Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/5ae9df01-feae-3a8b-870b-e74ce989fbdb.roa
File:                     5ae9df01-feae-3a8b-870b-e74ce989fbdb.roa (raw, json)
Hash identifier:          d2Yn/XG23D0GbeyPSZDghXXhNjO4XwO6ewLEkpL2HxY=
Subject key identifier:   69:94:03:76:C3:55:3A:21:C7:A9:07:0E:73:D3:C3:4B:F3:A0:69:47
Certificate issuer:       /CN=1073152b-033a-4ad5-ba98-45c1d65704d4
Certificate serial:       010D0C9F4328584B05E140B9B1A79905EE0ADD00
Authority key identifier: AF:6C:EF:89:28:99:02:21:63:73:BB:FA:49:68:55:AB:8C:49:1E:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/5ae9df01-feae-3a8b-870b-e74ce989fbdb.roa
Signing time:             Sat 30 Aug 2025 01:00:34 +0000
ROA not before:           Sat 30 Aug 2025 01:00:34 +0000
ROA not after:            Fri 28 Nov 2025 02:00:34 +0000
asID:                     215239
IP address blocks:        2602:f7ee:fe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:05:e1:40:b9:b1:a7:99:05:ee:0a:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1073152b-033a-4ad5-ba98-45c1d65704d4
        Validity
            Not Before: Aug 30 01:00:34 2025 GMT
            Not After : Nov 28 02:00:34 2025 GMT
        Subject: CN=9b6a9286-9026-4021-9568-76ed31259e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dc:bd:69:1a:5d:44:a2:90:fb:08:f5:ee:4b:
                    d6:99:71:a9:a7:b0:54:a2:51:95:69:cb:11:3a:a1:
                    2e:bf:7b:2d:2e:c6:72:fe:32:50:ea:b0:31:11:2c:
                    8c:db:c7:1e:88:4e:36:38:f8:d5:b5:fe:5b:c0:36:
                    8d:56:d5:11:a9:8a:95:33:59:ba:f0:e6:3f:e5:bb:
                    cd:62:e2:54:ec:9a:81:24:d4:a8:0d:c1:86:95:f1:
                    b5:5d:da:c5:a2:00:85:8f:aa:7f:fe:fd:c5:69:78:
                    8f:13:e2:c8:8a:88:2f:38:b3:61:cf:71:ec:cb:2a:
                    19:0c:7b:5e:db:62:b0:0a:4c:de:a7:2f:93:05:3e:
                    45:12:55:2a:ae:5f:94:8e:4d:49:40:34:33:d1:d9:
                    7c:d8:c1:de:f7:bc:59:3c:cb:e2:20:ee:e9:ec:32:
                    a1:29:e5:fd:60:64:12:e8:3c:cf:78:2e:2b:81:5a:
                    35:e0:b5:5a:6f:fa:94:d3:2f:a4:44:5b:10:af:af:
                    ab:24:b1:ef:ce:56:dc:18:96:ff:3f:1d:e2:4c:cd:
                    95:54:49:8c:eb:24:36:12:8b:f2:e5:69:70:43:db:
                    5c:ae:d9:b5:aa:d5:f1:d0:78:38:cd:b8:98:a8:be:
                    22:dd:8e:c0:5b:85:a8:ea:bf:af:94:a9:00:80:c1:
                    41:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:94:03:76:C3:55:3A:21:C7:A9:07:0E:73:D3:C3:4B:F3:A0:69:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/5ae9df01-feae-3a8b-870b-e74ce989fbdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.crl

            X509v3 Authority Key Identifier:
                keyid:AF:6C:EF:89:28:99:02:21:63:73:BB:FA:49:68:55:AB:8C:49:1E:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7ee:fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:49:a7:17:37:b3:74:c3:76:1a:de:6e:8b:12:4b:be:79:a5:
         0b:57:c4:d7:bd:a3:09:eb:96:47:d6:a8:ce:c7:08:59:58:fd:
         e5:3d:f4:4b:41:d2:21:20:6a:62:d0:ac:54:76:c6:ec:95:b9:
         7d:36:ed:82:5b:d9:57:42:d2:39:bd:5f:95:75:a3:e8:40:e5:
         fe:b3:9a:2e:c3:54:61:1c:76:a1:e8:ad:09:67:fa:fc:7f:72:
         74:9b:34:e7:00:7c:36:88:a9:94:22:bd:92:f2:b3:0c:02:d7:
         b4:84:2a:4e:30:54:10:93:51:f2:ab:8d:a9:13:95:b7:6a:76:
         0f:52:6e:7c:1c:9c:20:49:0b:03:c1:dc:c9:eb:c5:88:50:31:
         bf:34:10:e8:b5:c7:4d:6c:ee:c5:1c:ed:2a:02:a1:61:d4:4c:
         4b:d4:be:85:0a:e7:6b:23:83:bd:3f:30:af:a5:1f:59:f7:f0:
         05:36:9f:0b:a7:8c:1e:18:f0:4d:8c:24:fc:9f:7f:e4:fd:62:
         11:9a:99:7a:6f:1a:f4:e1:73:02:7c:41:3c:4e:aa:72:3e:03:
         a2:25:cd:e9:b3:99:dd:6b:49:8b:cd:7f:9c:de:24:1c:31:1d:
         9d:13:02:c3:0d:af:fa:c9:34:7b:56:3a:e4:a2:b7:05:df:46:
         c3:7d:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 02:40:23 2025 by rpki-client