Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8343f259-06b0-382a-a667-79b10468b082.roa
File:                     8343f259-06b0-382a-a667-79b10468b082.roa (raw, json)
Hash identifier:          cERO+4YPpVTedhaLkL3UvR25eLg4rI8L/WEul3nsKaY=
Subject key identifier:   8C:53:EB:A1:4F:A9:87:B2:75:A9:F0:A6:B2:8C:9F:33:65:9E:69:CB
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584AF5213D276817F8458A9DE740
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8343f259-06b0-382a-a667-79b10468b082.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:2025::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:3d:27:68:17:f8:45:8a:9d:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=4babf972-2664-4628-b81a-e264399ee368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:cc:6c:6b:e0:0e:08:3d:a9:99:c6:ef:4e:
                    6d:81:20:32:7e:58:94:21:b3:db:ee:00:ee:d7:1b:
                    7a:37:81:db:a7:0d:9c:84:76:f0:3e:c6:25:09:01:
                    43:08:b6:c3:b9:20:53:70:f2:94:1c:99:d1:0e:4b:
                    28:ad:eb:0c:ad:29:83:5b:13:e2:2a:6a:86:db:26:
                    ca:4e:e7:e2:d3:69:b1:20:33:e5:9b:c5:0a:59:94:
                    73:4a:a4:e4:7c:4a:18:0d:92:a4:c8:ae:cc:53:42:
                    a7:1a:ce:24:89:5d:69:c8:7e:dc:bc:03:fe:a0:b3:
                    10:f0:56:03:b8:47:75:6b:2f:8a:23:1e:cb:69:d7:
                    3d:c9:a5:b0:2a:aa:89:e1:06:dc:e6:c1:fc:9e:5a:
                    e5:15:35:99:d9:da:75:9a:a0:6b:39:c3:fa:56:57:
                    6f:2e:9c:18:f0:ed:ae:53:47:fb:b2:c3:70:f9:65:
                    82:3f:a8:f0:75:0d:68:83:74:94:56:f5:a3:0e:fb:
                    09:f5:c9:88:1c:0f:80:96:d9:87:31:6c:46:5f:92:
                    3f:27:eb:4d:28:c4:b5:24:98:bb:5e:ae:ee:40:12:
                    c8:0a:8c:fe:5c:76:a0:9e:e7:88:f9:08:16:27:62:
                    58:79:54:96:26:34:8b:09:14:79:34:8e:09:9b:4e:
                    12:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:53:EB:A1:4F:A9:87:B2:75:A9:F0:A6:B2:8C:9F:33:65:9E:69:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/8343f259-06b0-382a-a667-79b10468b082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:2025::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:9c:ae:b2:03:60:e6:e6:49:4c:32:93:86:bf:f0:66:3a:83:
         1c:14:53:52:cd:7a:7f:2f:b8:fb:76:bd:c9:ee:2e:be:a1:f6:
         b5:5b:b3:79:89:f6:2b:25:9d:4d:0d:03:b7:bf:12:8b:d3:18:
         22:70:ad:20:ef:de:ee:a5:fd:7c:a8:53:6a:a9:df:57:36:02:
         18:2f:5a:cb:2e:6e:03:06:d3:50:4c:1e:f4:ae:ef:dc:34:30:
         0c:ac:47:d1:3c:52:7d:18:a8:3d:06:c3:37:17:28:a5:f7:49:
         a8:43:a0:b2:76:fa:d2:2f:6a:df:9b:66:58:76:d6:74:09:0e:
         99:e3:b6:2f:54:a4:3e:7c:4b:24:50:9e:78:3c:2d:30:cc:62:
         ca:0e:e9:af:8d:79:98:40:73:90:43:b0:59:ec:d8:89:06:2f:
         4c:c8:61:e3:7f:f4:24:53:62:0b:b0:e7:1c:6d:8d:e5:dc:39:
         8c:da:28:f0:f6:6b:55:cd:4a:1f:46:f2:46:46:bd:c0:ca:86:
         61:7c:a8:8b:d0:c2:cd:bd:fb:a6:e6:5d:39:6d:ef:fa:41:63:
         03:a1:27:fd:22:e5:3c:dd:86:7b:8e:c3:43:50:e0:48:52:a0:
         3c:4d:86:cf:98:b3:59:f3:ae:63:3b:d5:69:fc:24:48:cd:ba:
         62:53:fb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 19:38:32 2025 by rpki-client