Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/413904da-6901-3e61-86ae-c596ab591334.roa
File:                     413904da-6901-3e61-86ae-c596ab591334.roa (raw, json)
Hash identifier:          GCRmnz7XDKI2cESw4KpW6eoeNjYr52m0G00hud7dRGM=
Subject key identifier:   E0:E5:A8:10:E9:E8:E0:A2:22:1C:13:24:2B:78:ED:F2:2D:26:C3:2B
Certificate issuer:       /CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
Certificate serial:       010D0C9F4328584AFEE6A891C252BCD908883BC0
Authority key identifier: FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/413904da-6901-3e61-86ae-c596ab591334.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     401399
IP address blocks:        2602:fbcf:e0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:a8:91:c2:52:bc:d9:08:88:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaefdd80-35cf-47b1-945a-5fab92c9da95
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=632bcfde-88b2-4e50-a34f-12dfd7fb6726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fe:5a:8a:f2:34:80:07:3c:da:81:2e:5e:25:
                    d0:dd:99:02:3f:29:a8:04:07:f9:8b:29:67:36:ee:
                    3d:f2:84:19:c4:ab:08:ad:11:50:59:02:aa:2a:2b:
                    06:78:2c:83:ff:e6:65:7b:f6:cd:21:53:4b:d6:2d:
                    0b:54:1d:39:06:61:97:22:26:13:9d:34:e5:9a:80:
                    af:e3:70:93:d9:f1:c5:94:c8:ac:60:e3:fe:b6:0a:
                    67:b9:05:78:db:f4:56:3d:18:98:7f:3e:0d:58:6a:
                    1b:0e:97:a7:1b:2c:32:1e:24:51:ea:72:9e:1b:a3:
                    36:5b:43:b6:60:f0:3b:26:04:2d:d3:a5:5d:21:fd:
                    51:35:60:7d:bc:04:14:69:b2:8a:e1:5c:b3:72:66:
                    b9:1f:cd:9c:c6:13:83:b4:85:3f:0c:6e:98:62:ae:
                    d3:01:42:f9:ee:5e:6b:e6:09:7e:05:0b:be:3f:cb:
                    13:f3:c2:5a:79:a4:1d:e7:7f:df:f3:ac:13:54:6b:
                    5e:f4:77:7e:a6:3b:fc:09:84:4a:26:5f:2d:f7:b2:
                    e9:8b:ae:d1:e2:12:3e:ac:58:24:71:06:f1:b4:19:
                    17:dd:f1:8f:52:e0:9a:a1:ad:f0:fb:35:0f:9d:1c:
                    78:fd:b4:12:cb:d1:70:d0:bc:06:54:2d:23:2a:c4:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E5:A8:10:E9:E8:E0:A2:22:1C:13:24:2B:78:ED:F2:2D:26:C3:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/413904da-6901-3e61-86ae-c596ab591334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95/eaefdd80-35cf-47b1-945a-5fab92c9da95.crl

            X509v3 Authority Key Identifier:
                keyid:FC:17:CF:86:90:FB:23:FB:E6:01:ED:E5:0A:04:0D:AC:15:BB:45:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eaefdd80-35cf-47b1-945a-5fab92c9da95.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbcf:e0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:70:69:d6:a0:38:27:14:a7:bd:99:c4:52:e1:e2:d6:4b:a1:
         fc:d0:ef:45:ee:96:46:d8:2c:fa:bd:68:c7:e5:8a:d3:e3:2c:
         0b:6a:a6:0a:cd:13:21:27:31:63:36:be:d3:8c:a0:39:47:70:
         ef:42:33:d8:6f:3d:df:0c:f6:cb:8f:eb:e1:fc:17:d1:1b:12:
         c8:3b:2f:bf:78:c6:9f:17:3c:be:62:44:2c:10:f2:a5:83:6f:
         d2:f8:4e:63:49:e3:c4:3c:7a:d1:84:af:8e:f8:85:a4:cb:29:
         06:15:ff:58:f7:96:f5:14:62:30:e2:eb:5d:a6:ae:42:25:d6:
         06:6f:4d:4e:c0:63:e3:a9:94:a6:38:e6:4a:c6:63:47:26:69:
         9a:f3:9c:d9:d9:46:93:1b:bc:c8:d0:97:b9:63:b1:0a:3b:0c:
         5b:ba:1a:9b:6e:ac:14:08:c7:39:72:fa:97:a2:df:50:da:5e:
         70:20:fd:ab:d1:0c:44:e9:3c:90:52:c6:1d:82:fb:06:06:79:
         00:9d:70:0e:e2:9f:0a:ec:fb:58:56:6f:89:3e:c6:35:bf:12:
         24:4c:5d:a5:ac:0c:13:a3:86:f8:08:57:7a:b3:fb:0f:e3:e1:
         55:59:88:7b:a0:6d:67:5c:36:a0:bb:4f:49:31:d5:1c:32:fc:
         7b:03:e0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:48:52 2025 by rpki-client