Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/577cd51e-6e83-3a50-8679-c14536fe0c2d.roa
File:                     577cd51e-6e83-3a50-8679-c14536fe0c2d.roa (raw, json)
Hash identifier:          r5NFwIRyLFYi+t3G3jTGj1DHzIfUCqexgENS1RAXG9Y=
Subject key identifier:   64:E2:47:A2:2B:42:BD:61:DB:8A:5E:73:5B:4D:28:E2:15:CB:33:17
Certificate issuer:       /CN=ff223998-3819-4b72-ade1-eec292b0a8d0
Certificate serial:       010D0C9F4328584B328C5B31001EA2CFB05FFF80
Authority key identifier: 34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/577cd51e-6e83-3a50-8679-c14536fe0c2d.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     11703
IP address blocks:        2602:f609::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:5b:31:00:1e:a2:cf:b0:5f:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff223998-3819-4b72-ade1-eec292b0a8d0
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=a8dcc6b2-535d-4fad-b253-62fe49f50e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d9:74:4a:ec:b9:68:05:53:3d:82:7e:65:fa:
                    f2:69:b0:8f:7b:77:99:e7:73:16:e8:81:51:f7:d0:
                    45:ae:10:b0:de:3d:a8:eb:ff:6e:bd:27:f3:64:b8:
                    57:49:87:17:5e:46:49:b0:d2:1d:e5:1f:b3:1c:3a:
                    1b:ec:04:70:79:4c:5c:90:4a:1c:85:3d:a6:42:d2:
                    87:a1:b4:b8:f3:dc:7b:e1:b5:66:06:ad:24:6f:1d:
                    98:6a:c6:b5:75:8e:e5:b5:55:e0:2d:30:b7:d8:5f:
                    90:26:dd:6e:b2:56:f7:a5:ab:60:ca:e5:8d:ff:3a:
                    62:71:f4:f0:a4:1a:7d:6a:7e:40:b9:c2:92:9b:ce:
                    9d:73:69:47:0c:fe:21:d0:0f:9a:07:1b:48:80:92:
                    2a:24:fd:7b:e8:9c:f0:1b:ae:d2:68:6e:b5:50:9c:
                    a2:69:0f:fc:93:0d:f8:b8:02:a8:dc:aa:7b:33:d9:
                    aa:bf:e1:93:47:74:c0:2e:56:67:8a:bb:ad:be:6b:
                    18:d5:4c:53:b7:17:76:18:e1:98:94:ca:8a:62:f1:
                    ee:ba:9f:ff:81:fb:fc:47:0c:8a:5d:98:82:7f:2d:
                    0e:f4:4d:25:0d:ff:14:da:19:60:4d:2e:ca:c8:00:
                    35:65:eb:42:c1:22:0b:64:c6:60:24:b8:d8:67:4a:
                    ca:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E2:47:A2:2B:42:BD:61:DB:8A:5E:73:5B:4D:28:E2:15:CB:33:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/577cd51e-6e83-3a50-8679-c14536fe0c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.crl

            X509v3 Authority Key Identifier:
                keyid:34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f609::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:63:2f:18:56:33:de:a0:08:4c:ba:9b:a3:98:c1:55:0e:73:
         44:6e:84:2f:a3:e4:f1:15:5c:6a:84:41:5e:11:97:76:d8:f6:
         e5:94:d6:c2:d3:43:cb:65:83:00:db:0b:22:52:cf:41:49:f8:
         91:56:0f:28:e5:62:58:bf:36:15:a2:fd:ae:f6:5d:df:fc:f9:
         54:35:d5:17:62:84:1c:58:78:7e:22:db:6f:d2:c4:cc:94:51:
         d5:f5:0a:79:80:74:4e:33:c9:c5:54:29:a9:7f:15:eb:a8:22:
         14:bc:82:32:59:ab:4f:4a:ea:ae:86:8a:f9:f3:69:4b:13:11:
         0e:5e:f4:ed:b7:5e:5c:28:09:6e:d5:c4:34:56:d0:00:e7:6c:
         73:b8:fe:7a:18:97:8f:3c:9a:10:b4:d7:6e:d8:69:c7:04:f0:
         3c:f2:d4:7a:78:a4:64:ba:d1:99:e4:42:f0:2f:42:c6:e7:8c:
         85:b2:c6:18:7b:f6:d8:03:7d:86:3a:e0:70:e8:0a:a3:23:90:
         6d:fe:c4:e8:b3:98:53:aa:1d:a0:d9:f4:51:5e:ff:02:bb:d3:
         b6:c8:bc:2d:98:b4:10:7e:08:96:c9:69:89:d2:9d:36:e4:1c:
         6d:50:32:11:a4:87:7c:40:a5:40:6a:a6:e9:e6:b0:b6:1f:08:
         f8:08:b4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 11:31:41 2025 by rpki-client