Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/815eb95f-c55c-393b-9d70-b5f74aa47bab.roa
File:                     815eb95f-c55c-393b-9d70-b5f74aa47bab.roa (raw, json)
Hash identifier:          aZLEYCfenHhk5Lw2PNEpep1n5rhHKvF3t6kHDMuGwgY=
Subject key identifier:   C4:FD:BE:C1:18:D2:DC:D8:90:D6:4B:F3:84:1B:84:1E:68:6D:DB:7F
Certificate issuer:       /CN=94fbb148-8b1b-4a17-86b2-afd0462d82ff
Certificate serial:       010D0C9F4328584A8B0B63404BB158CC3BD57340
Authority key identifier: 33:CA:F4:30:B0:F1:54:CA:73:7F:9E:49:FC:51:9E:A0:D5:D3:05:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/815eb95f-c55c-393b-9d70-b5f74aa47bab.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     197841
IP address blocks:        2602:f822::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:63:40:4b:b1:58:cc:3b:d5:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94fbb148-8b1b-4a17-86b2-afd0462d82ff
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=4c644081-6aa6-4c0d-9811-1a9ee9c3fc51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d1:20:1b:79:89:35:b5:b4:db:94:1d:a8:65:
                    51:20:02:5f:ce:48:22:65:e3:11:08:32:a8:d7:7f:
                    ae:6b:2b:cd:e0:b1:e5:7d:82:09:41:4e:5a:49:a3:
                    9b:46:42:c5:1a:f0:3b:7b:75:c9:b1:78:98:92:fe:
                    62:05:b0:74:82:88:b1:ac:04:a8:b7:c2:01:07:d7:
                    5f:fa:89:10:85:8e:08:f6:36:8c:18:32:c4:42:58:
                    ce:c7:70:a2:4b:73:bf:d4:0a:a9:22:0b:aa:81:ad:
                    82:41:b9:b8:76:8c:d2:6f:75:70:4c:7b:d9:be:d9:
                    19:02:03:de:00:2b:1e:82:29:50:5a:3e:71:4d:e7:
                    0f:f6:9f:b4:9b:69:f8:ed:19:21:e9:b1:34:ec:22:
                    ae:e2:f3:d3:cd:d3:9c:e8:db:42:e3:4f:41:9e:10:
                    41:ca:57:a3:ac:80:f9:06:ef:d4:28:b7:7c:f2:b3:
                    ca:03:8b:7a:bb:a3:ed:a7:f1:22:c4:d5:54:0a:e6:
                    04:0a:ce:04:14:a4:1f:64:b2:f6:c5:6b:49:e6:43:
                    b3:84:60:19:7c:66:64:01:37:0c:ab:ec:ca:f7:ea:
                    65:8b:b0:fc:b6:58:a9:92:01:8c:9e:23:26:33:05:
                    09:23:75:cd:dd:ef:c6:65:69:24:d8:ce:e5:a0:43:
                    27:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FD:BE:C1:18:D2:DC:D8:90:D6:4B:F3:84:1B:84:1E:68:6D:DB:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/815eb95f-c55c-393b-9d70-b5f74aa47bab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff/94fbb148-8b1b-4a17-86b2-afd0462d82ff.crl

            X509v3 Authority Key Identifier:
                keyid:33:CA:F4:30:B0:F1:54:CA:73:7F:9E:49:FC:51:9E:A0:D5:D3:05:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/94fbb148-8b1b-4a17-86b2-afd0462d82ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f822::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:48:4c:1b:79:b4:9b:ce:9c:5d:42:12:ca:a8:1b:28:d2:42:
         b6:d7:14:3d:39:ea:23:a4:82:c1:7c:08:05:44:84:24:ec:a5:
         75:a1:95:9b:9d:2c:4b:e9:85:e6:85:18:0b:9b:3c:3c:d0:a8:
         6e:e3:0a:bf:f9:9a:3c:df:6d:89:95:61:67:fb:b9:71:7e:7e:
         98:44:2e:d9:05:15:c8:c2:54:82:2f:ab:56:57:15:d3:8b:d6:
         d4:0b:e1:5d:b6:2b:de:82:6a:15:2b:f2:f1:fc:23:93:cf:74:
         0d:68:7b:c9:e4:14:9c:9d:cf:e2:c8:b2:f2:e1:12:90:04:ae:
         d7:24:80:be:3e:c2:55:ee:0a:35:b4:6e:e5:a0:46:f0:9f:d7:
         bb:e0:cd:e9:09:9b:44:43:db:b8:da:b7:88:85:8c:c8:4b:cf:
         a0:97:45:77:35:1b:c0:4e:ac:72:19:ea:33:36:15:e5:75:43:
         f8:4d:4c:eb:e8:ae:f9:76:bb:6c:83:a7:4f:93:5d:bc:38:fb:
         80:74:6c:f6:52:f3:1a:9b:a3:cf:70:8f:f4:dc:e2:b8:fb:e0:
         c5:12:be:3d:d4:d2:41:24:ae:79:25:2a:6e:b0:8e:52:41:ca:
         5c:2f:c1:b3:25:fa:fe:ee:06:13:eb:9c:61:08:53:bb:25:b6:
         2c:16:79:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:05:17 2025 by rpki-client