Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/54f297bb-b027-3a01-98a8-4c43dd8ebfcf.roa
File:                     54f297bb-b027-3a01-98a8-4c43dd8ebfcf.roa (raw, json)
Hash identifier:          2M/iblzwl+PPvkWVUj3vrUr5Nwjem9Uwyq/QMxWi9ug=
Subject key identifier:   6E:0E:70:8E:23:B6:88:67:73:56:17:D6:85:F9:27:91:36:5D:9A:5E
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584AF5213C8437A2B111528C1E20
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/54f297bb-b027-3a01-98a8-4c43dd8ebfcf.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:201e::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:3c:84:37:a2:b1:11:52:8c:1e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=8b4952c2-138b-4943-8016-861ec8d25981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a4:56:56:11:5b:bb:84:14:d1:33:e5:aa:a0:
                    7f:a5:36:50:47:69:7b:b2:5d:af:db:98:42:3e:7a:
                    ff:d8:10:66:67:1a:f1:43:b9:52:c4:89:ae:7f:35:
                    ba:c1:d4:ef:00:c5:df:64:ab:bd:e7:a7:a6:3f:89:
                    8a:b4:7c:cc:e1:08:e1:c7:75:4b:c7:4e:cf:5d:50:
                    36:e3:e5:aa:4a:0e:67:c0:bf:5d:61:68:4a:59:12:
                    93:ee:3e:b5:dd:0f:2b:15:57:dc:4b:b1:07:6f:da:
                    6f:97:84:2c:f8:b5:f8:32:5a:ac:fe:7c:3e:c4:22:
                    91:ec:91:fa:57:14:4c:e8:ee:85:19:e7:f5:60:10:
                    6e:9d:8c:f2:05:d0:c5:90:02:d2:b9:55:dc:52:d3:
                    0c:36:09:ec:60:9d:e0:e9:88:44:6d:15:48:cf:2c:
                    ce:cf:75:ab:b8:6a:59:a3:58:94:4b:c8:9a:75:21:
                    38:da:f5:7e:2b:11:20:4d:a1:06:ee:43:38:87:70:
                    7b:1c:e3:0a:1a:e6:6a:60:3c:f5:6b:c4:6f:e7:91:
                    ec:f1:38:c2:2a:80:91:aa:97:57:82:27:b1:d9:90:
                    6f:48:75:fc:27:2d:64:32:30:86:e4:a9:eb:71:4d:
                    82:a5:12:7e:9b:7e:68:e7:ba:14:b5:f2:df:e4:e5:
                    c1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0E:70:8E:23:B6:88:67:73:56:17:D6:85:F9:27:91:36:5D:9A:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/54f297bb-b027-3a01-98a8-4c43dd8ebfcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:201e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:3e:4a:a6:fd:55:b3:03:c7:09:f6:76:12:9c:75:4d:12:2b:
         e7:9c:a0:83:18:82:84:1a:74:8f:ec:8e:e8:9f:08:30:9a:7d:
         68:e1:b8:29:49:cb:92:70:74:9f:af:d6:41:6f:33:2e:c8:2a:
         9c:0a:06:c5:b6:ec:f1:fd:06:24:45:87:09:b0:58:64:45:d2:
         d3:c1:5c:32:98:c9:31:d4:e2:a0:ca:6d:e8:ef:aa:3b:72:11:
         33:b9:23:0f:a3:67:7d:41:ea:fb:91:04:33:60:36:28:5c:29:
         ed:61:09:c9:64:50:f3:36:4f:b1:25:c3:db:c4:bc:fc:2e:ad:
         5c:62:f4:5b:f9:0b:1b:ff:a9:06:a4:2b:c8:d3:25:a1:00:d2:
         ac:cb:6b:53:cf:69:fa:97:4e:6a:91:2b:ce:00:2e:38:53:ed:
         ea:f2:ff:40:37:d7:fe:eb:67:ff:30:38:ed:79:84:7b:ed:32:
         4b:1a:2a:00:13:13:0f:f9:56:c7:07:b9:97:b1:b0:6c:7d:63:
         5b:b3:3a:11:fc:bc:9c:7a:4c:46:21:a5:20:2d:49:29:6c:36:
         b1:88:a9:c8:6e:3e:3b:ee:ea:5a:06:17:f5:6d:9b:2b:c6:7c:
         e5:f9:a8:0d:af:27:31:d3:d5:cf:8f:1f:d5:d4:ea:0d:fd:c8:
         a3:59:07:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 19:38:33 2025 by rpki-client