Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/8ce6c55c-8061-391c-8844-45ea5465e84b.roa
File:                     8ce6c55c-8061-391c-8844-45ea5465e84b.roa (raw, json)
Hash identifier:          KSsCC9dM0uqJw1Wmxoo3xJqVh/voi+W0KrSWV7XKdX0=
Subject key identifier:   44:FB:2C:F7:E5:90:9C:3D:E2:66:9E:DB:40:11:CD:0B:18:6C:A2:82
Certificate issuer:       /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Certificate serial:       010D0C9F4328584B1F016AE2D529B093DC625500
Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/8ce6c55c-8061-391c-8844-45ea5465e84b.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     397131
IP address blocks:        2602:fe6a:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:6a:e2:d5:29:b0:93:dc:62:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=102701bf-b591-4adb-9cf2-d1f579af9aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:aa:e5:37:5a:de:b6:bd:65:5c:05:d9:7a:21:
                    36:ec:3a:43:67:c7:ea:a5:59:3e:11:d7:00:3e:ec:
                    f4:4f:f7:60:38:43:46:86:af:53:47:eb:34:97:b8:
                    a6:f3:4d:3f:12:3a:61:f7:cb:bb:0d:be:c9:f9:e7:
                    c7:30:29:41:f8:2a:f6:c6:b6:15:67:e7:05:1e:cf:
                    f6:5c:2e:0e:f5:12:71:83:ab:ba:fc:20:54:f8:b4:
                    d3:99:55:83:36:d3:fc:e4:55:f3:74:23:3f:06:7f:
                    cd:8e:10:07:ec:b3:97:76:c6:cb:42:f1:7a:c1:96:
                    30:6b:a7:c6:bc:e9:b6:ec:35:36:9d:35:1a:a2:6f:
                    d4:90:f4:cf:a6:57:24:b0:1f:2e:3e:bd:7b:9c:ae:
                    6d:46:f8:6f:6a:a3:60:75:1d:f9:71:22:79:70:e2:
                    c0:5a:69:45:92:dc:cf:b3:2f:a3:89:dd:57:18:3e:
                    f9:db:06:8b:20:af:21:46:ae:2c:7a:a2:bc:79:79:
                    7d:9a:fd:ca:73:ce:40:40:75:44:73:a1:ce:e0:b8:
                    29:67:4e:6e:91:5a:89:21:2e:81:da:38:53:07:12:
                    ad:ee:e9:c0:8f:63:95:42:47:e4:e7:35:f3:7d:1d:
                    7d:d3:cd:f1:48:26:71:64:5d:ae:3f:71:8a:b5:d4:
                    c9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FB:2C:F7:E5:90:9C:3D:E2:66:9E:DB:40:11:CD:0B:18:6C:A2:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/8ce6c55c-8061-391c-8844-45ea5465e84b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl

            X509v3 Authority Key Identifier:
                keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe6a:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:fc:ed:f3:d9:4c:07:4f:3a:b6:d4:27:86:f7:e1:20:85:43:
         5b:7b:dd:a5:18:a6:55:b5:7e:6c:67:aa:c4:32:cb:27:8f:2c:
         c1:61:e1:c0:c7:79:e6:99:92:0f:00:f8:e1:5b:f1:9b:9f:fe:
         61:4d:f5:78:a6:0c:fd:65:75:65:ee:7c:41:90:fd:cf:bf:03:
         f6:ab:98:48:85:ce:40:8b:02:5b:33:08:58:87:cc:14:41:64:
         4d:31:7d:d9:e7:7a:8c:cf:30:ff:94:eb:00:ad:56:89:e0:e8:
         fa:9d:e3:42:c4:88:ca:91:44:80:b5:37:77:0c:fd:1e:9a:46:
         65:9d:56:c8:aa:e4:7a:b6:4b:a9:eb:ed:83:28:04:71:f5:b2:
         05:c9:2f:fc:16:95:a5:bd:af:27:6d:d9:c5:61:23:10:2d:a9:
         3c:fa:2c:e2:39:c9:9b:cf:e5:52:d3:e5:28:ca:4f:20:c3:b5:
         71:17:ce:75:a8:3d:ea:6c:5a:ca:fb:bd:eb:52:c0:d5:7d:0d:
         e0:6a:71:a5:91:fc:18:f4:a4:28:d1:50:98:49:99:e6:05:ca:
         bd:71:32:04:8f:4f:97:23:3c:a4:82:bc:09:d3:2c:1f:55:1c:
         e0:07:5a:92:b8:c1:16:14:6d:7a:dc:51:ef:2d:ab:a7:fb:58:
         19:a9:53:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:53:18 2025 by rpki-client