Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/be65ba0f-b4da-3e26-8fa0-6bb409c072f4.roa
File:                     be65ba0f-b4da-3e26-8fa0-6bb409c072f4.roa (raw, json)
Hash identifier:          DB7Nl4QSxkCWnMKPfDiiFAR38twK+m7re/eHyXGfThw=
Subject key identifier:   59:70:F5:0C:BB:04:CF:46:1C:45:5D:F3:4F:EB:28:48:41:6B:5F:24
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584A90A0C08329B61F37D45C2C60
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/be65ba0f-b4da-3e26-8fa0-6bb409c072f4.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     206216
IP address blocks:        2602:fb54:147::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c0:83:29:b6:1f:37:d4:5c:2c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=0431cf5d-0d8d-4022-bcd1-df0bb00d4f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:79:e3:44:58:e8:61:24:07:9c:13:51:fb:a7:
                    17:4d:34:86:80:e9:9d:09:01:fd:4a:88:09:44:14:
                    03:d4:d8:a8:34:2d:2b:75:21:3c:14:cd:ec:e1:09:
                    8b:0b:8e:c7:45:21:36:53:86:34:2b:f4:db:0d:00:
                    a3:7a:8c:a3:1d:85:ea:71:f1:fc:38:a8:2e:22:59:
                    32:f5:ea:83:03:f9:28:07:4c:20:09:c1:30:ca:e6:
                    15:b9:f7:44:39:b5:8d:f5:e2:f6:85:c0:5b:1b:1e:
                    ac:56:a6:84:0a:b6:a6:02:70:18:1f:e5:e3:3c:66:
                    ab:91:99:06:bf:b2:92:1d:e1:fa:06:91:af:94:e0:
                    90:cc:c9:00:a5:85:e7:71:8c:1c:3a:ef:a1:f7:e8:
                    9b:25:51:c7:3d:a4:0d:d7:90:e9:fb:96:62:37:41:
                    6b:37:66:ae:8f:04:3c:4d:10:ef:73:c9:3f:85:3a:
                    bc:45:3a:71:13:fb:5b:f2:00:f6:c7:ca:9f:06:c6:
                    b4:53:5d:aa:0d:23:8c:5a:e3:f9:fe:93:0d:1a:f7:
                    09:24:bf:19:81:b3:b5:f0:e8:c3:f0:78:43:ed:d1:
                    98:69:58:d5:0c:a5:9c:13:6f:11:11:63:d1:2a:bd:
                    ba:37:7c:37:5c:36:29:07:9b:3c:27:eb:d3:d6:1b:
                    9c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:70:F5:0C:BB:04:CF:46:1C:45:5D:F3:4F:EB:28:48:41:6B:5F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/be65ba0f-b4da-3e26-8fa0-6bb409c072f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:147::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:cd:3a:9b:33:0c:f9:ab:67:9a:fb:9a:aa:8c:88:44:6b:d9:
         8e:0c:a3:c6:cc:4c:f7:4e:d5:22:6c:de:a3:bc:14:b4:5c:69:
         2d:ff:7f:5c:08:ad:7b:af:2d:38:94:5c:e7:61:33:73:dc:86:
         bc:7b:be:b2:21:c3:92:c1:0c:d7:94:30:29:54:21:89:ef:0a:
         4f:b6:b0:40:71:16:0d:61:b9:8c:36:4e:5a:d3:c2:00:03:ac:
         41:cc:4b:db:9c:5f:9c:ce:b1:40:3d:76:ce:26:55:9b:01:30:
         58:01:67:24:c5:b0:c8:a1:ef:b5:1f:10:28:d8:57:17:a1:40:
         b5:e2:b5:e9:62:02:4e:d4:3b:e7:ab:58:c9:d3:55:59:0f:ff:
         b9:0f:c1:dd:a2:a6:14:5c:23:be:c2:b6:40:35:b8:80:b9:0d:
         c2:90:89:1d:90:20:dd:a9:e6:1c:8e:af:05:0d:21:0b:46:be:
         df:2d:31:d7:21:77:2e:3e:cc:79:64:ee:11:b8:5b:4d:09:8a:
         1b:45:5f:8b:16:80:ec:82:d6:41:9b:2a:fb:b2:03:20:5e:b7:
         c5:f5:0e:96:6a:ff:16:d6:0e:b1:b9:67:6d:8b:3e:ac:9e:70:
         fe:dc:66:ca:d6:6f:68:90:a0:5a:69:5a:08:7f:45:2c:08:cc:
         4e:d3:b1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:12:09 2025 by rpki-client