Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/56884ea2-86be-4495-b684-3634b47685aa/dc948768-1116-304d-aa23-bfd0c58d3251.roa
File:                     dc948768-1116-304d-aa23-bfd0c58d3251.roa (raw, json)
Hash identifier:          8WIojhXee8MrJAiMiyjb8qodrMAqeWcYBdudV/5RzpQ=
Subject key identifier:   6A:49:53:DF:89:96:19:82:14:C0:E0:F5:06:D8:6B:2E:D6:F0:D4:F8
Certificate issuer:       /CN=56884ea2-86be-4495-b684-3634b47685aa
Certificate serial:       010D0C9F4328584A989CABD432EF8F4C508EF800
Authority key identifier: 0E:FA:16:8F:BF:F2:AD:74:40:48:20:DA:78:99:96:7B:37:BC:63:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/56884ea2-86be-4495-b684-3634b47685aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/56884ea2-86be-4495-b684-3634b47685aa/dc948768-1116-304d-aa23-bfd0c58d3251.roa
Signing time:             Mon 21 Jul 2025 21:39:18 +0000
ROA not before:           Mon 21 Jul 2025 21:39:18 +0000
ROA not after:            Sun 19 Oct 2025 21:39:18 +0000
asID:                     401730
IP address blocks:        2602:f63d:40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/56884ea2-86be-4495-b684-3634b47685aa/56884ea2-86be-4495-b684-3634b47685aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/56884ea2-86be-4495-b684-3634b47685aa/56884ea2-86be-4495-b684-3634b47685aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/56884ea2-86be-4495-b684-3634b47685aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:98:9c:ab:d4:32:ef:8f:4c:50:8e:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56884ea2-86be-4495-b684-3634b47685aa
        Validity
            Not Before: Jul 21 21:39:18 2025 GMT
            Not After : Oct 19 21:39:18 2025 GMT
        Subject: CN=fc3fb41d-b27e-4065-b4fd-57572b3769c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:f1:39:7a:9c:cd:93:48:a8:78:fd:01:d6:
                    82:f9:75:63:b1:93:e6:53:18:d7:6d:46:c8:e3:6e:
                    a5:77:c2:33:95:b8:fb:3b:b8:4f:ea:0c:e7:a5:eb:
                    ac:ee:f9:1c:e3:e2:a7:3e:a4:76:3c:a2:16:0f:91:
                    d1:cf:47:1e:bb:40:b5:16:32:7b:f8:14:f0:1d:30:
                    48:c4:fb:f7:db:41:73:7e:73:4e:3c:6d:bf:80:c5:
                    de:6b:ba:70:19:cf:67:9e:98:17:09:57:c7:fc:24:
                    e9:6f:e1:86:dd:6c:88:ca:79:eb:e9:6d:56:f2:ec:
                    0c:9e:aa:c1:7c:c9:66:b2:1d:60:b8:89:28:7b:ab:
                    a0:23:62:ec:aa:c1:16:db:a8:78:24:ff:e1:f8:11:
                    c4:9d:d3:26:0d:38:43:5f:30:8a:dc:04:74:71:35:
                    a5:0f:c9:37:14:be:cb:21:40:cb:99:69:4e:ef:d8:
                    0c:81:f0:75:1f:94:30:54:1f:d0:6e:f3:79:6b:2d:
                    47:97:7a:f7:39:29:01:d7:da:78:50:48:94:a7:db:
                    fa:35:dd:21:f6:dd:cc:fe:07:89:be:fd:76:3a:ca:
                    7d:74:7c:a3:b3:98:97:02:b1:b2:f2:03:15:d4:72:
                    e7:44:9b:a2:d2:5b:f6:ac:fc:1a:08:54:75:b8:1e:
                    ac:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:49:53:DF:89:96:19:82:14:C0:E0:F5:06:D8:6B:2E:D6:F0:D4:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/56884ea2-86be-4495-b684-3634b47685aa/dc948768-1116-304d-aa23-bfd0c58d3251.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/56884ea2-86be-4495-b684-3634b47685aa/56884ea2-86be-4495-b684-3634b47685aa.crl

            X509v3 Authority Key Identifier:
                keyid:0E:FA:16:8F:BF:F2:AD:74:40:48:20:DA:78:99:96:7B:37:BC:63:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/56884ea2-86be-4495-b684-3634b47685aa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f63d:40::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:c1:03:f7:a4:77:7f:b1:93:fb:ab:f4:e3:a4:c2:59:7e:d5:
         21:09:ca:21:b6:a3:35:c7:cd:05:b2:20:c5:22:33:93:f0:d5:
         16:ef:88:b7:53:23:a8:0d:3c:39:a8:53:6a:de:d0:1e:8b:4e:
         58:b1:4d:69:43:fd:5b:29:1e:80:00:e7:30:ef:99:70:9b:89:
         0c:76:ee:5e:dc:da:4f:81:1f:95:4c:37:f2:55:dc:d7:40:74:
         1d:c9:f0:b8:61:0f:f5:b1:ac:a5:3b:6c:90:1a:3c:6a:b8:7a:
         b5:df:b2:47:26:1f:68:2e:2a:2f:69:86:02:a2:a3:7f:2b:55:
         b7:49:3c:1e:13:ab:99:13:a8:50:9b:dc:78:5f:c9:b9:54:ee:
         40:94:10:1a:e8:f0:d1:b9:87:7f:1f:36:ba:12:46:e7:e4:17:
         4a:bc:09:46:55:01:59:82:6a:28:6d:a3:f0:bb:6f:d6:01:84:
         b1:62:00:d1:c8:b3:1f:dc:2c:70:36:b0:e4:2d:19:be:c5:71:
         68:89:31:c8:b4:15:3e:4f:09:1d:fb:4f:48:89:63:f1:15:5e:
         37:b3:ed:ad:d9:9f:26:d7:1d:81:a0:3c:24:12:96:86:23:f9:
         4d:da:c2:4c:50:96:cf:c3:f4:1c:3c:54:bb:b2:34:92:1f:0a:
         b0:e8:e5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:23:27 2025 by rpki-client