Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d4a4ba4a-e9dc-3f10-b988-3fa6ecee18ff.roa
File:                     d4a4ba4a-e9dc-3f10-b988-3fa6ecee18ff.roa (raw, json)
Hash identifier:          TDrRILGtN6WF5ST3IzPwTd9ItCwKz8yzBrUMZIgIxNo=
Subject key identifier:   EC:D0:DB:E0:39:BB:93:5F:A1:3B:69:12:E7:26:BB:30:3E:3D:30:36
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584AF52142122B1E402993EEB940
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d4a4ba4a-e9dc-3f10-b988-3fa6ecee18ff.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     399976
IP address blocks:        2602:80c:20c7::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:42:12:2b:1e:40:29:93:ee:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=391bc13e-48e0-47ee-9a5b-7b89f958f4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9d:cd:71:95:78:85:dd:b3:df:03:38:0c:26:
                    89:4d:85:ca:b6:24:7a:3a:67:ee:53:16:91:ef:e2:
                    0c:d5:17:f2:05:0e:4d:fa:ae:e3:3b:c7:58:86:8b:
                    85:b8:f1:c0:b7:09:57:7c:9f:d2:12:a2:13:97:80:
                    c8:53:c9:a5:97:5f:e0:a9:d2:c0:6a:35:3b:aa:3a:
                    f4:f7:92:f1:6c:50:ec:f8:c9:99:5c:e1:b9:0d:45:
                    c6:55:e8:76:5e:52:51:a6:89:84:35:70:a4:00:f0:
                    4b:f0:32:b5:63:a8:89:79:30:b6:7f:5c:a0:e8:db:
                    27:1b:30:73:2b:ff:f5:e7:78:14:dd:22:c6:8f:23:
                    71:b3:c8:88:e8:0e:ae:2f:80:22:ba:ad:01:cb:93:
                    b8:27:80:9a:f5:f3:25:51:df:39:a9:ab:e0:1f:51:
                    4e:37:11:15:c6:a0:e6:16:50:c3:8b:b7:92:93:33:
                    7e:71:61:de:ee:90:86:75:2a:0c:e1:48:ec:22:0b:
                    89:4b:d2:50:36:ce:32:8c:0f:92:13:56:48:18:85:
                    9d:6c:59:bf:b5:6c:f9:4d:7b:54:fe:fb:2a:a6:36:
                    9c:0c:2b:a6:fb:94:c7:12:c3:99:74:f2:0a:4a:41:
                    87:b8:ed:e0:18:7d:0c:c9:f4:4b:fc:2d:92:18:85:
                    56:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D0:DB:E0:39:BB:93:5F:A1:3B:69:12:E7:26:BB:30:3E:3D:30:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/d4a4ba4a-e9dc-3f10-b988-3fa6ecee18ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20c7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:7d:a8:35:80:24:3d:09:a2:66:1b:c2:5b:f3:d3:1b:78:68:
         e0:c4:6d:dd:76:47:6d:1f:6d:6c:6b:25:f9:18:3d:10:f8:39:
         6b:68:51:89:3c:8d:47:77:b3:dc:8a:0c:87:71:68:56:4f:a6:
         2d:46:d4:10:cb:5d:5d:3d:a0:4b:54:48:e2:7e:a8:3b:ab:22:
         e0:37:6f:97:a5:ed:a3:ea:9f:e0:e7:28:a9:e0:93:85:07:b8:
         d7:b7:96:b7:84:87:50:20:34:51:03:37:74:d9:42:1c:9a:13:
         e6:70:cd:b4:da:cf:b3:8a:86:06:c9:74:76:2d:88:ab:6a:46:
         76:11:c2:7a:1a:58:03:a8:19:01:23:ab:a3:b6:9f:ab:e9:f5:
         5c:d9:0d:d0:5b:92:6e:38:c4:73:9b:8b:f5:80:d3:1b:5b:1d:
         9c:9e:be:9e:18:65:dd:6c:09:0f:ab:99:86:75:87:f3:34:aa:
         ae:c4:ea:df:00:ab:e3:54:a8:74:3d:fd:73:ae:5c:7f:20:eb:
         cb:af:c3:f0:a9:d6:ec:18:e5:de:c8:f4:32:bc:c6:32:8d:86:
         06:3b:3b:68:8d:97:19:53:2f:22:62:1f:8f:95:05:b7:85:31:
         12:e1:e9:9c:28:f6:36:05:87:84:96:5c:ad:b1:9b:8e:4a:02:
         dc:25:7b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 19:28:37 2025 by rpki-client