Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bafe04ea-3968-3a6d-8d6c-6832299af21e.roa
File:                     bafe04ea-3968-3a6d-8d6c-6832299af21e.roa (raw, json)
Hash identifier:          nc0AOGO0QRHtUvJ1eCszZRu2eFFU3zKniI35FSpYDcg=
Subject key identifier:   CC:B2:22:CC:C8:8A:96:4B:89:51:4C:FB:20:D9:F0:4E:C9:77:AC:7B
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584AF5213DB82BAAC2CB0282C580
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bafe04ea-3968-3a6d-8d6c-6832299af21e.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:202c::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:3d:b8:2b:aa:c2:cb:02:82:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=2a62cec7-71f1-4707-9aaf-814711ee6c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4c:27:b7:27:a2:a6:e9:17:63:d8:a6:22:b7:
                    41:ed:83:8f:45:26:18:5e:e5:96:1b:0c:4f:2c:30:
                    d9:a8:b7:2e:18:3d:9f:5f:50:10:cd:b0:95:79:56:
                    3f:49:49:ba:d0:e7:38:09:78:77:02:1d:f3:17:44:
                    4e:8a:ab:58:19:6e:d7:44:fc:c5:e9:d5:41:d5:6f:
                    8a:9e:d6:f7:5a:a0:84:3f:e2:9b:39:ed:c9:38:c8:
                    62:11:8e:c0:b6:eb:d7:53:4c:fd:15:0f:7a:16:67:
                    08:cd:02:c4:63:0e:cd:fa:22:bf:89:e7:2b:d9:7c:
                    7a:a3:f6:fb:08:13:e0:8b:1e:df:11:5b:9f:e5:a0:
                    06:a0:4f:42:33:ac:1a:77:3d:a1:1a:7b:82:b9:e9:
                    aa:1e:d3:51:38:5b:00:9f:b4:24:ba:45:61:bc:d5:
                    75:9c:25:03:3e:54:43:d0:3b:a4:d2:d4:45:8d:bb:
                    87:cd:63:42:2d:1a:11:02:e1:8b:a2:63:53:1b:91:
                    f8:4a:d5:b2:b2:6f:89:3f:cf:46:33:ab:8b:b7:8c:
                    80:50:ae:0c:34:ff:bc:bf:0b:f9:d1:10:09:ef:ab:
                    04:99:26:f1:32:36:e0:4a:aa:36:b0:93:8a:5f:93:
                    9a:bd:33:4e:c2:36:7c:e6:ed:93:aa:c8:2a:1c:f4:
                    78:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B2:22:CC:C8:8A:96:4B:89:51:4C:FB:20:D9:F0:4E:C9:77:AC:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/bafe04ea-3968-3a6d-8d6c-6832299af21e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:202c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c1:f8:60:98:87:3b:fc:b1:5f:68:15:6f:c4:7f:bd:cc:56:
         44:08:9d:f4:93:d1:c5:49:fe:99:47:02:0a:ba:97:76:c9:d5:
         a9:af:2d:4a:00:62:6d:73:06:36:cf:a2:2b:70:ae:9c:03:cb:
         37:4f:54:e4:04:a1:07:8c:79:75:d0:db:23:53:1c:06:a7:0a:
         ae:d0:56:6b:f6:e3:bb:37:d4:a8:75:fd:f4:ca:09:b7:c2:99:
         8e:ac:b0:72:56:62:72:5c:c8:74:f4:e9:42:62:51:a4:16:85:
         17:a0:62:a4:72:b9:73:b1:a3:c3:44:77:f6:08:1c:93:a2:af:
         d1:d4:07:f3:92:a3:54:be:1f:98:d3:49:b6:55:93:62:8e:ac:
         b8:3c:00:80:d3:5c:30:ac:9c:81:62:ae:cc:c9:9d:30:ec:a7:
         db:2d:69:54:4f:79:11:26:74:54:1c:6a:69:0d:76:b2:42:38:
         1a:4f:b6:b6:14:6f:8f:1a:ab:e4:1a:16:85:90:a2:25:7e:f2:
         89:2a:00:32:27:07:97:01:c6:3d:16:06:64:6a:fb:a5:d3:1b:
         2a:3d:f8:82:9c:75:30:07:67:07:88:59:e8:09:38:3f:9a:de:
         c8:56:07:96:e2:b5:82:a9:74:21:ed:87:15:45:d6:01:1c:40:
         ba:11:30:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 19:37:07 2025 by rpki-client