Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147/3fcf93dd-d596-3e12-9d59-4062faa41053.roa
File:                     3fcf93dd-d596-3e12-9d59-4062faa41053.roa (raw, json)
Hash identifier:          cg0OSbQwrjqTK/dT4/O8LkZfN8AcVwekHdhpIbF5pmQ=
Subject key identifier:   EA:1F:25:92:44:BD:45:89:AD:F1:84:8C:F8:65:50:9D:F3:EB:B4:B5
Certificate issuer:       /CN=73d6002b-995e-4a63-943c-bf2474d0b147
Certificate serial:       010D0C9F4328584AB4EB75E0D2DF4C66EC0EF440
Authority key identifier: 8E:A4:7C:4E:F5:7A:75:1E:07:EC:9D:A2:C9:73:19:EB:A5:0A:29:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147/3fcf93dd-d596-3e12-9d59-4062faa41053.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     400950
IP address blocks:        2602:f927:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147/73d6002b-995e-4a63-943c-bf2474d0b147.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147/73d6002b-995e-4a63-943c-bf2474d0b147.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:75:e0:d2:df:4c:66:ec:0e:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d6002b-995e-4a63-943c-bf2474d0b147
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=629b98a3-457f-4eb1-a749-f69898abf10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4c:bb:59:9f:57:16:1d:12:1b:92:60:0b:e8:
                    ef:bd:eb:7d:d6:89:bd:46:6b:e2:9b:d8:97:c9:97:
                    15:c9:91:59:6a:e9:df:67:c7:00:dd:8f:30:d3:5e:
                    b5:55:90:52:00:07:79:67:d4:85:8b:e7:0b:e8:fa:
                    46:05:09:a9:27:b0:c7:3e:5a:f0:72:5c:b7:ed:ca:
                    3d:32:cb:14:e5:24:94:98:3f:80:5a:c4:e3:19:6e:
                    09:92:ba:08:a7:34:c0:87:b2:a7:3f:3b:60:bd:b9:
                    2f:2b:bb:3e:55:60:f7:65:02:d8:2e:1e:e7:c0:ad:
                    f5:a1:0d:f9:80:86:ef:fe:09:1a:96:74:5b:e2:a3:
                    f2:4a:13:0a:72:9c:50:fd:5c:33:89:bf:10:d5:80:
                    d3:e6:37:0d:91:5e:8f:98:af:b5:82:38:51:4d:66:
                    d5:cb:84:58:dd:51:71:75:c7:55:20:dd:de:dd:7a:
                    f8:0a:40:32:1b:fd:e8:ab:25:b5:0b:b6:3b:a7:0d:
                    2b:b2:d8:4b:05:b3:5a:27:21:a1:bb:3c:34:85:72:
                    32:03:f2:b7:88:e9:61:a0:83:b2:ea:bb:ff:60:85:
                    cc:e7:18:00:37:bf:a4:2f:dc:9d:95:9f:2b:10:a8:
                    51:c8:a6:91:54:93:be:17:de:98:a0:e9:17:57:b8:
                    9d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1F:25:92:44:BD:45:89:AD:F1:84:8C:F8:65:50:9D:F3:EB:B4:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147/3fcf93dd-d596-3e12-9d59-4062faa41053.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147/73d6002b-995e-4a63-943c-bf2474d0b147.crl

            X509v3 Authority Key Identifier:
                keyid:8E:A4:7C:4E:F5:7A:75:1E:07:EC:9D:A2:C9:73:19:EB:A5:0A:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73d6002b-995e-4a63-943c-bf2474d0b147.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f927:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:52:21:e2:d3:71:ec:f1:ae:b1:a1:49:48:21:26:68:39:9f:
         88:68:ab:33:7a:4b:e7:f2:28:96:e5:23:a3:ce:8d:ac:d3:0d:
         9e:ac:34:47:ad:23:c0:d8:48:92:bf:e1:e9:eb:e6:62:89:60:
         c7:f4:c3:9a:96:28:40:3f:28:a7:a2:70:ca:23:0f:80:0e:46:
         ed:72:32:75:cc:c5:ad:4b:d6:b2:1e:f6:bf:c2:e3:48:e0:60:
         11:f8:5a:36:1c:cf:a8:0a:5c:45:98:3f:f4:1a:fb:47:f8:27:
         b0:ba:2b:47:13:18:db:06:e5:f0:e0:00:25:ce:5a:f7:08:d7:
         78:1f:ad:0c:42:ec:03:dc:99:75:82:09:74:5b:a2:fb:05:04:
         e0:8b:02:98:bb:37:0e:12:10:94:c3:f1:59:b1:8b:aa:86:40:
         c4:f2:5b:d3:50:a9:a8:46:be:66:1d:d4:59:a0:9e:00:52:c6:
         8d:f1:4d:50:82:08:4d:18:42:3c:e1:ba:ca:24:cf:13:2c:f5:
         ca:4c:26:98:b0:fc:90:3e:2f:3a:24:a9:40:15:1d:2c:d2:f3:
         b2:08:34:1d:a5:cd:70:3f:76:8c:b3:d0:e7:cc:3c:3e:8d:51:
         ff:ad:f1:ff:9b:f7:9a:eb:91:2b:06:ef:85:5d:a7:f3:ad:d7:
         d8:c4:3e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:27:21 2025 by rpki-client