Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/6a610220-4e4a-3b80-971e-3405f066ffbd.roa
File:                     6a610220-4e4a-3b80-971e-3405f066ffbd.roa (raw, json)
Hash identifier:          PF+deYcaJ7EI4rxOMCTGUg3ArJI9NzuwJqkCLuxIEPo=
Subject key identifier:   CA:7C:1B:F5:0E:02:08:0C:36:62:FF:88:09:47:C1:3F:68:64:11:18
Certificate issuer:       /CN=55bbf9e8-b36d-4738-b477-dcc24272dbf6
Certificate serial:       010D0C9F4328584AE8912AC4A52144119D67B020
Authority key identifier: 63:41:45:20:E6:F3:69:D2:70:D0:25:C7:9C:ED:98:AD:57:67:48:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/6a610220-4e4a-3b80-971e-3405f066ffbd.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     397547
IP address blocks:        2602:fc14::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/55bbf9e8-b36d-4738-b477-dcc24272dbf6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/55bbf9e8-b36d-4738-b477-dcc24272dbf6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:2a:c4:a5:21:44:11:9d:67:b0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55bbf9e8-b36d-4738-b477-dcc24272dbf6
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=d56293f0-bd9d-400d-a183-89f683f2a2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d7:ce:b4:6f:8e:96:54:c4:5f:2c:80:ce:65:
                    09:3e:83:a0:e0:55:3b:5b:c3:50:a6:7c:77:e6:bd:
                    ca:d3:29:7b:92:49:47:24:71:49:ef:24:66:25:16:
                    a3:38:0c:a8:9f:4a:05:24:a5:d3:e1:56:7f:bd:02:
                    89:6a:17:09:7e:2e:ac:07:1a:24:44:cd:7a:07:f6:
                    5b:72:d4:98:87:97:1f:e5:cc:0c:73:78:3e:2a:26:
                    77:4c:4a:4a:d3:20:78:bb:d5:f9:6e:51:bb:cd:16:
                    6f:6f:d3:47:de:92:ce:9f:d4:37:4d:7e:44:13:a3:
                    1c:06:7d:17:6c:d6:a9:65:be:8f:0d:b4:5c:eb:9c:
                    67:18:1e:0b:08:c1:dc:d0:f6:64:c6:bd:6f:bc:c5:
                    37:a0:ad:52:d2:1f:31:ba:19:4d:fb:52:fb:f1:0c:
                    9d:4e:b4:14:59:c7:0c:82:e4:a7:bb:27:78:9c:37:
                    fe:d8:9f:3e:cb:18:3e:bc:5d:b1:57:0a:df:eb:55:
                    a1:1a:4c:36:6c:cc:37:90:cd:cf:ff:0e:89:1e:4b:
                    49:08:b4:93:ab:06:7b:ed:fc:83:d8:e8:0b:07:bd:
                    dd:91:8a:15:11:af:c1:79:bb:a4:d1:47:1b:b2:19:
                    b3:5e:02:7d:0a:6f:8b:09:74:1f:72:06:61:25:c2:
                    d1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7C:1B:F5:0E:02:08:0C:36:62:FF:88:09:47:C1:3F:68:64:11:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/6a610220-4e4a-3b80-971e-3405f066ffbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/55bbf9e8-b36d-4738-b477-dcc24272dbf6.crl

            X509v3 Authority Key Identifier:
                keyid:63:41:45:20:E6:F3:69:D2:70:D0:25:C7:9C:ED:98:AD:57:67:48:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc14::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a5:fc:4b:7a:b7:32:8c:72:fd:1a:26:da:ac:4d:00:50:3b:
         7c:1a:1d:6f:b9:ad:33:98:ae:e3:ec:b8:b6:fc:0d:9a:83:3a:
         29:5a:73:30:07:b2:1d:77:23:4b:03:ed:15:8e:30:1a:9f:ba:
         11:fa:5b:a7:33:7c:7a:0c:83:5a:ea:7c:b7:3a:d6:c8:83:e6:
         4b:af:0b:82:23:b5:72:7d:3d:16:10:db:64:04:40:6a:19:45:
         f2:4a:a2:65:59:ff:bf:9e:2c:2e:1b:11:47:17:62:69:96:14:
         53:ff:8f:9b:99:b7:6a:4f:22:d4:98:0d:83:40:29:94:70:3a:
         1f:75:31:3e:17:e2:e3:56:88:3b:d9:aa:9c:b6:54:14:2e:e9:
         e6:9d:88:21:24:99:07:cd:e8:b6:c5:3f:94:96:7d:49:36:82:
         78:ee:66:d9:93:c5:ad:78:d9:ac:e4:cf:06:76:99:a3:ff:10:
         82:49:c2:02:df:ef:d7:24:6e:a1:d9:84:5e:10:1d:e5:c6:18:
         39:8d:fc:55:24:47:a4:29:d5:7f:8d:fd:9c:b3:7b:14:55:be:
         37:85:5f:8b:e2:f3:f3:5c:76:70:cd:fb:e5:05:44:8a:7c:92:
         b7:e1:48:d1:43:18:e5:14:9a:cf:a9:2c:35:dd:63:37:c3:9f:
         7b:11:fc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 01:16:19 2025 by rpki-client