Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/cf3eb7fa-6f22-3694-a962-2c0233945c68.roa
File:                     cf3eb7fa-6f22-3694-a962-2c0233945c68.roa (raw, json)
Hash identifier:          95RDuabNwiv7VaGz790LML6KZd/wndbT6GQ0OIJ7e0w=
Subject key identifier:   EA:AC:AB:71:40:19:19:03:5E:CE:AD:7D:7F:77:A4:93:EC:23:00:08
Certificate issuer:       /CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Certificate serial:       010D0C9F4328584B1AD1901E84B37349362CAB00
Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/cf3eb7fa-6f22-3694-a962-2c0233945c68.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     17024
IP address blocks:        2602:2d1::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:90:1e:84:b3:73:49:36:2c:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=e9efad6a-c4ba-49a7-af3f-44a09a9ac339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:56:25:72:03:25:65:4e:0d:8b:00:00:ca:
                    32:ec:e0:9e:9b:3c:82:d2:0b:4f:88:0b:89:dc:28:
                    a1:bb:05:0d:2b:e8:e9:62:16:e9:ef:14:31:5d:82:
                    bc:b2:c1:9c:b6:ae:a9:bf:37:b7:1e:98:9c:1b:0d:
                    93:dd:6a:7b:4e:a4:45:24:8f:51:23:67:8c:c0:1d:
                    b7:57:e4:43:0e:d6:87:dc:ce:8e:25:b4:ff:a5:e4:
                    be:c4:a1:fc:01:ab:cb:1c:1b:56:50:e1:4d:0b:b8:
                    60:22:f3:99:89:3a:77:b2:12:54:9e:75:64:22:86:
                    af:ef:88:e6:0e:d2:06:79:41:9d:7c:45:6e:79:65:
                    fb:48:19:ff:05:01:f3:d9:4f:73:f9:3f:41:5e:32:
                    36:c7:bc:e2:91:1e:14:88:54:b9:74:c1:03:08:5e:
                    7a:6d:4c:16:45:c8:a2:8a:f0:24:6b:76:fb:83:2b:
                    38:27:f5:e1:b0:e0:62:ea:83:2f:d0:bf:1f:35:76:
                    95:0b:05:5f:11:58:a3:d7:cf:ee:c2:05:43:82:b5:
                    3e:ec:0d:f0:78:1a:f7:12:0e:f1:a4:90:d4:18:dc:
                    63:8c:05:fc:53:fd:bd:8d:77:2f:1c:74:97:36:cb:
                    9d:52:ca:37:9a:69:6e:68:29:2b:50:22:65:80:d4:
                    46:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AC:AB:71:40:19:19:03:5E:CE:AD:7D:7F:77:A4:93:EC:23:00:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/cf3eb7fa-6f22-3694-a962-2c0233945c68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl

            X509v3 Authority Key Identifier:
                keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d1::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:1e:06:24:e6:f8:54:f1:99:56:97:9a:a4:e4:50:1c:b1:12:
         91:73:b4:21:f6:0c:2e:59:2e:23:9d:66:08:32:4e:31:b3:a4:
         87:e1:25:d0:30:11:b1:fc:93:99:6d:5f:76:26:1e:c8:82:3d:
         9b:99:42:12:db:7f:f3:9d:d6:b9:1c:42:f9:1e:ad:5d:94:f3:
         0b:af:bb:e1:22:af:14:78:89:cb:10:37:e8:f7:b4:74:0e:07:
         b4:0a:59:86:66:80:b9:f0:cc:fd:38:e1:10:7b:a3:b1:b5:c6:
         51:8c:a5:91:2f:75:2f:be:83:23:8a:6a:b6:e2:14:d5:f1:f2:
         7c:1b:97:2a:32:33:2f:18:32:42:2e:85:6f:c7:e5:59:7e:c8:
         25:82:0b:51:61:c3:87:eb:85:c8:96:86:7f:dc:e1:55:15:b7:
         4b:d8:86:b9:4e:e4:de:3f:35:1a:5f:36:5e:a9:66:de:1e:30:
         3d:50:79:6c:3e:f8:37:02:bc:3e:d0:1f:ea:f9:82:02:53:a3:
         fd:4a:1c:84:59:1a:b6:04:b3:c8:21:7e:53:a0:e9:57:15:5a:
         be:69:0c:95:b0:44:0d:56:72:e1:fa:a4:fb:3d:34:9a:81:f0:
         b6:36:1c:b8:0b:76:82:b9:e7:d8:57:35:9c:d9:e5:2a:4c:c1:
         5f:8e:b2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:49:09 2025 by rpki-client