Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/22cf0846-fd39-3926-8f9b-709b5a41a148.roa
File:                     22cf0846-fd39-3926-8f9b-709b5a41a148.roa (raw, json)
Hash identifier:          YfWJznv113EVy5wmzaldfm9H8CwswM3mFrCJI0Ma/3U=
Subject key identifier:   D1:51:1C:43:3B:44:6F:A6:63:C5:41:30:B4:EF:43:06:86:73:F0:E8
Certificate issuer:       /CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
Certificate serial:       010D0C9F4328584A8F3B6EC81D5DFA4DF984E180
Authority key identifier: C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/22cf0846-fd39-3926-8f9b-709b5a41a148.roa
Signing time:             Fri 18 Jul 2025 13:01:05 +0000
ROA not before:           Fri 18 Jul 2025 13:01:05 +0000
ROA not after:            Thu 16 Oct 2025 13:01:05 +0000
asID:                     209481
IP address blocks:        2602:f93b:400::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8f:3b:6e:c8:1d:5d:fa:4d:f9:84:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
        Validity
            Not Before: Jul 18 13:01:05 2025 GMT
            Not After : Oct 16 13:01:05 2025 GMT
        Subject: CN=f53c0ecd-2b05-48e4-8749-06c8e03f498e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:02:85:09:ca:85:79:16:93:27:da:29:e2:
                    b0:6f:09:c1:26:e9:c1:b1:f6:2c:a8:a4:12:40:12:
                    e9:66:b4:a5:ef:d8:94:f3:d1:13:ed:d0:10:30:02:
                    8b:60:a7:37:a2:47:3c:6b:5f:0c:5a:6a:1c:b7:31:
                    d3:b3:48:20:be:93:37:64:80:37:d8:01:94:9a:fc:
                    64:03:a8:16:df:da:0d:a8:26:2d:60:39:0c:b9:a3:
                    ff:1c:7b:ae:2d:db:35:3f:71:56:e5:25:63:0b:4e:
                    e0:10:c1:65:02:9a:52:bd:6d:4c:d1:37:63:c1:8d:
                    7a:9a:9e:59:1e:73:96:07:88:dd:0e:d6:d3:c0:d6:
                    19:92:a3:ee:f0:2a:78:3a:6f:2d:86:2c:68:90:50:
                    9d:a7:a4:fd:3f:e7:ef:b2:94:83:4f:bf:90:73:a8:
                    20:4a:4a:5c:c6:7c:87:67:4f:c1:c0:de:93:65:1b:
                    da:40:c7:6f:c9:af:0e:c5:2d:38:5d:ee:43:2c:c2:
                    c7:30:3f:74:0a:c8:9c:9a:7b:d2:2e:99:a1:5c:cf:
                    61:21:85:33:2a:03:6e:3a:52:df:58:21:fe:f5:21:
                    2b:d6:8b:56:98:7f:ba:38:26:45:a3:aa:7e:08:c0:
                    b8:5a:a5:ae:1b:59:62:52:e5:49:df:45:f1:c7:6c:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:51:1C:43:3B:44:6F:A6:63:C5:41:30:B4:EF:43:06:86:73:F0:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/22cf0846-fd39-3926-8f9b-709b5a41a148.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f93b:400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:a1:ae:ac:94:d5:f0:2f:22:3d:8f:19:8e:22:3c:c4:32:c6:
         02:de:29:c1:f5:ae:eb:23:f4:13:ef:a3:5b:49:f2:07:4e:8f:
         93:85:f4:f6:e3:7a:9f:2a:52:b8:d6:f0:b6:47:e2:b3:e8:94:
         f1:1c:2f:72:ad:db:63:bb:e5:ca:f9:c0:13:0f:46:a3:61:9a:
         e2:66:18:15:9b:ae:74:93:a6:25:01:d7:73:7f:32:a8:f4:b0:
         03:ef:23:e4:cb:70:05:57:ab:ed:3a:3f:81:aa:f6:06:dc:ef:
         67:38:d3:45:54:95:b3:8c:c7:5d:d0:21:0a:ea:0a:94:04:c4:
         57:1f:66:e9:85:d9:d5:16:34:37:ed:18:98:fe:d1:2e:61:62:
         37:d0:fe:d6:5b:45:66:25:dc:45:fb:4e:9e:5b:c7:f9:2f:2e:
         e9:8c:eb:23:6d:4f:11:1f:48:17:89:fc:62:ab:64:cc:cd:64:
         bb:c3:36:e2:90:c6:39:22:1e:a5:01:37:7d:c8:38:b4:6b:36:
         4c:f7:27:9b:c8:86:11:8d:b8:f2:9a:1c:48:62:29:41:8e:9e:
         2e:25:88:cc:35:8a:68:e8:9e:7f:e1:45:11:a1:10:d8:c2:64:
         21:de:12:c8:a8:43:32:25:18:01:93:b7:94:cb:ff:c3:4b:2a:
         d6:4c:2d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 11:51:58 2025 by rpki-client