Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/ae3e4a96-006f-3dac-a4b3-65461b2a734e.roa
File:                     ae3e4a96-006f-3dac-a4b3-65461b2a734e.roa (raw, json)
Hash identifier:          X4qk4tJCbJREh3UqmeQ4ON65Tzjgdr4HKTc6Ir38Fv0=
Subject key identifier:   1A:71:92:D3:EE:F4:32:E8:83:CC:2C:6D:34:2E:83:3A:C3:AF:25:53
Certificate issuer:       /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Certificate serial:       010D0C9F4328584A62909EAED00EBB71A1C51270
Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/ae3e4a96-006f-3dac-a4b3-65461b2a734e.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     40916
IP address blocks:        2602:fcff::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:9e:ae:d0:0e:bb:71:a1:c5:12:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=4e468085-da40-4e40-998d-035e516d0562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:68:a7:06:ae:85:31:c2:22:3a:d6:72:ff:9a:
                    10:09:fc:5b:b6:cc:e4:7b:a9:c7:fd:f4:33:a2:85:
                    c7:ff:e9:83:f3:7c:9c:4d:04:71:34:50:72:ff:8d:
                    db:43:de:a1:c5:f2:6a:3c:fc:ae:3c:66:3f:f4:60:
                    36:f7:e9:6c:ce:00:6b:85:e7:94:02:bc:98:ee:76:
                    7d:76:2c:4b:48:9f:ce:8c:68:d3:31:a4:f7:e9:aa:
                    a2:47:fa:de:88:26:39:40:b0:92:21:73:78:46:fb:
                    2e:0d:06:25:1e:39:db:b7:66:2b:0c:27:c0:45:ae:
                    13:f2:eb:f9:f4:cc:07:3e:ad:dc:09:fa:2a:a1:36:
                    e2:c0:2f:15:a8:cf:25:28:55:7c:24:e1:be:46:a5:
                    1b:e4:41:a3:cb:54:e1:36:f9:4f:15:49:53:fb:04:
                    0f:c8:e8:82:16:bd:b8:f1:9e:15:65:fd:56:3b:a0:
                    ef:d5:92:ae:4d:db:fb:e5:86:c5:92:38:53:f6:4f:
                    ad:3f:c1:d9:d9:f0:80:96:fe:5b:10:99:ab:01:a2:
                    97:83:6e:be:63:cc:0e:ed:26:dc:d4:78:f9:5a:8d:
                    39:8e:75:18:4a:14:a1:e2:70:1a:b3:5b:4c:30:ee:
                    b1:a6:45:89:6c:c6:42:1b:e7:5e:55:0e:94:31:c7:
                    53:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:71:92:D3:EE:F4:32:E8:83:CC:2C:6D:34:2E:83:3A:C3:AF:25:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/ae3e4a96-006f-3dac-a4b3-65461b2a734e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl

            X509v3 Authority Key Identifier:
                keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcff::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:11:37:0b:6b:54:11:0a:29:8f:dc:e4:a0:79:07:4b:40:8e:
         54:65:cc:d9:ab:a7:62:a8:42:88:a4:5b:20:01:12:5d:1c:55:
         bf:e9:98:f0:75:04:c7:f8:cf:3f:09:ad:e9:2e:b4:f7:c9:8d:
         86:41:48:b8:c0:01:bc:1b:b0:a6:cc:f3:e0:cd:a8:51:e5:f9:
         59:04:23:8e:fd:eb:1e:29:13:ed:a5:54:9f:ed:78:83:72:f1:
         0f:4b:6a:97:05:91:c0:36:cd:1c:7b:fa:5a:64:df:5c:da:56:
         f7:36:6f:7e:8a:16:10:20:4e:3d:75:32:67:8c:b5:d7:55:86:
         58:6a:0c:2b:51:9c:c1:85:c3:78:16:a8:0e:a9:7f:a6:57:8e:
         2e:ba:de:f6:77:b6:ec:42:ca:56:76:02:d6:83:fe:8a:8b:c1:
         f6:88:07:db:15:90:5f:1a:c3:a0:71:68:da:5f:6a:4b:25:c1:
         a2:a7:f7:ce:c7:83:13:b0:d2:75:39:ea:c0:b5:79:19:52:77:
         0a:d6:60:18:6a:c9:17:1c:d7:a1:6c:d4:88:33:f0:3b:50:c7:
         54:40:9f:2f:df:9c:a8:cb:72:e9:18:eb:53:cd:53:05:97:ab:
         9a:0f:8c:7c:17:ae:15:56:06:8f:6a:72:5f:a1:89:92:6e:55:
         6c:b9:76:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:20 2025 by rpki-client