Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/e1794f0e-8e3d-3ae6-9a5b-74d39e77895e.roa
File:                     e1794f0e-8e3d-3ae6-9a5b-74d39e77895e.roa (raw, json)
Hash identifier:          50Jt61z1tmrxI3qMTThYzIxgRnv2xGhnU00XjuqceO8=
Subject key identifier:   01:EB:14:F1:E9:9E:FA:FE:69:AF:C1:4A:B4:F0:52:D5:09:BE:DF:2F
Certificate issuer:       /CN=22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8
Certificate serial:       010D0C9F4328584B047C231EF80F9ED229186820
Authority key identifier: D6:B1:86:2D:3E:38:C4:B5:A9:99:F0:A9:DB:82:7D:8D:E1:B5:1B:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/e1794f0e-8e3d-3ae6-9a5b-74d39e77895e.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     401720
IP address blocks:        2602:f7d8:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:23:1e:f8:0f:9e:d2:29:18:68:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=281d75c7-9586-4f69-9846-ebcc7a98a7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d3:79:7e:59:ba:20:4d:1f:ee:5b:e2:29:1d:
                    55:e3:b7:2b:5d:b7:ee:ab:12:77:7b:b4:dc:fa:59:
                    5f:5e:bf:91:70:8f:0b:c1:62:a2:55:7a:70:3b:a8:
                    de:9d:b9:50:91:95:e1:7f:e9:b2:70:36:bb:ca:a9:
                    1d:2a:fa:ff:99:4b:7d:98:39:b3:7e:a6:ce:35:45:
                    12:db:44:5a:c5:fd:ae:ae:7b:95:b9:1d:07:73:32:
                    24:39:cd:63:69:0f:a3:0d:71:ea:8d:e5:f7:b5:d6:
                    90:fb:ac:98:53:63:0c:6f:60:ca:ee:71:6e:20:24:
                    74:df:cc:34:64:53:72:84:fd:fd:24:10:30:5e:87:
                    93:c8:92:35:d0:e5:ae:cc:f5:cb:3a:2a:db:e8:17:
                    79:42:df:13:c1:4b:33:89:77:56:8c:f9:75:a6:15:
                    56:3e:cd:3c:d5:1c:38:87:1e:95:08:f0:3e:bb:32:
                    33:bf:c7:7c:c7:f3:c3:de:9d:1b:eb:78:f0:f4:f5:
                    ed:b9:86:0b:f1:e5:23:c5:df:5e:f1:9c:ee:b7:ec:
                    9c:ef:08:e7:34:e4:a6:cf:b4:71:cc:4a:07:f7:8a:
                    bd:fe:69:47:00:f5:41:8f:b1:a2:2e:7c:eb:28:7a:
                    af:8f:0b:b1:c1:bc:b8:6b:81:c0:4b:19:d6:4c:85:
                    73:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EB:14:F1:E9:9E:FA:FE:69:AF:C1:4A:B4:F0:52:D5:09:BE:DF:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/e1794f0e-8e3d-3ae6-9a5b-74d39e77895e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:B1:86:2D:3E:38:C4:B5:A9:99:F0:A9:DB:82:7D:8D:E1:B5:1B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7d8:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c7:d6:eb:00:75:fa:e4:26:41:8d:19:f4:98:c4:04:a1:42:
         f0:d9:f2:ed:b5:a7:b9:b8:d2:28:73:9d:8a:fc:c0:dd:03:46:
         96:b8:4e:37:47:59:04:d9:a8:2b:54:1c:51:16:e6:af:02:ae:
         04:59:1b:0b:e1:f5:66:0c:5d:62:fc:2f:b4:d3:b5:bf:4a:03:
         e7:d8:ec:87:59:a3:f6:30:25:4d:43:e5:33:96:ed:23:77:bf:
         64:01:64:cb:f6:21:6b:d0:3d:63:8f:b8:08:d7:ce:14:d8:41:
         46:b6:76:71:f7:1d:be:3e:ab:a6:e3:f5:f8:00:a7:c3:9c:83:
         96:12:ee:de:1c:5d:1d:3a:13:00:9b:dd:73:c0:6a:cb:ac:03:
         9b:00:f3:d2:37:4b:41:bc:5c:c1:9f:1a:1c:18:71:0e:27:e1:
         2e:b7:36:71:8b:f8:42:e6:24:aa:db:6b:15:f7:9c:58:21:bd:
         51:d3:d8:cb:09:8f:f2:ec:2c:17:a4:c5:8b:02:9b:7c:ca:47:
         1c:40:90:99:e4:ba:df:f5:96:b4:be:1a:be:b5:81:de:50:12:
         2c:f0:d3:2f:cd:99:d3:2f:c5:fa:fa:51:18:48:b1:1f:cd:0d:
         64:60:65:57:ce:ee:19:84:16:2f:b7:ec:d6:74:b3:d3:89:df:
         42:6b:6c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:55:39 2025 by rpki-client