b:00:f4:13:01:47:4b:1c:35:16:23:d5:a8:df:39:be:6d:
         dd:24:4a:7e:01:14:4b:04:a0:39:25:ca:ab:2d:b4:69:d0:cc:
         f2:82:13:88:d9:5a:b6:f9:5e:5a:09:fe:4e:bc:38:17:a3:f4:
         77:b6:4c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:46:27 2025 by rpki-client