Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/0f2f1bf0-6bc8-3568-9ef7-8f737aaba25a.roa
File:                     0f2f1bf0-6bc8-3568-9ef7-8f737aaba25a.roa (raw, json)
Hash identifier:          Wl6z+mfuRCFMVLavrNxIzfDfXO04TjrGOEDUMf/HV8A=
Subject key identifier:   DC:44:01:21:87:C7:BE:2C:59:C6:B6:91:5C:91:C1:F7:77:90:A4:3A
Certificate issuer:       /CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a
Certificate serial:       010D0C9F4328584AA160C52A77F7F0ADE7716D80
Authority key identifier: 8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/0f2f1bf0-6bc8-3568-9ef7-8f737aaba25a.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     213465
IP address blocks:        2602:2cc:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:c5:2a:77:f7:f0:ad:e7:71:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=77f677bd-258f-40cb-91b1-d000400884c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:97:25:40:46:d1:01:11:3a:12:6f:69:23:b9:
                    fb:d5:a6:c5:f6:2a:ee:fe:a5:53:71:29:ec:a9:41:
                    05:a8:32:05:ea:2c:78:50:d2:be:ba:8e:49:a9:1f:
                    da:29:79:f3:f0:02:8d:55:0d:e0:0b:91:d9:1e:ce:
                    d9:96:f9:55:d7:33:03:98:2b:80:58:20:c6:bb:35:
                    ad:9a:06:31:58:c6:5c:ba:c3:db:b3:6c:d8:31:d4:
                    9c:f6:f8:50:1f:19:75:fd:44:a6:6a:9f:36:0a:a9:
                    b6:2a:21:1b:44:48:12:cd:dd:1f:1d:da:ef:ed:4a:
                    80:45:09:10:5a:a3:a0:7e:f8:90:bd:ac:68:ac:71:
                    cf:8e:dc:47:35:0c:09:13:84:16:34:87:26:a0:51:
                    9f:b2:95:b3:67:18:e1:f3:43:fe:df:d7:2a:17:75:
                    74:75:d9:27:49:e0:21:04:0b:17:23:56:3a:fd:c8:
                    84:c6:cc:53:eb:27:6e:1d:3f:73:2f:a5:fe:a1:9c:
                    8f:40:68:a3:66:b9:e2:ab:04:68:49:71:94:ed:a4:
                    6b:43:4c:c2:91:9a:27:b3:75:de:e9:ab:1d:90:c7:
                    a4:af:58:72:1b:e8:6b:08:c9:74:f6:37:e8:da:1b:
                    a6:08:ee:87:06:5c:3b:2a:7f:dc:f6:13:a0:a8:f4:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:44:01:21:87:C7:BE:2C:59:C6:B6:91:5C:91:C1:F7:77:90:A4:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/0f2f1bf0-6bc8-3568-9ef7-8f737aaba25a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2cc:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:eb:92:8d:51:b3:df:d9:ad:4e:b3:26:32:8d:be:4f:6c:d1:
         45:d6:93:08:ab:3d:ed:d6:52:39:7c:54:ed:1d:c8:b5:69:7b:
         95:72:81:5c:a6:bf:1b:a6:64:cc:52:67:c4:4a:47:d8:b4:1d:
         c6:38:ec:e3:10:ef:93:cd:44:e5:9d:f9:66:92:07:1c:0a:07:
         bd:c6:a3:be:d1:ca:e8:1c:7f:83:55:c0:35:c0:21:dd:41:43:
         cd:0c:44:ed:64:6a:60:b8:65:94:76:e6:ca:e1:8e:0e:00:c1:
         b3:85:a9:54:01:11:d9:33:33:01:09:78:3d:f8:e7:b6:bb:55:
         65:2c:0d:92:74:94:63:0d:d7:af:2f:14:40:4e:e1:2a:26:d1:
         c5:dc:45:ed:97:a5:38:0f:d0:b5:a2:f4:db:7b:3e:f7:5b:c4:
         b6:94:cd:1c:fc:64:2b:9d:55:9e:5c:9b:55:7f:27:c3:6b:ea:
         95:7f:7f:b6:90:13:f9:cd:96:92:24:47:c1:b1:ce:96:6b:d9:
         7f:81:f8:16:fb:6d:fb:ab:49:d1:11:46:d3:28:46:26:2a:b1:
         85:62:42:93:7f:47:f7:7d:1b:fc:d8:a6:65:e2:33:fb:fe:ef:
         2c:4f:0b:57:c9:ed:c3:4a:9e:3b:e2:f4:2c:a8:e7:fe:28:6b:
         d0:87:92:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:44:51 2025 by rpki-client