Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/84a107d7-338d-3ac2-b910-f512bf88e161.roa
File:                     84a107d7-338d-3ac2-b910-f512bf88e161.roa (raw, json)
Hash identifier:          ES80yek/jreXCg5vjg2UDYCDn2YrOrtM/PhJZA1o5hI=
Subject key identifier:   CD:4F:69:BC:F5:CE:8E:C4:5E:12:1F:81:6A:56:5A:B5:99:EF:31:AF
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F4328584A979B7B0FEB42548F82120C00
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/84a107d7-338d-3ac2-b910-f512bf88e161.roa
Signing time:             Mon 21 Jul 2025 13:01:04 +0000
ROA not before:           Mon 21 Jul 2025 13:01:04 +0000
ROA not after:            Sun 19 Oct 2025 13:01:04 +0000
asID:                     399122
IP address blocks:        2602:fcd5:40::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:97:9b:7b:0f:eb:42:54:8f:82:12:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Jul 21 13:01:04 2025 GMT
            Not After : Oct 19 13:01:04 2025 GMT
        Subject: CN=a6e5f4dd-27fc-491f-a7a6-6df7ec1c1ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:84:35:c2:a4:57:ab:22:19:03:e3:11:69:1a:
                    6f:fd:20:99:82:cd:e4:63:aa:c6:66:5d:e6:e8:da:
                    a9:85:be:65:10:1a:b5:cc:59:64:d2:0c:e2:9e:0e:
                    08:99:f0:97:ab:52:fc:df:85:20:7c:c1:bc:b2:cd:
                    ce:07:45:1f:a4:00:9b:44:46:f1:f9:d8:7d:5d:d3:
                    bb:5e:ae:b9:cf:cc:09:35:57:64:e6:69:df:0f:16:
                    74:fb:a3:29:c4:28:90:b5:00:ab:a0:d8:69:f8:fd:
                    0a:f2:de:b9:11:d0:82:1e:b9:66:4b:11:9a:eb:a2:
                    da:73:fb:b8:c5:47:82:76:2f:5c:1e:f2:df:e5:09:
                    f3:6f:0b:13:0a:db:79:dd:0b:01:7d:97:5a:22:34:
                    aa:32:c5:91:60:c7:4f:58:47:1b:47:15:96:9a:87:
                    d0:ae:5d:d6:a4:8e:df:7f:99:95:d4:ff:95:97:45:
                    f5:d3:1c:ee:03:aa:4b:b8:fb:d0:79:31:47:3d:ad:
                    43:77:7c:44:8c:1b:0a:f8:44:ce:2b:03:6c:2f:84:
                    0c:c0:43:6f:fe:c0:b2:09:7b:70:bb:35:8c:99:fa:
                    b3:e4:e1:15:e9:22:cd:cf:2c:0b:b5:28:6e:55:c9:
                    65:2c:23:64:b3:da:61:b0:a7:d6:ba:0f:31:9a:47:
                    1b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4F:69:BC:F5:CE:8E:C4:5E:12:1F:81:6A:56:5A:B5:99:EF:31:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/84a107d7-338d-3ac2-b910-f512bf88e161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd5:40::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:39:2f:f6:28:40:4e:d0:82:e3:12:a5:36:9d:2c:6a:e0:de:
         9e:37:7a:13:da:fb:38:a8:d6:30:b3:1a:72:e2:8e:64:72:79:
         1b:74:c0:1f:38:64:5a:f7:6b:cc:75:4d:61:2a:ca:2d:ef:e7:
         f2:8b:26:e3:ea:8c:5d:b8:55:5f:a3:db:71:67:f3:88:55:db:
         2c:76:f0:70:25:34:12:1d:b4:c9:4d:4c:a4:cf:fe:23:5b:cd:
         07:8d:68:92:fd:c7:88:ac:fd:ea:92:45:76:e6:6f:d1:78:60:
         f6:d5:47:4f:a1:d1:ee:1d:1c:5d:a0:8e:bd:e2:a2:e6:15:0c:
         aa:5e:48:3d:91:f0:a5:28:46:8b:05:a4:d3:ad:6a:2c:aa:89:
         b1:81:42:96:17:94:f9:9b:59:8e:f4:75:03:3c:06:d8:03:fb:
         19:2e:28:60:e6:99:c6:78:a3:5a:33:39:f5:51:89:fe:7b:c3:
         43:55:53:c8:d1:3f:81:5b:59:6d:60:10:28:6f:61:6f:d7:a1:
         48:05:9c:b9:ce:05:39:a5:a1:85:5e:bd:07:31:83:5a:31:6e:
         3c:55:45:3a:70:ce:be:bf:f2:cb:1a:26:7e:e0:d0:2e:ba:be:
         70:99:65:cc:04:f9:eb:16:ad:56:be:61:c0:de:da:8d:ea:18:
         1e:45:40:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:46:11 2025 by rpki-client