Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/e79010f1-e45f-3297-b37c-c24e052529e1.roa
File:                     e79010f1-e45f-3297-b37c-c24e052529e1.roa (raw, json)
Hash identifier:          2Y9oWUxRVTCzQFWAvZsZUsNQVfiUd4Rtr6aF7v8ku1E=
Subject key identifier:   E6:62:40:73:05:14:12:FA:4D:D4:06:28:A9:D8:5E:B5:7A:32:0E:45
Certificate issuer:       /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial:       010D0C9F4328584B13D6B23F0127101D3FAA2C80
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/e79010f1-e45f-3297-b37c-c24e052529e1.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     23428
IP address blocks:        2602:fb68:c0::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:b2:3f:01:27:10:1d:3f:aa:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=1c973d7c-346b-4adb-a048-0497d48fe735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0d:08:a8:6e:01:23:4c:4b:8d:1a:2e:50:ed:
                    bb:7a:3e:3a:29:ed:2e:56:b9:e6:ad:3f:e3:93:bc:
                    dc:75:fe:d5:6e:a8:22:2c:e7:8b:32:d1:58:e3:f6:
                    f1:07:1b:a3:ff:0f:be:c3:09:03:f0:65:da:db:cd:
                    ec:7a:49:a9:d1:f6:28:24:bf:c2:72:c9:c8:e8:50:
                    ea:66:94:57:b9:5f:a7:01:4c:4a:14:00:61:43:4c:
                    1c:c1:ca:ae:b9:21:0b:e7:ba:6c:34:0c:98:af:9d:
                    34:09:a3:98:ea:56:95:0e:74:fb:3f:8e:3b:0f:8d:
                    9a:cc:f7:d3:31:64:93:f0:35:76:05:dd:ae:72:cc:
                    e9:71:59:c7:71:45:e9:87:65:27:aa:f1:c1:7e:fc:
                    58:dc:46:92:f3:2a:61:2e:a1:eb:52:65:af:66:52:
                    39:d4:db:a8:c7:93:aa:17:f6:e2:9d:4a:dd:5f:9e:
                    b1:bb:75:48:11:79:e7:93:78:00:d6:24:81:18:f3:
                    8d:c8:44:88:88:b4:97:97:54:cd:b3:66:72:f3:0c:
                    76:db:e1:01:ff:6e:6d:32:b8:4c:66:10:39:8c:d9:
                    ea:9e:f9:c0:fd:f9:bf:b7:c7:b8:44:02:55:ad:4f:
                    d9:29:50:3f:c7:d2:6e:c8:09:d2:42:d4:c1:28:d1:
                    bf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:62:40:73:05:14:12:FA:4D:D4:06:28:A9:D8:5E:B5:7A:32:0E:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/e79010f1-e45f-3297-b37c-c24e052529e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb68:c0::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:0c:89:f5:29:d6:8d:63:a8:d5:ed:8c:6a:c4:da:a7:00:5f:
         c8:24:77:55:73:2d:3c:b6:7e:4f:3e:5a:88:5f:a8:ad:be:dc:
         a6:48:b5:6f:80:66:27:09:a3:2c:9f:bf:b1:ca:d1:56:e7:a5:
         6b:52:87:2e:79:29:d1:d2:7a:a6:3f:2e:ee:76:03:26:fb:55:
         89:7a:50:13:66:17:97:f1:7b:73:74:cb:c5:f8:5c:4a:2e:be:
         38:5f:04:72:9f:65:73:cb:09:67:d1:63:58:c8:50:a7:41:3a:
         b3:9f:5d:a8:30:0a:c0:cf:f4:d0:5e:92:6a:0e:5c:5c:75:a0:
         f1:58:32:6b:f8:8c:3b:e8:b2:ab:4a:98:7d:ce:51:af:30:62:
         e5:b2:a9:d4:47:d7:10:51:5d:c0:0f:4b:18:62:ca:72:88:4f:
         4f:4b:48:f2:a7:95:c0:3c:c9:66:3a:84:b1:16:b2:42:be:32:
         4c:a4:16:22:a1:30:92:0a:ed:a4:ae:fc:05:9e:a1:96:98:48:
         52:7a:be:62:3d:5c:67:33:89:43:78:2f:45:f0:e8:13:62:95:
         eb:20:e3:6a:8c:b3:48:d9:08:05:9a:21:3b:00:af:75:c5:b6:
         20:8f:c0:4d:f4:b2:57:ac:eb:38:7e:7f:48:97:a9:e9:60:d6:
         c8:55:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 04:14:30 2025 by rpki-client