Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/9ddfe617-a4be-3a6f-a28a-401407e12194.roa
File:                     9ddfe617-a4be-3a6f-a28a-401407e12194.roa (raw, json)
Hash identifier:          /rfT4pxgf8dZpiqUEvXKsNvOVDobT3jvpNTGAKAyT2M=
Subject key identifier:   9F:C8:49:D8:CB:73:A2:DF:48:AE:F7:A5:01:5A:A8:EC:7A:44:3F:B2
Certificate issuer:       /CN=773b73e0-0815-435e-b24e-89c8b9dd55c5
Certificate serial:       010D0C9F4328584AF9514A4B329C33ABBF821830
Authority key identifier: BE:75:BB:89:62:18:B1:4B:79:B4:96:D0:88:D8:E6:F6:B3:98:3B:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/9ddfe617-a4be-3a6f-a28a-401407e12194.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     401267
IP address blocks:        2602:f86f::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/773b73e0-0815-435e-b24e-89c8b9dd55c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/773b73e0-0815-435e-b24e-89c8b9dd55c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:4a:4b:32:9c:33:ab:bf:82:18:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773b73e0-0815-435e-b24e-89c8b9dd55c5
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=6deef171-1a07-4b00-90b6-199474bb60db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b3:f1:a0:a5:7e:25:79:10:a9:fc:93:d0:04:
                    74:a4:36:9d:b0:1a:f4:e3:3a:33:01:4d:4c:36:d3:
                    33:03:30:8d:57:48:06:9f:7d:d3:7e:9c:61:74:f8:
                    bb:52:06:42:77:09:cb:ea:2c:65:46:1f:0c:9f:90:
                    d3:7e:6f:ed:58:ff:aa:73:cf:5b:35:2b:bb:96:fa:
                    3a:a3:88:4b:4e:24:c5:f6:ce:5b:15:bc:50:68:14:
                    cc:f0:e8:4a:82:aa:65:db:7d:ae:1b:0a:d7:a7:ee:
                    b3:5f:eb:03:13:f9:30:4c:fa:9f:2a:33:eb:73:24:
                    5b:19:6b:e3:d0:b6:ff:6d:54:67:9f:74:ec:0e:a3:
                    4f:bb:d6:81:18:dc:6a:1a:a1:c8:f5:f6:5d:9b:be:
                    b5:a7:37:2a:9e:74:a8:4c:ff:46:5c:fd:2d:2c:31:
                    ea:a4:4a:73:c7:e7:e3:17:2d:e6:e9:34:c4:7d:f9:
                    b5:13:e8:25:31:63:66:91:6c:34:bc:56:03:12:4e:
                    95:98:b4:d3:96:82:aa:2c:c1:fb:82:78:26:1a:3d:
                    bc:17:49:cc:b6:82:60:38:53:15:be:ef:b2:52:38:
                    58:91:ae:36:71:1a:05:31:8e:ed:3d:55:10:f7:ae:
                    5c:13:3c:79:a8:a4:20:25:7d:77:59:98:34:7a:41:
                    f5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C8:49:D8:CB:73:A2:DF:48:AE:F7:A5:01:5A:A8:EC:7A:44:3F:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/9ddfe617-a4be-3a6f-a28a-401407e12194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5/773b73e0-0815-435e-b24e-89c8b9dd55c5.crl

            X509v3 Authority Key Identifier:
                keyid:BE:75:BB:89:62:18:B1:4B:79:B4:96:D0:88:D8:E6:F6:B3:98:3B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/773b73e0-0815-435e-b24e-89c8b9dd55c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f86f::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ee:78:f1:f0:a8:5c:c6:6d:ca:96:f4:7e:66:d8:81:d6:b5:
         06:1f:53:83:07:22:eb:f9:c2:d1:02:32:91:56:94:8e:59:30:
         de:f9:20:ef:b9:34:70:7c:13:a7:de:c8:0a:82:10:09:32:28:
         9b:2a:65:29:15:ac:ad:00:8d:39:2f:fd:6d:25:cc:95:f1:0c:
         89:52:4b:2a:52:72:51:4a:b2:76:b7:35:51:4e:fa:b5:18:f1:
         66:69:c8:23:c9:4d:5e:87:98:ee:7f:d3:f9:f3:fd:05:36:77:
         e0:b0:ae:21:15:69:63:e9:ca:71:dd:40:b5:d3:ef:72:dc:d4:
         db:f2:9b:c2:00:d5:65:2d:b5:3f:05:2a:37:1c:19:12:69:60:
         e7:de:18:b6:2e:1c:62:93:4b:bd:f3:80:1c:58:ad:c5:4f:0f:
         79:52:21:50:36:ba:52:81:c8:c5:4a:5e:08:bb:b1:a6:5c:84:
         74:bc:d2:77:b1:b4:df:09:9f:67:7f:be:e6:40:40:c6:db:a3:
         c0:10:df:5c:c9:2d:e2:7f:38:16:a5:de:27:64:ae:42:76:70:
         8a:d3:36:e8:0c:38:1b:1e:f9:64:71:bb:ee:4f:2b:c7:b3:18:
         17:16:53:26:bd:39:99:6a:c8:7a:a3:3a:91:e7:1b:61:7b:2b:
         eb:2e:11:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 07:22:16 2025 by rpki-client