Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/68b02c83-df0a-3c30-9ec1-1c171bb74d7e.roa
File:                     68b02c83-df0a-3c30-9ec1-1c171bb74d7e.roa (raw, json)
Hash identifier:          g+6CFXC3UCxxglx+RG8gt0Rn5/Z1Z3Dij0bhXqnlEYc=
Subject key identifier:   33:97:E8:1E:E2:5E:9C:08:1F:71:A2:4A:A2:84:47:A2:AC:AB:5D:31
Certificate issuer:       /CN=f330fac3-f4ae-4421-9305-7e1649195c36
Certificate serial:       010D0C9F4328584B28C6DD9125328BB2301FE600
Authority key identifier: EA:67:D0:88:A5:5B:1B:6E:49:1E:AC:DD:45:69:84:05:20:C7:93:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/68b02c83-df0a-3c30-9ec1-1c171bb74d7e.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     401293
IP address blocks:        2602:f848::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:dd:91:25:32:8b:b2:30:1f:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f330fac3-f4ae-4421-9305-7e1649195c36
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=115155e7-c237-498f-89d6-3a1a04b6ab83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:36:81:1b:a4:24:91:d8:03:05:e1:ab:6d:0a:
                    67:e5:9e:4f:85:34:87:7e:4a:68:9a:b6:ba:8a:e3:
                    dd:3e:78:aa:72:79:ff:af:fd:63:21:70:2a:58:56:
                    dd:15:76:c4:bf:89:80:fd:7a:65:47:de:b1:bc:97:
                    1c:56:b9:5e:c7:a8:5c:96:58:9b:8d:6b:54:4e:01:
                    1f:3c:ee:43:54:a0:10:b7:d5:c0:6f:f2:b0:a6:d4:
                    19:a1:36:a2:a6:9a:5e:09:a3:f4:d4:ea:1f:0e:b0:
                    11:c3:96:6f:c3:bc:ab:0a:cb:76:4c:5b:43:df:eb:
                    1b:a3:a2:34:17:1d:26:cc:40:f1:90:13:5e:82:2a:
                    8f:7b:71:89:4a:26:9c:16:18:e3:14:06:2b:07:20:
                    b4:9a:f6:46:d9:fa:62:96:88:d5:a8:ca:2a:3b:cd:
                    9a:0a:2a:32:93:cd:9e:c4:a8:5b:84:15:61:0a:7a:
                    b6:a0:13:cb:9c:2a:75:05:5a:a9:a2:e8:0a:8a:d2:
                    c9:aa:3d:f3:ef:f8:ca:1e:fc:36:3f:f0:99:83:0f:
                    9d:6f:81:c9:f0:6d:d8:4e:a8:8a:22:e2:d0:16:ae:
                    02:fe:cf:e3:99:d4:ce:88:80:f6:2c:9f:90:e9:b0:
                    68:76:49:3f:23:d4:ba:2e:1f:f1:02:99:56:80:00:
                    44:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:97:E8:1E:E2:5E:9C:08:1F:71:A2:4A:A2:84:47:A2:AC:AB:5D:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/68b02c83-df0a-3c30-9ec1-1c171bb74d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.crl

            X509v3 Authority Key Identifier:
                keyid:EA:67:D0:88:A5:5B:1B:6E:49:1E:AC:DD:45:69:84:05:20:C7:93:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f848::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e4:f4:ef:52:31:9e:88:ab:ab:6d:92:63:1a:6f:c8:a7:c9:
         77:37:ac:ed:b4:5a:f7:73:a4:d1:1c:a6:29:b8:60:3b:3a:42:
         4a:ce:c8:96:3f:80:99:2a:b8:ff:1f:b2:60:4b:4c:82:cb:29:
         ee:a4:f7:bc:ae:f2:e0:83:30:cf:91:66:eb:85:c4:ae:80:ca:
         31:29:1e:58:64:2e:48:ca:07:4a:92:71:43:38:6d:2c:c8:81:
         4c:a7:76:8e:cf:95:bc:6b:55:d5:da:d4:c1:9c:af:9e:37:c0:
         71:8b:11:e2:f3:03:2c:90:4c:6d:40:c3:f0:e6:8d:dc:31:73:
         d4:48:ae:7f:2b:9a:97:da:d0:70:e2:99:1b:7a:d8:30:a7:b2:
         da:78:df:17:4b:c7:72:3b:2f:bb:54:27:52:f4:d8:b3:48:d7:
         76:8d:eb:15:c5:3a:df:6e:0f:c7:24:75:ad:5c:36:9c:d0:45:
         74:2b:6e:2b:f7:5b:4e:cf:6f:f1:3e:d4:5c:70:ca:1c:22:b3:
         65:2a:8e:d4:2a:8b:66:78:7f:b1:4f:f9:3f:58:b8:ba:af:a0:
         b5:f2:da:ae:fd:4f:f4:5a:df:eb:d6:9c:cc:b9:2c:e1:b9:04:
         34:66:f5:72:ff:31:b6:d8:ec:12:b1:1e:de:50:f8:e5:5e:75:
         f2:1c:9c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:31:21 2025 by rpki-client