Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/42cec228-25ea-321c-8c64-26ebdb1098e9.roa
File:                     42cec228-25ea-321c-8c64-26ebdb1098e9.roa (raw, json)
Hash identifier:          3m4357ysz5H1rBXukQjhx74xYKXBKW2Kq61fZi3X2pw=
Subject key identifier:   90:D7:0A:CD:D5:F3:FB:64:58:51:EC:FA:20:13:57:1F:86:2D:FA:B7
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584AF5213D8162ABDDEAF968BB80
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/42cec228-25ea-321c-8c64-26ebdb1098e9.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:2029::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:3d:81:62:ab:dd:ea:f9:68:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=008b761c-dc49-481d-8a67-e69ebc74eb87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3e:0c:34:e8:61:05:33:cf:71:0d:51:c1:ca:
                    5f:59:14:db:36:e6:1c:31:42:61:9a:32:42:45:a3:
                    21:15:51:bf:d2:35:ac:6c:62:82:35:2f:36:de:5c:
                    56:d9:25:fd:e0:c4:25:7b:f6:6f:62:0a:ba:df:f0:
                    7d:a7:58:6e:68:1e:0b:6a:44:6e:ab:d4:25:a5:6d:
                    8f:ff:20:a5:bd:4f:fd:79:37:98:bc:11:9e:fa:30:
                    4e:8a:48:d0:1e:63:16:ad:ac:e7:ea:e0:db:e8:36:
                    f1:0d:13:bb:4f:59:cf:c2:a7:f2:05:60:77:fb:ac:
                    4a:6c:81:e3:d0:97:72:e9:39:7a:ba:3b:d2:2f:81:
                    af:38:ef:b5:84:fa:c2:73:66:74:a2:62:42:04:a0:
                    c3:fc:df:30:ec:01:c7:1c:fa:af:27:dd:b4:90:fd:
                    ab:b8:d3:95:cc:a4:5d:84:52:df:6a:bd:69:31:16:
                    9d:fa:39:53:a8:e7:11:dc:c5:3a:5f:2c:ea:8b:10:
                    02:dd:8c:58:f0:c1:e4:ee:7d:bf:59:18:42:ee:df:
                    b9:19:f2:0b:85:50:76:eb:48:2f:78:33:83:a4:a4:
                    58:ea:3d:06:f7:fc:78:19:a2:00:51:79:c9:b5:53:
                    a3:1e:8d:8f:01:0f:77:f2:d2:4f:c5:e9:c9:5e:d4:
                    58:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D7:0A:CD:D5:F3:FB:64:58:51:EC:FA:20:13:57:1F:86:2D:FA:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/42cec228-25ea-321c-8c64-26ebdb1098e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2029::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:12:28:50:1b:48:8a:fc:37:72:23:c5:d9:03:78:68:f2:96:
         99:ea:e5:9c:43:5c:8a:3b:37:c4:42:67:f4:fd:09:97:be:ba:
         63:1b:41:6b:fd:e0:65:76:73:02:6a:76:12:b7:95:b6:88:36:
         5c:83:55:e5:48:a2:35:2d:1c:d5:ed:fc:6b:90:dc:56:21:27:
         14:ee:a6:ef:e9:e6:95:a6:92:c3:3b:7f:99:62:e9:ff:52:d7:
         45:b1:74:d1:75:1b:85:66:be:9a:80:57:0d:d3:a2:b8:6d:a6:
         2a:0d:7b:97:df:fa:79:97:39:7a:4e:7e:f6:f9:ab:eb:b9:86:
         00:75:49:4c:67:16:9d:f7:bd:f9:fa:2c:42:09:d3:52:2a:f6:
         55:e1:9b:98:46:78:12:d1:8c:19:97:d2:5c:48:ee:e5:5a:64:
         ab:72:60:ef:02:11:49:4e:a9:2c:2b:0b:9d:ef:16:b1:a2:ad:
         78:30:65:08:9a:82:23:d9:20:09:93:69:0d:f5:ca:f8:de:50:
         db:15:1d:79:f8:bc:b3:4d:c8:f1:79:0e:d6:5f:f7:36:7f:33:
         f6:bd:26:76:c8:33:08:2b:b3:d5:34:de:db:3d:6f:cc:86:e2:
         bb:4e:66:d7:18:7f:1f:50:82:28:c3:b6:05:f4:e9:98:5e:44:
         af:95:8c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 19:35:33 2025 by rpki-client