Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/c2b70483-f4ea-3d61-bc54-5127dea219e8.roa
File:                     c2b70483-f4ea-3d61-bc54-5127dea219e8.roa (raw, json)
Hash identifier:          foVGUmOcUWNc6fJBbemPCPbgXAnLOw0poonnE611HJM=
Subject key identifier:   87:C2:36:C7:33:1C:73:9A:D8:9E:8D:74:22:0C:25:A1:45:6A:1E:00
Certificate issuer:       /CN=f330fac3-f4ae-4421-9305-7e1649195c36
Certificate serial:       010D0C9F4328584B28C6ED10C9A72A0A1A8D3100
Authority key identifier: EA:67:D0:88:A5:5B:1B:6E:49:1E:AC:DD:45:69:84:05:20:C7:93:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/c2b70483-f4ea-3d61-bc54-5127dea219e8.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        2602:f848::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:ed:10:c9:a7:2a:0a:1a:8d:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f330fac3-f4ae-4421-9305-7e1649195c36
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=fd033b61-7aae-4215-8831-388821da065b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:fc:fc:80:0e:a2:e8:da:ad:18:ff:7f:bd:
                    95:53:2a:d1:27:b3:49:8f:80:0a:b9:c5:02:ba:4b:
                    29:82:8a:52:e7:8a:7f:95:b5:1e:fe:74:a6:ef:f1:
                    5f:69:17:ee:d0:53:ed:81:67:08:67:23:95:7d:89:
                    7e:a9:3f:25:fd:0d:a0:27:19:a6:31:c8:52:5e:a6:
                    da:08:69:ef:9f:d0:f0:7e:df:b9:5f:72:88:81:95:
                    22:18:94:0b:7e:50:a2:7c:ec:bf:b7:e4:d6:5b:7b:
                    cd:b3:e1:7c:ec:c7:b8:f9:56:79:92:b2:17:ec:c1:
                    f7:4d:87:8a:a7:3c:fe:43:b9:ef:0b:c8:60:bf:2e:
                    3e:28:34:21:fe:0a:c0:7c:68:36:00:6a:be:8a:f4:
                    16:47:13:d0:5c:28:da:bd:76:d6:f5:c1:49:66:1c:
                    99:59:91:7c:eb:42:c1:3d:ae:5b:09:78:75:0c:ba:
                    09:ea:7e:44:c8:9d:6e:c6:dc:9d:7b:2a:5e:ba:67:
                    6a:70:95:f3:1a:5d:56:3e:dd:07:31:73:f0:94:45:
                    3d:e0:7d:2c:5d:eb:71:0d:14:9e:6a:23:88:f9:a2:
                    7f:38:4b:1c:64:58:1b:43:f9:ef:2f:d7:63:63:df:
                    e8:22:64:3d:d0:f8:30:07:77:4b:bd:e6:d0:31:0e:
                    35:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C2:36:C7:33:1C:73:9A:D8:9E:8D:74:22:0C:25:A1:45:6A:1E:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/c2b70483-f4ea-3d61-bc54-5127dea219e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36/f330fac3-f4ae-4421-9305-7e1649195c36.crl

            X509v3 Authority Key Identifier:
                keyid:EA:67:D0:88:A5:5B:1B:6E:49:1E:AC:DD:45:69:84:05:20:C7:93:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f330fac3-f4ae-4421-9305-7e1649195c36.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f848::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ed:33:b9:94:30:51:58:38:5c:46:36:ac:db:16:e4:1c:0f:
         44:f1:64:ce:37:6c:d4:23:6a:34:a6:03:e9:ab:98:16:61:0c:
         9a:ef:c4:b5:56:c2:31:7c:3c:72:85:1b:4f:cf:91:3f:59:ce:
         0e:10:84:75:69:e9:1d:07:2b:83:78:41:fe:ba:28:4d:54:26:
         6e:9f:fa:40:4c:10:1e:ff:e2:60:19:b4:27:20:1d:3b:88:a8:
         00:9a:67:50:4a:4d:43:67:1b:d8:54:4d:f8:25:c9:d0:1d:e4:
         6b:17:7f:b2:c7:d0:56:57:79:cb:37:7e:e6:03:31:1b:c2:ce:
         3e:6c:c9:dc:b2:62:11:70:68:dc:af:41:81:65:ec:1f:50:f7:
         ed:b7:7d:05:5a:69:0f:a0:d3:9c:f3:78:a7:a7:2e:37:53:cb:
         6e:42:e0:db:d6:77:a8:75:69:97:42:11:39:d2:3b:b9:e2:02:
         34:63:68:17:a5:90:a9:20:40:5c:9f:66:4f:5b:13:c4:2a:55:
         8e:b6:69:80:fc:6f:d3:0b:7f:7c:a5:3d:a2:a4:d3:ba:bb:3e:
         59:63:92:be:fb:f7:23:e1:c5:03:0f:7b:7d:0e:33:c0:7a:cc:
         0f:e3:61:5c:76:e6:eb:d8:a9:cc:9d:e1:b0:da:9c:77:1c:06:
         f4:2d:5c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:33:32 2025 by rpki-client