Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/2239dba6-cf05-33c7-91ff-2dfbbcb19211.roa
File:                     2239dba6-cf05-33c7-91ff-2dfbbcb19211.roa (raw, json)
Hash identifier:          20zmH+XT2VVMNpj+rwNFDbLgOPZSJ5bvKgEFfz/N+qI=
Subject key identifier:   89:9D:AA:11:7C:AE:F9:01:C4:F1:02:1D:E1:48:EA:35:88:62:05:EC
Certificate issuer:       /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
Certificate serial:       010D0C9F4328584AFEE6A2AC020F153145656A80
Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/2239dba6-cf05-33c7-91ff-2dfbbcb19211.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     138997
IP address blocks:        2602:fbda:800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a2:ac:02:0f:15:31:45:65:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=6c8d2a50-5575-4667-8f76-cbde2a00ee63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f4:97:8f:51:9f:f7:44:48:17:81:2a:88:7d:
                    a4:0c:58:f9:39:f1:0b:ef:32:e6:21:cd:e7:2b:54:
                    8c:9c:9e:bb:74:c2:ec:0e:4c:dd:8e:35:27:99:58:
                    ab:f6:21:6f:03:ec:aa:ca:b9:7f:ef:2e:bc:1c:9d:
                    a8:7d:a7:6b:0b:96:f1:b1:3b:36:17:fb:6d:00:1f:
                    95:73:07:62:ad:82:1e:ea:a4:bb:80:a1:60:54:04:
                    2e:ee:95:5e:e0:cb:e1:ab:be:7d:68:3d:f9:22:d7:
                    12:a1:7d:90:4b:d8:e1:8b:1d:0a:6e:3b:bf:f5:3a:
                    17:7b:b4:4b:5c:10:b3:c3:8a:d1:73:dd:53:bb:af:
                    da:fc:dc:e5:3b:a0:c9:17:b6:ae:97:5e:a7:ed:a6:
                    f7:ee:74:6f:57:9e:ca:55:e0:f0:b2:cf:75:51:f6:
                    82:6c:03:f5:c4:a5:49:06:84:a0:87:13:ec:e3:ed:
                    94:69:ce:f5:46:77:06:25:4d:9d:fd:99:bf:d5:26:
                    b1:76:ff:2d:25:7e:3a:0d:3c:78:3a:b5:60:af:98:
                    37:e6:26:25:cb:23:3d:d6:ba:75:f6:1b:61:f4:95:
                    d4:45:68:ac:78:ea:bf:a8:84:df:93:d4:5b:04:cd:
                    91:a6:c0:8d:50:d4:8f:7e:7d:95:00:aa:f7:a8:14:
                    16:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9D:AA:11:7C:AE:F9:01:C4:F1:02:1D:E1:48:EA:35:88:62:05:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/2239dba6-cf05-33c7-91ff-2dfbbcb19211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl

            X509v3 Authority Key Identifier:
                keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbda:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f8:1d:b7:ff:b9:35:c3:59:ee:7a:ce:10:a5:9e:b7:50:5b:
         54:2f:94:db:6b:a7:13:b7:92:ef:1e:03:2c:e7:f6:88:94:d4:
         77:ea:39:f2:c4:22:f8:80:d8:8f:87:78:92:cf:27:e0:37:84:
         12:99:3b:16:a2:fd:2b:35:73:84:20:48:2e:a1:ad:bd:87:fa:
         7a:7f:bc:23:61:03:61:38:47:e7:fb:70:b2:c5:d8:47:69:a4:
         5f:9b:96:c9:e5:d0:34:00:e6:d2:9a:5d:f8:0e:88:6d:ea:29:
         69:ba:85:93:fd:48:41:a1:5b:21:f2:e8:4e:44:9a:30:e2:61:
         4e:58:3b:15:e6:1f:c0:60:17:50:88:11:43:f1:1e:63:f5:87:
         25:82:ed:f5:b2:32:1a:31:64:9b:30:76:91:fd:5a:6c:12:ac:
         c9:49:cf:90:8c:87:df:9c:74:54:48:1b:6a:c2:27:5a:f3:e8:
         5a:02:8e:17:d7:d5:2d:2e:fb:00:ee:45:56:18:44:f7:38:90:
         9d:74:ce:bb:eb:3f:f1:4a:31:92:5c:33:93:ba:61:34:f4:39:
         e9:d9:0c:e9:85:d9:d6:29:b6:ff:99:c0:39:72:2e:a8:cc:7c:
         20:c3:51:da:e7:f0:06:3e:8c:bc:7f:12:9d:c2:ba:5b:aa:ee:
         38:15:61:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:10:55 2025 by rpki-client