Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/0e1ed544-0474-3f7d-b2f1-7c221d21fa94.roa
File:                     0e1ed544-0474-3f7d-b2f1-7c221d21fa94.roa (raw, json)
Hash identifier:          lz+i9+9uLOmZoVw4asX35Pp4f3BNabShT0BbSc/1EII=
Subject key identifier:   99:F5:87:EC:83:72:75:02:2D:32:3F:10:35:07:50:A9:C9:F4:63:7A
Certificate issuer:       /CN=6c4fd986-1af7-4389-bf91-d4b92edc9ac9
Certificate serial:       010D0C9F4328584B0B76AEF4FB2EAE10E28ED980
Authority key identifier: 93:DE:D5:D0:1E:64:B5:DE:A0:FC:8D:39:1C:47:AD:FA:B2:4A:51:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/0e1ed544-0474-3f7d-b2f1-7c221d21fa94.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     197547
IP address blocks:        2602:fa33:ff:ffff::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:ae:f4:fb:2e:ae:10:e2:8e:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4fd986-1af7-4389-bf91-d4b92edc9ac9
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=50a89691-b71a-4139-8ebf-c998536fbdfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:a2:d5:1b:66:0a:4a:29:09:1d:18:18:a8:
                    a4:e3:be:62:8e:34:2b:41:be:78:31:b6:0c:cd:bf:
                    ec:6e:cd:7d:69:81:ad:89:c1:b1:c5:e7:0e:c0:99:
                    70:1d:77:b2:5e:98:ee:00:b5:97:b5:63:94:ea:a7:
                    65:fc:91:27:36:d8:ce:9a:4d:2f:b1:77:f0:21:2f:
                    63:25:5b:2b:e5:f2:03:9c:84:f0:64:40:10:63:90:
                    8f:ff:22:06:43:10:bb:f6:b8:41:86:a6:cb:a1:0d:
                    36:57:c4:b5:26:3f:ad:23:06:35:dc:0d:83:aa:ef:
                    da:b6:a1:f1:1a:cf:19:83:c0:58:6f:a3:c8:7f:0f:
                    bc:99:48:d0:59:9e:97:c3:5c:2b:d4:bd:2c:67:d0:
                    44:27:39:f7:4c:d9:9e:b6:38:dd:f5:0a:08:4c:1f:
                    37:28:0a:ce:8e:9d:5a:e8:ff:89:56:df:7a:f7:0e:
                    03:eb:b8:0e:8e:04:5f:6b:79:93:3a:a4:28:09:e7:
                    c2:67:de:4e:ca:55:36:60:23:96:86:b2:ab:2a:d4:
                    e1:fc:7c:26:76:1c:5e:d4:01:1a:bc:6d:f6:cb:3a:
                    cb:1f:5e:7b:4d:a7:6b:c5:dc:9d:55:b0:cf:41:bc:
                    48:a7:e0:05:21:62:bd:66:a7:98:44:c6:f2:30:88:
                    7c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F5:87:EC:83:72:75:02:2D:32:3F:10:35:07:50:A9:C9:F4:63:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/0e1ed544-0474-3f7d-b2f1-7c221d21fa94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.crl

            X509v3 Authority Key Identifier:
                keyid:93:DE:D5:D0:1E:64:B5:DE:A0:FC:8D:39:1C:47:AD:FA:B2:4A:51:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6c4fd986-1af7-4389-bf91-d4b92edc9ac9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa33:ff:ffff::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:55:61:78:ab:e5:93:72:24:3b:cf:5f:e3:33:4a:1e:70:78:
         1f:83:61:42:1b:00:25:66:36:53:72:bd:ff:c0:6e:f0:f0:84:
         84:ca:66:02:23:80:87:7f:49:dc:e3:a0:c7:32:5a:32:fc:e2:
         15:e8:c3:92:9c:27:02:24:9d:6c:d3:57:59:2d:25:2b:4f:c2:
         f0:3b:46:80:c9:47:9e:73:87:3d:fe:80:18:43:7f:47:10:71:
         3b:34:d8:15:de:fb:97:dc:0a:dd:dc:ae:b5:95:d8:7c:3f:0e:
         2c:2b:bb:bb:9f:6f:1f:8f:cb:f6:d6:86:23:d3:b8:1b:7c:23:
         79:46:bd:33:99:97:34:5d:7b:29:0b:8b:da:46:bb:69:dc:4b:
         a2:10:2b:77:e9:a7:4d:e1:72:f2:a6:a5:71:77:19:df:dc:f7:
         f5:49:b0:59:4b:14:00:ac:8c:1d:bd:6a:11:5b:a1:ba:de:f9:
         99:09:cd:f8:27:fc:1a:0c:43:0c:d4:50:7d:9c:88:61:31:1f:
         ae:70:77:18:61:cc:5e:e9:65:ed:3d:f9:eb:a2:ba:b6:53:ef:
         53:91:9f:1d:05:11:ff:61:8c:9e:db:d1:f0:1e:5a:bb:fa:b7:
         30:6a:d1:dc:27:21:97:37:88:fd:8c:f7:65:8a:d9:e9:88:ef:
         52:e1:46:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 02:08:16 2025 by rpki-client