Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/d5317dbc-5d9a-34fa-a6fd-e14d6df00eb3.roa
File:                     d5317dbc-5d9a-34fa-a6fd-e14d6df00eb3.roa (raw, json)
Hash identifier:          v6bYAEWFcjKG3fsZvRb4T2zn9AT71AR3H9szOozN1Kk=
Subject key identifier:   94:C3:A9:E5:4F:B4:48:FA:CF:B2:6E:D2:06:29:60:C1:93:B7:B4:3D
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584A66C06F32D64A54F6D0688B40
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/d5317dbc-5d9a-34fa-a6fd-e14d6df00eb3.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     398395
IP address blocks:        2602:fb54:146::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:6f:32:d6:4a:54:f6:d0:68:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=7eaf59a5-b57f-4ac2-809a-1a48eef09c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:92:44:fe:91:61:09:fb:86:69:52:cc:79:fc:
                    11:d8:85:c2:4c:3f:71:9b:ca:f7:97:83:74:b9:64:
                    98:b0:be:d0:33:61:00:5c:3a:56:55:b8:8f:2f:63:
                    f1:95:13:4b:fa:85:56:a2:a2:a9:89:2f:a6:0a:04:
                    e2:ed:47:46:37:05:e5:93:fa:08:cb:37:a0:55:b6:
                    0d:20:66:12:1d:c2:3f:15:c0:6b:7a:8d:9c:81:ff:
                    6e:84:3d:87:5f:2b:c0:06:48:a0:f1:73:f1:5a:af:
                    eb:e8:86:87:95:44:4e:47:d9:ad:09:c3:ec:e8:68:
                    12:63:43:bd:65:a2:c9:8e:b6:09:a5:b2:fd:db:15:
                    53:9e:dc:06:47:43:a2:f7:3e:60:c6:79:71:fd:04:
                    72:4a:d6:8d:35:f7:f7:8b:d3:e0:9b:59:8a:48:40:
                    97:03:0a:1a:03:d4:b9:7a:d1:a7:47:f7:73:cf:7d:
                    36:12:d4:b7:c5:e6:65:c4:07:87:52:b7:5e:d7:b4:
                    20:b5:9f:ce:4f:41:fc:74:5b:3a:09:06:5a:a7:12:
                    10:f9:a7:09:a2:c9:dc:05:65:7a:77:0b:6c:d9:aa:
                    6a:4a:0c:f6:de:96:a1:c6:74:18:70:59:c3:94:81:
                    80:84:7b:a0:6c:9a:9f:b7:51:25:86:3b:c0:10:6a:
                    0d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C3:A9:E5:4F:B4:48:FA:CF:B2:6E:D2:06:29:60:C1:93:B7:B4:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/d5317dbc-5d9a-34fa-a6fd-e14d6df00eb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:146::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:0e:01:4a:6f:27:a3:9f:a5:54:e8:39:c3:6a:b1:b8:38:f9:
         25:ed:a4:37:fc:c3:b6:a5:c3:9f:c4:a8:4d:06:f8:18:99:d1:
         fc:6e:8b:7c:6c:b3:23:2a:85:18:50:9b:5a:12:1f:4d:6a:3b:
         16:96:c7:e7:62:80:65:a4:de:5c:d5:4a:a8:e9:e7:1c:a7:cc:
         e0:d2:2f:db:1b:e5:d1:9c:35:a3:2a:03:55:bb:94:ad:db:e0:
         02:24:b9:6f:29:27:b7:6c:74:83:c4:5a:fc:11:73:0e:ed:82:
         7c:92:48:f9:90:34:1d:e2:1c:0a:d2:c3:7c:4a:7b:77:d1:2e:
         3c:08:b0:03:e7:b4:d4:9d:1a:ea:0f:86:04:8e:74:1e:19:14:
         89:dd:84:78:24:15:63:f8:1c:4c:7e:54:c8:dd:15:d9:ef:59:
         01:ca:ad:5f:e3:65:a8:e0:06:fb:8b:b0:f9:6b:09:fc:29:2c:
         ac:b5:3a:d1:84:b0:dd:2f:fc:4d:ab:80:a8:b0:df:8a:ce:dd:
         0b:5e:f5:07:e9:6e:66:b5:77:74:26:8a:a1:25:65:44:eb:d6:
         00:e1:59:88:3f:a9:58:a9:6b:3d:d2:a8:e5:38:e2:c5:ff:cc:
         9c:23:c1:0e:bf:da:c1:27:38:b1:89:ec:7d:ba:b8:5b:98:8c:
         cd:70:59:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:23:13 2025 by rpki-client