Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/e8616674-f91f-350d-82cc-d009a5a6c585.roa
File:                     e8616674-f91f-350d-82cc-d009a5a6c585.roa (raw, json)
Hash identifier:          2IhDLkzGJvc0xPoEI7ZndrvqEbDg23KBAXuWHp3p8/g=
Subject key identifier:   68:F3:06:E9:5B:1B:92:35:1D:2A:E6:2E:34:4B:8B:55:DC:CF:C7:E7
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584B0A116C0C0BD6C7AC79B09E20
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/e8616674-f91f-350d-82cc-d009a5a6c585.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     216401
IP address blocks:        2602:fb54:240::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:6c:0c:0b:d6:c7:ac:79:b0:9e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=68322439-cd82-42d1-8c65-a45a3a730290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:0b:b6:3a:0f:43:2e:a6:8e:4c:f5:ba:48:
                    79:cc:88:81:21:2d:eb:e1:d9:4e:7a:d6:f7:e9:5d:
                    1f:7b:e1:9e:72:a4:84:44:fa:0b:ee:e4:76:93:ac:
                    3c:9b:c7:28:85:98:e2:77:cf:d3:19:a5:c9:a5:4b:
                    c6:0c:4d:4c:0b:b9:ed:22:80:51:b1:9d:bc:93:3e:
                    27:6a:c0:99:30:23:bc:9c:5b:98:a1:04:47:75:2e:
                    c7:f6:a2:da:58:bb:9c:ab:55:93:bf:b9:6a:6a:c7:
                    d2:0d:8e:69:0a:b6:13:dd:1c:84:b8:52:28:e2:d2:
                    94:6a:c8:6c:db:44:8e:ed:ca:49:e7:ce:be:61:30:
                    2e:9a:9c:2d:59:05:17:c5:f5:51:c3:e5:77:66:85:
                    b2:ac:94:28:bd:30:8d:a2:ce:98:1a:59:10:ca:10:
                    f3:10:eb:b2:66:6d:fb:1e:8e:f4:3e:14:b8:cb:e3:
                    d3:ba:f2:ed:c2:31:84:53:b8:0d:b1:b1:e8:c8:a4:
                    46:49:99:e4:9c:1e:53:1e:4d:ac:f9:c0:e3:09:ed:
                    c9:fe:88:9b:b8:60:15:c1:84:b4:6f:45:86:e7:ef:
                    8b:cc:3d:95:de:46:7a:45:41:80:d0:12:04:68:61:
                    33:69:3c:52:b8:1c:cc:5e:d8:48:99:48:25:1c:7a:
                    a4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F3:06:E9:5B:1B:92:35:1D:2A:E6:2E:34:4B:8B:55:DC:CF:C7:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/e8616674-f91f-350d-82cc-d009a5a6c585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb54:240::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e3:02:4f:db:25:2b:13:31:73:50:64:06:38:86:ba:75:3a:
         bd:73:38:f0:9e:b4:5d:00:0b:f2:69:bf:6f:75:c5:ba:70:5c:
         03:20:79:aa:d1:f3:9f:bd:cf:a4:d7:b0:81:21:ee:c0:7e:96:
         1e:fb:83:01:4d:2b:6d:5e:ca:73:84:da:34:0d:95:0a:2b:ad:
         8d:3e:68:32:e8:14:27:96:d7:0a:4a:1c:c5:5f:31:11:f8:93:
         93:ec:4f:4a:3e:48:0a:65:06:c6:80:db:34:d4:d2:db:f3:8d:
         e5:ea:9e:af:d5:85:f2:5b:6b:fc:82:89:c1:0a:1a:88:99:e3:
         f8:74:04:b2:6d:56:55:3c:24:71:f7:ab:0f:41:9a:54:e8:f4:
         b3:f6:04:1c:59:af:7c:87:2b:a8:13:27:90:71:ce:11:07:7b:
         7f:f0:0b:36:3c:6b:7d:f1:32:17:33:62:4a:c8:0e:5c:aa:5c:
         1f:f4:f3:80:aa:c1:91:a2:90:fe:04:48:38:ad:fd:ff:63:f9:
         14:0a:76:40:65:48:95:7b:81:90:50:36:65:83:69:1a:17:0c:
         ff:ec:a5:8b:f4:da:d3:04:8a:71:19:79:66:61:fc:3b:9b:69:
         97:ab:f9:b8:31:76:33:e8:8d:04:d7:75:5c:90:9e:c4:d1:26:
         e9:71:9b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:22:53 2025 by rpki-client