Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/6c7472b0-6d12-33be-a9f9-85e26dc54729.roa
File:                     6c7472b0-6d12-33be-a9f9-85e26dc54729.roa (raw, json)
Hash identifier:          YBn3TQJXlYKLHy2G5EbwybgfzDamRNqKwjSbuFp/+hw=
Subject key identifier:   C5:42:64:53:63:F6:05:94:D1:C1:D0:ED:E7:B7:1B:B2:9D:04:F1:2D
Certificate issuer:       /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
Certificate serial:       010D0C9F4328584B1AD1954A4EAE0193C813BA40
Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/6c7472b0-6d12-33be-a9f9-85e26dc54729.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     33039
IP address blocks:        2602:f95c:ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:95:4a:4e:ae:01:93:c8:13:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=e4a5e347-b324-4164-b372-d188bf8e230e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2b:ee:82:07:af:39:dd:8f:46:2f:a3:0d:5d:
                    8d:a5:3f:a6:53:25:e9:f3:dd:a9:ea:83:e2:ed:dc:
                    4c:da:34:e0:70:4a:91:83:a3:c9:3c:30:ae:21:2f:
                    a5:21:b0:43:d6:95:5e:b9:28:25:a2:98:db:97:f4:
                    f9:e6:0b:80:dc:c8:02:8d:fe:ff:ef:a2:7a:c9:6f:
                    7b:1e:49:61:71:6c:7a:fd:0e:fd:16:f1:28:db:d6:
                    84:0c:78:84:80:ea:89:fd:7c:80:5c:22:10:d0:20:
                    d1:10:7a:cc:02:d0:1d:85:59:19:7b:6b:42:e6:b0:
                    9d:c8:f2:91:17:97:9e:69:6d:fd:16:72:8f:5f:d8:
                    e6:2b:82:0f:66:81:f3:4e:b2:03:c8:0e:0f:c6:31:
                    88:06:11:f3:1e:65:5e:72:55:47:65:9c:7b:ca:28:
                    2a:aa:c3:a0:47:14:13:63:64:72:fe:db:e3:bc:f3:
                    d9:d3:ef:fe:b3:6b:44:a4:04:2f:e9:12:18:a5:96:
                    2d:c0:7c:fb:d6:a7:b7:f9:a6:7d:91:36:66:f9:6b:
                    9d:c2:e3:77:17:da:3e:99:8e:87:31:5d:6e:ee:14:
                    df:b3:ef:ce:41:83:59:ab:fa:80:40:2c:b5:bf:47:
                    a4:25:ff:ea:39:9c:a0:96:ce:26:76:2d:d8:e7:55:
                    83:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:42:64:53:63:F6:05:94:D1:C1:D0:ED:E7:B7:1B:B2:9D:04:F1:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/6c7472b0-6d12-33be-a9f9-85e26dc54729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl

            X509v3 Authority Key Identifier:
                keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95c:ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:68:37:b5:d5:15:df:fb:ae:9b:ad:02:50:21:df:1f:db:17:
         e1:98:0d:8c:eb:e8:81:be:c9:64:80:1a:48:f6:a9:aa:37:0f:
         5c:bd:57:e2:9c:d9:f5:95:46:69:a2:1f:3f:8a:ce:a2:40:1f:
         78:b9:a0:49:bc:85:7d:da:bf:8d:b5:68:fb:cb:44:da:c5:69:
         c1:34:6c:cc:6f:e9:45:de:bd:70:5e:db:ce:35:f0:bb:59:68:
         3d:32:9e:ca:b5:c2:29:c1:d3:69:31:1f:ed:70:1c:df:8e:3c:
         43:d1:64:eb:1b:a8:07:b4:f5:9f:1f:0c:19:d2:6b:18:38:c1:
         c1:9d:37:2b:7f:33:91:76:22:76:19:96:7a:0e:b4:ef:f9:cd:
         f5:ce:57:cd:94:9e:fb:b1:be:48:44:41:a4:39:29:2c:98:a9:
         40:ee:1d:f4:3b:76:9d:e5:7e:c9:d9:29:66:52:49:d3:33:1b:
         7b:21:e5:48:16:87:91:be:4b:48:ea:21:cd:8c:52:ed:70:f0:
         86:4e:74:4b:13:16:96:eb:c3:04:5e:4e:0b:21:b7:97:fd:e8:
         2d:06:64:09:fd:da:47:9b:53:4e:48:39:43:95:52:46:0d:e2:
         b3:29:ac:0b:ba:5c:53:15:26:f6:94:21:34:be:c3:5e:54:16:
         16:bd:46:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 13:16:15 2025 by rpki-client