Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/e55ef8e5-0f6c-3872-9fa6-df0610a93d71.roa
File:                     e55ef8e5-0f6c-3872-9fa6-df0610a93d71.roa (raw, json)
Hash identifier:          TflP1qKEornUp9/kIELsD+Za0ZCUMOYxcy5BHVn4GHc=
Subject key identifier:   DA:CE:0F:B9:B3:EA:9B:EC:9E:D6:6A:E7:C5:25:D1:2D:49:C8:4B:F1
Certificate issuer:       /CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Certificate serial:       010D0C9F4328584B21CC34C4CF8856E2C1C23700
Authority key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/e55ef8e5-0f6c-3872-9fa6-df0610a93d71.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     40124
IP address blocks:        2602:299:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:34:c4:cf:88:56:e2:c1:c2:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=09b1c816-8051-4058-ad3c-1714b0626f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9d:42:41:68:96:42:72:85:0a:c7:31:dc:d3:
                    09:c5:da:5a:d1:8d:29:a3:c6:6d:9f:c7:36:f6:ce:
                    5e:b9:ef:f5:66:3c:67:29:61:7e:62:12:f5:8c:7f:
                    fb:75:91:97:63:85:ff:9e:42:41:71:e3:84:0b:cc:
                    1a:59:f4:74:cf:9b:e9:1e:9f:c5:cb:66:aa:d0:21:
                    9b:1e:8c:57:1e:be:08:19:2c:72:87:a5:bf:1c:03:
                    91:46:ce:6a:8e:f8:09:3a:80:ff:ae:6e:8a:72:e1:
                    bf:53:01:62:87:c0:f4:69:44:62:4c:af:1a:08:be:
                    33:98:aa:b0:50:dd:9d:11:05:56:b8:d3:9f:39:02:
                    64:39:11:57:3b:f1:50:4a:50:28:49:92:80:b2:a8:
                    5f:bb:a9:4d:16:d3:d8:0d:28:31:4c:8c:3c:19:97:
                    a4:56:b1:03:75:01:42:fd:b7:b1:23:e7:66:c4:19:
                    c8:0c:cc:2b:cc:69:85:17:77:08:9d:92:f3:cc:cd:
                    1a:13:85:d0:1b:15:31:8e:e3:fc:65:65:7e:3a:2a:
                    de:2a:57:5e:1a:2b:9e:67:47:67:65:a1:64:41:5b:
                    7f:3f:82:dd:58:37:5a:7e:17:2b:4c:89:19:aa:d1:
                    85:0b:80:b8:94:a0:df:c3:24:23:5d:f8:c2:e2:22:
                    8d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CE:0F:B9:B3:EA:9B:EC:9E:D6:6A:E7:C5:25:D1:2D:49:C8:4B:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/e55ef8e5-0f6c-3872-9fa6-df0610a93d71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:299:20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e9:13:c3:2b:5e:d3:78:18:e7:50:77:2b:db:fc:2e:28:82:
         bb:84:5c:38:14:03:20:d8:ba:cc:1a:f4:dd:f9:15:68:8a:22:
         cf:cb:0b:d7:42:ea:40:40:fe:a4:f2:4a:80:5c:dd:fe:02:b2:
         4f:3f:c7:27:04:75:85:b1:c3:de:3e:a6:df:f7:49:37:38:56:
         00:6b:56:06:87:73:34:cf:83:a1:98:d8:4d:22:f0:cd:5b:8b:
         47:81:df:68:a4:1d:b9:9f:3e:6b:aa:40:09:f5:a8:1e:cc:7b:
         8e:1e:c2:7f:9a:30:8d:49:0b:02:bb:89:58:3d:07:1a:16:e6:
         c2:06:7d:56:31:e3:92:14:c8:08:ad:7e:fd:e8:48:49:d8:77:
         a1:c0:86:c2:31:d0:60:51:99:b7:9d:c4:4e:d6:5c:4a:ed:3f:
         b9:28:e5:bf:bc:9a:47:5a:da:8d:37:eb:14:aa:f9:7d:4e:16:
         a9:dd:84:91:54:dd:05:ca:37:a9:bc:34:c5:0b:81:15:ef:65:
         ae:d9:dc:da:56:44:2b:59:fa:22:81:3d:0f:33:dc:08:47:a1:
         72:24:d3:a6:cb:b3:17:73:1c:6d:98:fd:b7:2d:45:c9:3e:05:
         a8:94:b0:25:e6:f1:ec:2d:7a:20:b6:62:60:19:27:62:72:9b:
         9a:75:fd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:26:15 2025 by rpki-client