Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/4e0ffa67-e7db-3331-95d2-44e9847c6668.roa
File:                     4e0ffa67-e7db-3331-95d2-44e9847c6668.roa (raw, json)
Hash identifier:          45RgRiriad+Sfg9H3Dvvrhe0gUv4DHc/eKNpVJZ/Ebs=
Subject key identifier:   68:1F:19:10:41:87:7F:25:23:11:B0:53:1E:38:16:85:C1:A9:8F:03
Certificate issuer:       /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
Certificate serial:       010D0C9F4328584A7D15F5C2962D47E2316577E0
Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/4e0ffa67-e7db-3331-95d2-44e9847c6668.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     11721
IP address blocks:        2602:fa8a:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:f5:c2:96:2d:47:e2:31:65:77:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=356057f4-72a6-4d16-b199-2f1245afa524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:71:4a:6e:64:94:11:9c:84:58:63:f1:0d:
                    28:0d:ba:a1:7e:3d:1b:fb:51:2c:bf:ed:ce:d2:9a:
                    25:e8:36:39:74:a7:22:0e:63:71:5f:c5:af:7a:35:
                    b5:ac:d4:09:81:f4:27:89:f3:49:69:ef:f0:98:fc:
                    15:5b:ba:17:b3:1f:68:0f:a8:a4:53:b2:2e:e4:51:
                    8f:a7:50:fe:97:2f:1b:db:a0:f5:25:15:ab:12:5c:
                    7c:4f:73:98:98:40:b2:44:da:81:37:00:25:88:ce:
                    7b:d8:d6:37:b7:90:15:13:b1:50:a3:1f:68:bc:82:
                    9c:f8:15:dc:8b:ec:a9:c6:ff:8e:67:9e:60:6c:88:
                    71:77:b9:53:5e:59:61:f5:d7:30:75:78:90:c9:5e:
                    42:14:0c:60:fc:3b:fb:a8:5f:95:07:59:3c:7a:38:
                    f6:e3:54:9a:99:c8:9e:1e:04:a7:e1:2d:6d:0d:18:
                    eb:79:d8:7b:a4:a0:00:bd:76:76:85:a2:c9:a3:a4:
                    79:10:24:ed:13:b6:90:13:74:9a:f3:9c:19:e2:f4:
                    65:db:1f:f9:28:28:b2:85:1f:cc:bd:48:93:7b:ab:
                    29:2b:c0:65:bc:88:5f:61:95:5a:6f:f4:42:75:e2:
                    35:a8:b0:3b:7e:4d:28:5b:27:4d:29:50:f2:ea:fd:
                    bc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1F:19:10:41:87:7F:25:23:11:B0:53:1E:38:16:85:C1:A9:8F:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/4e0ffa67-e7db-3331-95d2-44e9847c6668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl

            X509v3 Authority Key Identifier:
                keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa8a:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:a4:a7:86:0a:2a:de:e1:b2:7d:69:0d:a1:49:f5:e3:ec:bb:
         6d:ff:6d:d6:26:92:a5:ce:c5:3a:83:7a:6f:34:b0:15:8d:30:
         a4:95:51:ab:c8:33:f1:57:b8:81:b7:12:77:85:92:21:90:5b:
         18:50:99:e5:42:89:0f:d9:d6:79:d5:c1:a7:91:06:ae:37:39:
         81:08:53:df:5c:b0:cd:21:c4:3f:a4:3e:76:28:c5:2c:a5:c9:
         fb:2f:b2:1a:28:1f:18:fd:29:b3:76:44:5a:31:7c:fc:0d:73:
         6a:bd:1b:0a:8f:52:ee:76:4d:58:80:9e:ef:28:1f:16:1f:ff:
         6d:59:78:40:69:ca:f2:64:11:bd:bb:4c:6e:06:1c:9f:90:6d:
         07:c8:54:eb:8b:3e:8a:38:c8:67:37:77:9b:79:49:9c:b0:bf:
         e8:e2:f2:65:4c:9c:85:f4:bc:29:80:51:cf:bc:67:ba:54:0c:
         3c:25:06:bd:4b:31:32:c0:cb:5a:f1:24:7b:e8:44:a9:95:1b:
         d0:45:21:67:5c:8e:e5:55:b9:25:28:cc:44:18:6f:90:77:01:
         83:56:13:dd:f8:60:b6:3f:ac:3d:7f:c2:9e:d6:cf:1f:13:7d:
         92:15:da:0f:45:43:6f:88:63:44:31:b2:19:82:0f:3f:d5:f8:
         4b:44:39:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:46:37 2025 by rpki-client