Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/ef6b9fe5-bc7b-339d-ac0e-34a14d5aa151.roa
File:                     ef6b9fe5-bc7b-339d-ac0e-34a14d5aa151.roa (raw, json)
Hash identifier:          MX5jlRr/ErDb+w/c65x2E1qltBNwZsDfCqLOt9SWZ0Q=
Subject key identifier:   8A:7C:B1:0A:14:08:E0:8B:A7:B2:C0:82:D1:DE:34:2B:08:F1:95:87
Certificate issuer:       /CN=37e69330-3024-406b-b60a-0d95e25f2334
Certificate serial:       010D0C9F4328584B1806EE31F868566829681300
Authority key identifier: 97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/ef6b9fe5-bc7b-339d-ac0e-34a14d5aa151.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     401390
IP address blocks:        2602:f7da:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:ee:31:f8:68:56:68:29:68:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e69330-3024-406b-b60a-0d95e25f2334
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=796b49fc-03b3-49fd-ab85-cfd2e7037309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:95:c4:01:c3:5d:ec:a1:f8:28:ac:15:d1:ed:
                    e6:e2:5f:99:d5:d3:3f:8a:74:0e:8f:39:5e:68:6e:
                    56:12:43:fc:23:2f:8a:48:64:48:7a:7d:30:46:bc:
                    00:87:be:05:d0:17:34:5d:3d:81:40:e5:9d:fe:ce:
                    a9:49:a6:53:a2:54:90:41:5e:03:50:32:24:41:ac:
                    ac:da:1e:4e:f9:b0:26:f2:0f:54:6d:06:d3:66:a3:
                    ff:8f:e1:e0:9f:8e:46:f2:4d:05:14:c8:f6:e5:ba:
                    f8:fb:f9:86:96:f1:c3:ef:f6:f4:28:f5:bc:ce:b7:
                    8b:b9:87:2c:a3:01:a1:04:be:b2:51:e8:88:8a:f9:
                    2c:ed:3c:1a:93:d0:32:31:6a:00:d5:c0:3e:ba:85:
                    56:a3:79:2d:af:ff:dc:22:f8:db:82:0b:3c:2c:13:
                    ed:11:f4:3a:d2:53:7b:8f:ff:e5:af:2f:dd:5a:47:
                    a8:0b:bd:98:59:95:6d:6b:50:47:c4:84:46:92:5b:
                    61:17:13:6b:4f:5b:24:e7:f1:a2:cc:0a:16:56:aa:
                    60:c7:2e:c9:0b:7c:1c:11:48:65:89:08:10:c6:e9:
                    9d:e8:85:d2:c4:da:83:34:d2:5c:02:bb:1b:a1:36:
                    02:2b:20:fb:be:94:85:9b:ca:f0:f9:82:29:ac:c4:
                    a2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7C:B1:0A:14:08:E0:8B:A7:B2:C0:82:D1:DE:34:2B:08:F1:95:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/ef6b9fe5-bc7b-339d-ac0e-34a14d5aa151.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334/37e69330-3024-406b-b60a-0d95e25f2334.crl

            X509v3 Authority Key Identifier:
                keyid:97:16:A9:AB:66:95:3F:3F:2C:40:FC:1D:33:63:85:A7:45:D4:65:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/37e69330-3024-406b-b60a-0d95e25f2334.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7da:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ed:3d:83:0c:4d:de:4b:8e:b1:e6:16:28:80:df:fc:15:80:
         66:5b:58:ab:b1:02:87:e3:2f:72:e5:a3:fb:e6:c7:66:ba:67:
         2e:24:aa:57:3c:0d:d9:cf:d0:76:f9:a2:09:81:81:58:0a:4c:
         d5:c3:21:4b:d1:91:e8:71:88:c7:37:6e:c7:83:0f:d3:92:86:
         07:c8:92:b4:e8:df:32:11:e0:48:a0:83:30:23:77:65:d3:26:
         3a:14:a5:96:c6:df:d6:a2:ab:11:fd:f9:df:7a:eb:00:3c:9b:
         0d:99:e7:39:91:52:41:c9:bf:eb:27:be:a4:be:4b:93:47:fa:
         4c:5f:39:cf:f1:86:b4:99:f4:69:ac:27:0e:ed:4e:de:7f:a7:
         40:07:0a:67:cb:ed:e2:94:b2:10:02:55:c2:d4:26:30:ee:f8:
         f4:de:a6:b0:68:5e:1d:dd:75:fe:b0:44:fc:83:59:3e:51:34:
         d9:98:b8:b5:fd:b7:6c:55:49:ee:66:8a:37:7b:45:ff:00:f3:
         fc:ef:53:76:ab:bf:d5:5f:e0:c4:79:0e:08:36:6d:15:67:b7:
         f4:a7:98:77:71:61:4c:0e:45:3e:29:7f:b7:e9:12:4f:bd:a4:
         92:3b:ed:06:d7:9a:2d:09:2f:dc:fd:22:25:4f:32:f7:da:df:
         d6:25:6f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:51:38 2025 by rpki-client