Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/7604f87c-fb33-3240-9169-3653fe0a6414.roa
File:                     7604f87c-fb33-3240-9169-3653fe0a6414.roa (raw, json)
Hash identifier:          XqMffAcn5Hz9rFPe7HtG0Jw9QrkZ990HApmpDrXLqR4=
Subject key identifier:   1A:D6:A3:A2:72:2D:7D:B1:81:A4:C2:20:38:AF:8B:28:37:94:6E:81
Certificate issuer:       /CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
Certificate serial:       010D0C9F4328584B0B76B4602CE9C4D5EF8E7AE8
Authority key identifier: B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/7604f87c-fb33-3240-9169-3653fe0a6414.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     23470
IP address blocks:        2602:fa4f:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:b4:60:2c:e9:c4:d5:ef:8e:7a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e8e1bf-8da7-4fbc-9588-5748e5666bf7
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=e7da210a-c22a-4439-80c6-cc1faf120b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9c:1d:6c:38:f3:7d:cd:0a:90:17:4a:5e:63:
                    2a:0b:1e:fb:f5:e4:f3:38:72:e0:06:ea:ff:c6:46:
                    a5:d8:de:85:47:fd:97:8b:43:9a:cd:25:f9:85:dc:
                    76:1c:30:5c:fd:f5:21:0a:1e:48:2c:e1:b6:24:81:
                    3d:00:d8:21:c2:f3:09:c6:4a:51:4f:93:7e:91:1f:
                    96:e9:00:5a:b3:ca:ac:2e:d8:fd:8b:06:d1:e2:0e:
                    9f:23:72:7f:5b:18:d1:fb:31:88:80:6d:cb:59:99:
                    0e:b2:c0:56:51:57:9d:f7:e0:e3:b5:f7:e1:c5:aa:
                    1c:60:b4:64:cb:fe:3c:54:e3:48:f1:75:0c:85:5c:
                    fc:57:21:56:24:e7:2c:dc:86:ac:3a:7b:0e:d4:6a:
                    7c:2c:1a:fe:39:79:2b:1b:f9:eb:d8:61:54:39:3e:
                    e5:2c:76:cb:2b:4f:25:ef:c8:c3:9f:24:fa:ed:f0:
                    9a:de:e7:1c:05:1c:ce:64:a2:3a:84:c8:0c:bc:bb:
                    1b:7d:19:6c:4c:46:97:86:0c:07:a3:dc:17:58:10:
                    4f:1d:e8:6d:95:98:7b:52:0c:c0:f9:1e:2d:1d:46:
                    29:d9:70:a6:d7:07:21:99:37:8b:7f:7d:81:8b:c1:
                    71:0b:2e:20:47:85:68:e5:c1:c7:aa:80:6f:34:9f:
                    da:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D6:A3:A2:72:2D:7D:B1:81:A4:C2:20:38:AF:8B:28:37:94:6E:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/7604f87c-fb33-3240-9169-3653fe0a6414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.crl

            X509v3 Authority Key Identifier:
                keyid:B4:D6:43:B1:07:94:9B:8B:9E:DA:C6:50:40:91:1B:1F:85:DC:88:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/59e8e1bf-8da7-4fbc-9588-5748e5666bf7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4f:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:bb:29:57:b0:5b:a7:05:c8:38:f3:94:ff:e8:fa:c2:80:aa:
         12:20:54:32:aa:ae:34:2e:f4:aa:1d:23:f9:f0:86:d1:cb:44:
         e2:75:95:62:d1:80:bd:cc:9f:49:38:a7:d1:07:05:26:ac:dc:
         ae:b2:86:72:c8:ec:18:9f:6e:bf:56:05:63:85:63:c9:87:b4:
         09:d8:22:eb:01:ea:a1:42:87:19:9c:9b:e1:5d:f5:1e:9f:e4:
         39:cc:e9:ac:e4:0e:f4:36:78:1d:54:15:55:51:b3:6d:ed:1e:
         c0:d2:28:52:98:1b:43:8a:a2:7e:03:ec:df:be:fa:9b:24:d6:
         84:b7:49:c7:82:74:a2:bc:46:c5:a0:e2:66:15:cc:e7:3d:f3:
         cc:4a:50:e2:d3:77:ec:14:43:f6:c8:71:24:28:f4:71:87:46:
         36:8e:98:ea:8f:68:b1:17:55:46:d5:66:ee:b9:81:dc:50:b0:
         fa:c1:57:96:c1:a5:f9:0a:30:2f:19:b4:cd:c8:86:d3:0f:5e:
         f3:bf:9e:86:44:20:1f:6a:66:1a:23:c3:a4:93:cc:20:90:22:
         85:8f:59:00:b4:fa:51:95:65:8f:51:c3:c2:05:79:06:ea:89:
         42:30:93:0d:f3:f1:09:83:ef:ad:1c:e7:33:0c:5b:1c:2a:56:
         02:a8:7f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 01:07:10 2025 by rpki-client