Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/4349fd77-644a-312d-9099-d76547d47c00.roa
File:                     4349fd77-644a-312d-9099-d76547d47c00.roa (raw, json)
Hash identifier:          0i+ZGGRt22Gft8aG0Mrigj/h6odZEMMakn0sXEUlERM=
Subject key identifier:   16:9E:68:0C:F9:6B:8F:9A:BD:D6:30:1F:41:26:70:D5:98:05:37:21
Certificate issuer:       /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Certificate serial:       010D0C9F4328584A655B2E1CA98B81961C6DFD00
Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/4349fd77-644a-312d-9099-d76547d47c00.roa
Signing time:             Thu 03 Jul 2025 13:01:04 +0000
ROA not before:           Thu 03 Jul 2025 13:01:04 +0000
ROA not after:            Wed 01 Oct 2025 13:01:04 +0000
asID:                     38041
IP address blocks:        2602:fcff:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:5b:2e:1c:a9:8b:81:96:1c:6d:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
        Validity
            Not Before: Jul  3 13:01:04 2025 GMT
            Not After : Oct  1 13:01:04 2025 GMT
        Subject: CN=51771b02-25de-4fcc-89a4-cc1d3968f022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a7:c1:82:fd:a4:d0:fa:d4:92:0b:aa:39:83:
                    75:d5:6a:e3:8d:03:98:a3:7b:89:e8:51:d6:36:2a:
                    a8:9a:7a:cd:b4:12:bf:8a:5b:0e:02:f5:81:92:e0:
                    ac:e1:27:0e:e8:f6:0c:4c:61:56:6f:9e:f3:fc:0a:
                    84:d5:16:e2:ac:4a:e3:47:a8:d2:b9:bc:41:93:49:
                    a3:9f:dc:3b:40:15:31:28:34:41:b2:41:88:f6:7b:
                    d9:be:3a:c1:02:da:c5:59:07:a6:17:14:b9:79:2f:
                    0c:df:a1:49:d2:7b:27:e7:8f:a9:5e:32:30:6e:9c:
                    43:22:b8:39:8c:7e:0f:1a:2a:b9:cc:72:a7:48:e9:
                    b6:e6:41:d4:7d:11:4c:bc:7b:9b:5b:05:cc:08:8a:
                    36:f1:39:e0:b2:17:1d:5d:fa:b9:ed:c5:e8:a2:ca:
                    d0:ff:31:fa:8d:fb:7e:fd:27:8e:30:d5:00:43:37:
                    c2:55:a9:53:66:34:d0:17:e3:23:2b:6e:a9:7f:79:
                    83:a1:04:49:9f:04:4c:a0:fc:aa:9b:07:17:12:b1:
                    7d:8d:87:82:70:9f:89:24:38:25:b0:99:ce:af:ee:
                    c0:2c:bf:53:80:d2:cd:f0:c7:bf:6b:21:b4:d4:92:
                    e9:d8:2c:a7:9f:68:6b:13:42:59:af:9d:e5:65:bf:
                    d7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9E:68:0C:F9:6B:8F:9A:BD:D6:30:1F:41:26:70:D5:98:05:37:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/4349fd77-644a-312d-9099-d76547d47c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl

            X509v3 Authority Key Identifier:
                keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcff:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:24:6d:5a:b5:90:b5:53:6f:c5:76:4d:35:30:c6:c5:85:58:
         07:30:60:4a:02:9f:01:8a:21:95:de:5d:b6:29:ed:8f:b0:d4:
         de:5e:d9:9b:97:fd:9d:66:21:28:b5:9f:0f:8e:2a:8e:e9:03:
         61:f0:bb:c2:93:25:66:da:b0:c4:4b:cf:f0:7c:ae:84:30:95:
         2b:b8:c7:d3:58:11:74:bc:5b:67:94:60:08:94:d2:84:13:20:
         f8:42:c7:a4:ff:0e:04:b4:cb:01:03:3b:88:d1:c8:c0:60:3c:
         37:c6:06:9b:c0:2f:d1:b9:9b:52:21:06:5d:1c:a0:33:b5:af:
         62:b9:4a:29:db:68:9a:6e:1c:2c:4e:61:af:03:49:19:9d:09:
         d8:af:49:94:7e:76:bd:38:4a:46:d3:60:42:5e:05:0c:1a:c8:
         aa:c1:4f:2e:b3:5c:da:04:a5:3a:7d:63:04:0a:6d:72:b1:f9:
         8c:76:04:9e:3b:ba:79:9c:92:18:7f:45:d2:33:88:8a:07:ea:
         20:41:1d:5e:0b:00:c8:91:90:2f:c1:5a:15:71:07:4e:d7:03:
         74:7f:8c:a4:57:af:ee:4d:72:61:96:8f:a5:aa:56:ee:7a:2c:
         07:d4:36:da:72:34:59:0d:61:18:45:2b:bf:9d:3c:af:05:c0:
         1a:b7:cd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:53:58 2025 by rpki-client