Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/cf87537c-5f2a-311e-a4bf-d9d4f26c12a7.roa
File:                     cf87537c-5f2a-311e-a4bf-d9d4f26c12a7.roa (raw, json)
Hash identifier:          fZ4RlirnArBrp+dsSTLFX4RAffkMEAdiFKcHqoTqGXU=
Subject key identifier:   62:32:0B:D7:5E:32:EF:77:0F:2F:A7:05:3B:26:A6:81:FE:2A:BA:E0
Certificate issuer:       /CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6
Certificate serial:       010D0C9F4328584A63F5B73DB23DD68A8F1C09C0
Authority key identifier: DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/cf87537c-5f2a-311e-a4bf-d9d4f26c12a7.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     393746
IP address blocks:        2602:f95b:3::/48 maxlen: 48
                          2602:f95b:f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:b7:3d:b2:3d:d6:8a:8f:1c:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7990a1d-1dec-4721-b9fc-a68ef45cb3c6
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=a5e745c9-8627-4ef9-85f9-e13e65da955c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1d:0a:0d:3f:18:19:5c:53:a0:e1:63:e2:dd:
                    0d:cb:ca:7e:34:21:78:4f:7a:05:b1:86:cf:b7:b6:
                    d6:c9:b6:a3:9a:8d:c9:56:dd:d6:a7:87:6b:74:11:
                    b8:31:45:e6:fd:bb:6f:39:88:0e:41:a6:36:37:6a:
                    69:4a:5a:68:95:64:65:26:f7:2c:aa:95:aa:37:25:
                    e5:46:15:e9:0e:6b:c3:7d:8c:cb:6a:ee:96:ac:58:
                    a3:f2:69:3b:4a:19:1f:e3:5a:0f:16:a3:07:12:2d:
                    b6:64:3f:de:bb:2a:cd:d1:78:75:08:33:7a:89:18:
                    7d:84:42:14:1b:00:5c:09:c9:66:e6:d6:cc:4e:89:
                    68:c7:09:ac:4b:90:6c:5d:9e:e2:4d:a0:3e:4e:a7:
                    9f:db:49:da:69:ad:3e:2b:f8:ad:e1:2c:46:f7:6a:
                    07:eb:0d:4a:2f:7d:18:6f:a3:c1:98:b8:f4:4d:0c:
                    b6:b2:b7:37:1d:5b:67:9f:84:80:d5:54:7f:41:c9:
                    f6:97:05:1f:9c:81:81:b7:e7:4b:86:00:a9:77:d0:
                    b5:a6:8b:7b:64:2a:5d:92:8d:52:a0:4d:82:2d:14:
                    01:b2:66:20:95:11:cc:13:09:4e:ca:98:1d:c0:71:
                    96:7e:1b:78:eb:ae:0b:88:32:91:bf:e4:21:59:eb:
                    b7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:32:0B:D7:5E:32:EF:77:0F:2F:A7:05:3B:26:A6:81:FE:2A:BA:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/cf87537c-5f2a-311e-a4bf-d9d4f26c12a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.crl

            X509v3 Authority Key Identifier:
                keyid:DD:02:37:57:A2:47:56:D3:27:16:ED:37:0E:C5:18:21:7E:F7:0E:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c7990a1d-1dec-4721-b9fc-a68ef45cb3c6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95b:3::/48
                  2602:f95b:f4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:d9:53:0b:7c:83:4b:42:cd:69:05:62:e3:fb:f4:79:3e:e1:
         13:7d:ad:c2:13:3c:84:59:b8:92:03:f1:66:a0:3f:8e:17:cc:
         c9:5b:8d:28:ed:9a:c4:30:78:6d:f5:f1:e2:ff:4f:e6:28:42:
         fd:c4:0f:6f:00:46:c5:9b:26:7c:d3:7c:aa:eb:af:76:22:ee:
         27:9a:18:39:28:e7:fc:d3:33:ed:50:9e:a7:b9:23:36:ef:9b:
         3e:d2:83:c7:8c:d2:37:7d:e4:76:0b:bd:9a:33:43:ca:09:87:
         bf:b3:03:a9:fd:29:c5:c3:de:3b:46:7d:5f:d9:82:c6:6c:2e:
         8a:f8:e5:d0:7f:15:89:c2:c2:7f:9d:b3:aa:9b:be:46:b5:8e:
         92:0f:74:2e:0f:b8:6b:57:8b:a8:3b:d8:88:58:f8:33:19:29:
         61:45:e1:69:59:5d:82:bf:60:b2:45:d4:2b:d9:5e:9f:83:15:
         14:69:cc:c1:c3:29:43:6e:73:b6:e9:16:39:d1:bf:df:14:b6:
         ac:54:cb:f5:5c:6a:46:63:84:d9:54:5e:07:16:28:9e:8c:dd:
         af:5c:22:4b:ad:05:9f:3f:1c:69:69:ff:2d:81:40:5c:0f:8e:
         80:6d:65:07:12:ec:68:76:62:5a:7c:fe:90:cf:1d:cb:fb:22:
         ab:95:c3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 8 20:49:24 2025 by rpki-client