Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/ce5ef59e-bdb3-39a2-8c25-3e7a3a85dc40.roa
File:                     ce5ef59e-bdb3-39a2-8c25-3e7a3a85dc40.roa (raw, json)
Hash identifier:          e2zvogpGMzFVJj0s4KIWMX6wyvJHxceggeEraxbDZNA=
Subject key identifier:   E0:3D:AB:01:B5:7A:65:64:1D:B1:A5:CC:F7:DC:D1:4C:7D:D2:40:52
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584AF5213F4950A55C1011B72280
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/ce5ef59e-bdb3-39a2-8c25-3e7a3a85dc40.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     199266
IP address blocks:        2602:fd6f:1e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:3f:49:50:a5:5c:10:11:b7:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=a8702947-ec3b-4a7c-a68c-5e700b2b097c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:32:f5:3c:d4:5f:7c:3e:e1:3f:8c:82:b9:
                    14:ad:42:de:b2:0f:44:98:25:89:cc:dd:1b:b3:f6:
                    33:75:a0:c0:5f:34:4d:45:b9:84:ca:c1:fc:0b:2b:
                    53:d7:50:e0:78:5e:d9:cc:b7:8c:18:36:70:3b:00:
                    71:4e:ad:dc:98:b8:f8:0a:0f:44:57:b7:b7:2f:c6:
                    88:e9:e1:60:8d:2e:d4:f6:26:bf:ae:e6:76:6b:c3:
                    75:a5:3e:e5:94:0a:f4:45:3d:23:b4:22:93:49:7e:
                    2d:7b:a0:ec:3d:cb:74:51:c8:64:61:03:96:d9:85:
                    da:f6:6c:77:8d:ab:eb:e1:94:f6:94:0e:42:2f:71:
                    79:05:ac:9e:f7:c3:bb:3c:fe:52:3e:12:b2:ae:a8:
                    ca:a5:de:55:9f:0a:0f:11:47:49:1a:10:19:d6:b6:
                    33:8d:98:6f:e1:32:61:b0:6c:80:d9:35:f8:c5:f5:
                    49:90:c1:35:74:5d:00:df:08:47:73:18:87:7b:9f:
                    86:91:13:fd:b1:af:3b:d2:54:cb:b6:8c:26:a9:e8:
                    59:30:fb:31:48:d7:20:96:c4:d7:80:08:92:c9:b3:
                    ed:59:82:d1:e1:13:d6:d9:29:f5:33:68:6f:74:22:
                    de:5e:b7:f7:bb:43:5d:b6:59:63:78:f2:04:a9:fd:
                    b5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3D:AB:01:B5:7A:65:64:1D:B1:A5:CC:F7:DC:D1:4C:7D:D2:40:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/ce5ef59e-bdb3-39a2-8c25-3e7a3a85dc40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd6f:1e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:90:f7:d9:a5:96:21:16:86:f0:d7:69:3c:a1:c5:94:05:b9:
         bf:5a:06:03:83:a6:3d:15:40:f5:06:79:a5:c2:c5:81:30:69:
         e2:31:b7:d9:64:96:ab:60:a6:f7:5d:f6:23:ae:38:61:67:4c:
         e2:9b:6e:b2:10:14:a8:ac:54:fc:b0:69:83:0f:d5:17:de:ec:
         2e:67:ee:81:d3:8d:1c:cd:0a:7c:7a:45:cd:a5:a3:07:ff:8b:
         21:95:e6:63:64:23:2f:5d:a3:17:dd:b8:9e:60:0e:fa:a5:69:
         37:72:bb:25:88:bd:a8:df:5c:47:b2:56:18:bc:28:90:18:d3:
         73:fb:97:23:14:74:5f:9c:4c:28:8f:40:96:41:bb:19:66:27:
         aa:a3:42:0e:3e:ec:71:7f:fb:76:e2:71:63:02:b3:5c:9c:ae:
         8a:f0:01:7a:35:af:47:45:b8:12:12:41:b4:98:a1:9b:0f:27:
         7e:70:90:d6:9e:04:0c:e9:c1:96:54:04:e7:6a:5e:72:1e:76:
         1e:d8:ec:c3:26:a2:87:80:92:46:c6:18:67:00:a1:a0:7e:22:
         12:c3:3c:09:d9:c1:09:c5:4b:12:b0:06:90:26:6f:d7:cd:85:
         87:8a:b2:70:fb:74:4d:87:48:ab:ee:4b:9d:31:20:d7:c0:cd:
         f7:f1:6d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 10:39:46 2025 by rpki-client