Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08/a791b508-110c-37ec-ba62-6bcc7178df03.roa
File:                     a791b508-110c-37ec-ba62-6bcc7178df03.roa (raw, json)
Hash identifier:          cQkB0ZYTxKiHW6SqAPldwiyHKpdUFej1EnC5IQ+j+4g=
Subject key identifier:   06:F8:62:78:CF:86:AA:B9:A3:74:2A:73:D5:62:AA:66:9E:1F:83:38
Certificate issuer:       /CN=0b77bb3c-d132-4e1d-adee-58a5fd374e08
Certificate serial:       010D0C9F4328584ACE0BB04868674FCFF39AA6C0
Authority key identifier: 03:46:7C:16:39:4A:2F:1F:C7:C9:5B:B1:29:ED:4F:07:F8:61:48:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08/a791b508-110c-37ec-ba62-6bcc7178df03.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     401710
IP address blocks:        2602:f644::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08/0b77bb3c-d132-4e1d-adee-58a5fd374e08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08/0b77bb3c-d132-4e1d-adee-58a5fd374e08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:b0:48:68:67:4f:cf:f3:9a:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b77bb3c-d132-4e1d-adee-58a5fd374e08
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=9287229e-7069-4c75-b458-3a15f9bf7bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f6:e6:59:97:f7:ec:95:6b:55:5c:81:ab:1b:
                    eb:ac:79:d0:a9:8f:6c:17:0f:7f:01:bf:76:83:de:
                    06:6d:61:41:49:f4:45:42:1c:08:f6:a0:43:d0:08:
                    78:fd:a7:3a:9f:26:28:ee:8a:83:5f:81:7b:c5:62:
                    03:fa:8d:71:81:69:61:31:9c:70:b6:c0:62:8b:17:
                    e7:ea:a8:ff:81:5b:af:50:0f:b0:81:28:21:41:89:
                    49:4e:a2:6d:2b:b1:9f:f9:8d:87:e5:d2:09:a2:02:
                    dc:87:11:43:f6:93:23:f5:f3:d0:28:5f:9e:d3:79:
                    1f:54:df:19:d0:96:5a:be:bf:1e:3f:7d:54:ec:7e:
                    bc:38:2a:ec:68:ff:33:7d:ba:69:e1:ea:55:80:32:
                    8e:f9:7d:9f:9d:69:a2:44:62:1d:ce:d6:e8:ae:5b:
                    69:71:84:6c:e2:06:3a:f2:83:1d:83:78:e4:e6:5e:
                    fa:bd:7b:ea:83:bf:3b:99:df:26:75:f3:e8:8f:3a:
                    00:46:9c:28:55:4e:5b:fe:03:29:1e:e3:b6:40:96:
                    53:da:5d:a9:10:8c:43:d3:ec:ae:d4:c6:64:aa:9d:
                    79:d8:97:28:d2:70:62:c2:d5:04:73:c4:5b:df:df:
                    64:db:18:20:0e:ec:99:f9:65:23:67:47:52:d3:dd:
                    b7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F8:62:78:CF:86:AA:B9:A3:74:2A:73:D5:62:AA:66:9E:1F:83:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08/a791b508-110c-37ec-ba62-6bcc7178df03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08/0b77bb3c-d132-4e1d-adee-58a5fd374e08.crl

            X509v3 Authority Key Identifier:
                keyid:03:46:7C:16:39:4A:2F:1F:C7:C9:5B:B1:29:ED:4F:07:F8:61:48:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0b77bb3c-d132-4e1d-adee-58a5fd374e08.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f644::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:b4:dc:07:ac:b4:13:06:be:cc:f8:27:1f:24:eb:d0:79:b8:
         20:17:32:29:bd:9c:c8:d2:82:81:70:77:fa:ad:26:e9:3b:d0:
         4e:9a:e9:ed:27:15:c7:af:6d:de:71:2d:90:5e:c4:6f:35:3f:
         d2:9f:d3:1f:91:4d:a5:5a:4c:ab:a3:c8:09:57:db:07:e6:2f:
         d5:cb:dc:cf:1a:0d:4b:f4:99:a2:c4:28:da:a9:5e:64:61:80:
         80:6d:52:dc:0c:45:c3:1d:9f:09:6b:79:9e:7c:3d:46:46:25:
         75:7f:60:07:c6:3d:1a:4e:af:6a:c8:9f:47:6a:23:7e:20:13:
         60:ff:78:5e:58:f1:39:4a:6c:95:36:b2:41:23:e7:41:24:53:
         c5:2f:01:fb:bc:da:36:1b:bf:a3:18:1d:4b:fb:58:13:e4:53:
         36:e6:83:2d:85:a5:df:b5:0b:32:cf:7d:2c:17:45:75:ac:36:
         1d:17:99:4a:79:71:81:89:26:e1:ea:2c:e2:bb:3d:98:76:2d:
         29:fe:6c:0e:66:c1:ad:a0:66:e6:a2:5a:4e:19:aa:c1:ba:72:
         21:d2:f1:0d:1a:ea:18:77:c3:cf:bb:fc:e4:e3:dc:73:c3:11:
         43:58:fd:7e:01:1c:0b:92:a8:bc:29:27:2a:76:ac:50:55:06:
         9f:50:9e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 05:02:30 2025 by rpki-client