Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/1e68fcf1-f223-3348-ae3a-7150b7af3a13.roa
File:                     1e68fcf1-f223-3348-ae3a-7150b7af3a13.roa (raw, json)
Hash identifier:          yIi1UkUagxIH2M/+j62uSGa0nK9GF9m4uGKU0USXlBk=
Subject key identifier:   68:E5:70:EE:BC:95:39:1B:93:C4:63:3D:E8:C5:CB:8D:5A:BE:3D:E5
Certificate issuer:       /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial:       010D0C9F4328584B0E4165D51301397FF273F140
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/1e68fcf1-f223-3348-ae3a-7150b7af3a13.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     32983
IP address blocks:        2602:f9e7:2c::/47 maxlen: 48
                          2602:f9e7:30::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:65:d5:13:01:39:7f:f2:73:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=a832e771-f40f-477d-8c02-fa8f1532fcf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:75:c7:1c:ac:28:85:5a:43:ca:c1:6e:31:70:
                    cb:6e:bf:9e:9e:9b:2e:c4:ad:7d:9a:57:83:5a:c9:
                    32:9d:01:23:26:85:ae:f3:10:4e:80:ce:45:3d:33:
                    3f:64:3e:49:29:ed:fc:f1:7a:b7:eb:da:cb:9d:16:
                    6c:29:ad:10:ac:a9:68:8b:a0:bf:9f:bc:e9:70:71:
                    a6:41:3e:02:7e:ad:8e:ca:be:e8:24:90:a7:d5:5b:
                    35:94:49:13:7c:c3:23:73:49:e4:f7:45:97:31:7e:
                    2a:dd:ea:92:8c:c2:74:b3:10:fc:6d:f6:80:ab:67:
                    f4:92:1d:a4:e0:54:7a:56:e1:2d:a7:b3:a6:53:50:
                    da:c9:36:69:20:ac:23:94:7f:cf:99:f3:25:de:ff:
                    28:61:0f:4d:32:1e:34:b0:7b:47:5d:e7:f9:c4:5c:
                    ed:07:54:2d:0e:ab:ae:4f:e9:ab:2c:e7:92:40:d5:
                    e8:93:d2:69:59:de:f1:67:e6:30:30:32:78:de:1f:
                    61:a5:1f:41:ab:d9:95:04:cf:72:05:cb:56:2a:92:
                    80:4f:28:2a:c1:48:1c:c0:1c:d0:ff:26:ad:c7:fd:
                    9a:41:4c:00:2a:cb:30:e4:66:20:c9:7a:6b:fc:17:
                    cd:f7:3d:58:e6:87:96:df:ef:76:3a:d0:9d:85:35:
                    1b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E5:70:EE:BC:95:39:1B:93:C4:63:3D:E8:C5:CB:8D:5A:BE:3D:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/1e68fcf1-f223-3348-ae3a-7150b7af3a13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9e7:2c::/47
                  2602:f9e7:30::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:66:23:12:ff:86:88:6c:4d:37:1f:13:f3:5e:f9:cc:da:ff:
         4f:e6:4c:fd:eb:25:98:64:71:c4:3d:bc:ee:89:c3:5a:1e:c5:
         28:e1:5b:cb:1c:59:22:92:78:30:02:76:da:a6:29:fb:d2:a3:
         8d:99:78:54:d4:28:f2:18:bf:2c:bb:4c:47:e2:05:69:f5:50:
         ef:78:2c:a6:38:8f:95:0d:6e:16:c5:1e:a1:6c:18:35:d4:79:
         95:1c:ee:2b:ed:7a:c6:44:c1:ea:35:10:3c:28:22:d6:13:81:
         7d:aa:6f:48:f7:39:3e:ca:18:1d:db:6b:65:78:83:4a:ff:47:
         91:99:e6:8a:bd:c6:9b:94:12:0d:a6:37:8e:37:e7:0d:d9:4a:
         02:88:ee:14:74:16:4d:eb:03:86:7b:55:39:ad:e1:1b:2f:3b:
         e5:e5:7c:40:b1:44:ca:a2:d5:30:49:19:fc:dc:7e:04:79:14:
         d0:d4:7e:a0:ed:8a:92:a8:89:97:75:52:6d:51:b1:10:c4:c9:
         ad:f4:0a:b5:e1:28:46:79:83:cb:94:96:6f:55:d5:59:71:2b:
         9b:98:dd:92:21:03:93:f7:7b:04:fb:53:60:02:0b:f3:65:16:
         a8:47:b6:4a:22:6b:9f:4a:13:8a:c1:1f:0d:1b:87:bf:ea:3d:
         b8:96:a9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 03:10:41 2025 by rpki-client