Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa
File:                     1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa (raw, json)
Hash identifier:          AEzjLy+AGF9dHHaNo34SjIFZ+0qJtAo1sQ0M7XPQ6tA=
Subject key identifier:   09:6A:47:95:D0:25:F0:04:53:D0:93:45:94:01:F8:4D:DB:B5:8F:98
Certificate issuer:       /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
Certificate serial:       010D0C9F4328584B127161C67CD1092899211600
Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa
Signing time:             Wed 03 Sep 2025 13:00:41 +0000
ROA not before:           Wed 03 Sep 2025 13:00:41 +0000
ROA not after:            Tue 02 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        2602:faca:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:12:71:61:c6:7c:d1:09:28:99:21:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8
        Validity
            Not Before: Sep  3 13:00:41 2025 GMT
            Not After : Dec  2 14:00:41 2025 GMT
        Subject: CN=74a4691c-3043-4621-8a5c-897079f0d3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:00:94:10:fa:80:3c:14:b5:dc:23:3e:9c:00:
                    9b:16:c6:08:7e:50:36:70:fb:77:92:65:bc:96:8e:
                    d8:d1:94:55:67:d9:f3:88:df:c1:60:f5:35:2c:77:
                    b3:66:61:40:0d:52:6a:40:dd:53:f5:32:0f:7b:8f:
                    23:a1:78:1e:14:67:a3:a0:4a:d1:1d:e7:61:08:53:
                    66:e6:a4:9b:17:18:b0:5b:98:65:37:4a:6e:5d:73:
                    21:44:a3:75:33:87:e4:0b:a2:84:64:30:de:53:8e:
                    78:b0:b9:e4:09:7e:93:bb:7e:98:02:13:9b:6a:95:
                    0d:c2:26:5b:4e:35:85:36:7d:d9:5f:52:19:5a:29:
                    3f:b4:7c:00:fb:29:f4:a0:f9:23:df:14:10:d6:c8:
                    7c:7a:2c:66:2b:3e:ee:02:45:0d:b9:85:5b:69:4c:
                    2e:ba:a8:94:f0:9b:62:c6:6b:5b:c7:67:d1:6c:d7:
                    a0:3d:37:4d:8c:71:af:ab:fd:12:61:85:26:f8:4c:
                    6d:1c:9f:4e:d8:c1:cf:f5:1d:47:7b:50:b8:4c:d5:
                    ba:1b:51:72:f2:ac:95:ad:cb:44:4f:17:f0:96:a3:
                    25:85:96:16:cf:89:6b:ad:55:5a:eb:f1:0d:d3:ad:
                    cc:de:46:25:66:b6:a2:50:6f:de:dc:cb:f2:70:45:
                    9f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6A:47:95:D0:25:F0:04:53:D0:93:45:94:01:F8:4D:DB:B5:8F:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl

            X509v3 Authority Key Identifier:
                keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faca:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:7e:40:59:33:3a:4d:a4:15:01:06:e6:da:1d:77:be:18:2d:
         e4:2f:da:b2:71:d1:ca:86:c4:43:c4:e5:96:4b:9f:89:c2:31:
         49:6a:75:b7:1e:38:0a:29:55:9a:1a:f0:af:24:8e:d9:8d:43:
         c2:b6:29:b3:1d:b6:fc:36:7d:4a:ef:4d:45:3d:b3:6d:05:79:
         af:ce:6b:ab:72:d4:46:d3:05:b9:07:c7:2f:83:90:39:c6:74:
         ac:fd:d5:21:af:40:51:14:8e:20:0a:65:2d:62:e0:61:ac:4b:
         b5:e3:6f:46:35:ee:3f:c8:d1:9a:c9:51:95:f7:1c:95:c4:ea:
         fa:af:02:3f:f7:50:45:1b:de:a8:3b:c3:5e:14:62:f4:0b:53:
         f7:0a:a3:40:ea:04:29:a7:a4:be:5c:ec:57:e8:bd:b1:2a:30:
         36:6b:2f:6c:95:0f:cf:94:53:3a:e7:ad:ca:ed:9a:2d:ff:d5:
         ff:cf:f6:84:a9:48:e5:0b:af:ab:32:be:cc:94:1e:71:d5:f2:
         07:43:3a:57:7e:07:8d:95:58:d1:58:9f:ba:94:7a:f4:29:2d:
         e6:5b:b3:b3:8d:8b:8e:3c:7c:b3:8b:27:ee:cc:00:64:81:41:
         1e:dd:30:5c:b7:4d:df:9b:46:2e:45:07:aa:9a:fa:b3:32:08:
         54:65:43:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 02:22:59 2025 by rpki-client