Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/dbf40fdf-2c7d-3d70-8ce8-1e3163b7880a.roa
File:                     dbf40fdf-2c7d-3d70-8ce8-1e3163b7880a.roa (raw, json)
Hash identifier:          Yli2LRJjNe3vEea1REYLFIwKp7zTyj2oxYczDRCzYYE=
Subject key identifier:   2B:C2:BF:CA:2B:B4:D9:6B:08:59:FF:85:26:AA:67:0B:7D:A2:25:D4
Certificate issuer:       /CN=0e0ac023-c334-4bbe-bab3-afb7662be83d
Certificate serial:       010D0C9F4328584AD90F99C4B52CB976AAA6E9E0
Authority key identifier: EB:20:85:97:A6:C8:33:29:D5:08:E6:09:B9:F4:30:0B:BE:3A:DC:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/dbf40fdf-2c7d-3d70-8ce8-1e3163b7880a.roa
Signing time:             Wed 13 Aug 2025 23:42:36 +0000
ROA not before:           Wed 13 Aug 2025 23:42:36 +0000
ROA not after:            Wed 12 Nov 2025 00:42:36 +0000
asID:                     401880
IP address blocks:        2602:f5b3::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:0f:99:c4:b5:2c:b9:76:aa:a6:e9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0ac023-c334-4bbe-bab3-afb7662be83d
        Validity
            Not Before: Aug 13 23:42:36 2025 GMT
            Not After : Nov 12 00:42:36 2025 GMT
        Subject: CN=36fc3bc2-63d9-490b-8307-a3e2a1a604ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a5:b7:30:4d:7d:41:60:09:99:c6:88:74:19:
                    3a:ac:78:10:02:7a:8a:82:a8:71:6c:14:63:86:97:
                    3b:58:ce:da:d1:61:32:1a:f5:26:f3:03:88:0b:03:
                    2a:56:95:ed:5b:61:62:f7:20:c1:82:74:58:59:ff:
                    f9:bd:46:82:35:3d:c7:ae:0b:28:7f:55:a5:a2:c1:
                    ca:c8:2e:3c:01:ac:d7:49:3d:d9:ca:8d:fe:bd:cf:
                    30:fa:1a:4e:11:13:97:0a:4d:d0:f2:3e:0c:cd:5f:
                    ae:18:64:a8:6d:47:e1:0a:a6:89:13:c6:1c:14:d6:
                    f7:e4:ef:63:98:0f:ab:7e:e1:89:5f:a1:59:a0:5c:
                    7e:93:ab:ef:7d:8d:62:1e:bb:f5:69:18:34:52:dd:
                    3c:6f:71:75:04:70:d3:fa:ef:a7:ee:a7:b5:8c:7c:
                    8d:5a:c9:99:56:60:5a:40:cc:35:94:a0:43:3d:1b:
                    10:fc:d6:ef:e9:02:fb:e0:4f:e8:ea:ef:f3:0f:6b:
                    76:d2:a4:e0:b0:e4:23:d3:2c:a2:e0:00:d1:1d:84:
                    4d:72:ae:ad:e2:51:cd:51:ec:3d:6c:da:b4:70:1f:
                    a0:cd:24:7c:3f:78:89:42:f4:94:43:02:57:b9:ea:
                    62:12:be:2a:05:44:bf:70:96:95:08:05:ec:01:e2:
                    76:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C2:BF:CA:2B:B4:D9:6B:08:59:FF:85:26:AA:67:0B:7D:A2:25:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/dbf40fdf-2c7d-3d70-8ce8-1e3163b7880a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d/0e0ac023-c334-4bbe-bab3-afb7662be83d.crl

            X509v3 Authority Key Identifier:
                keyid:EB:20:85:97:A6:C8:33:29:D5:08:E6:09:B9:F4:30:0B:BE:3A:DC:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0e0ac023-c334-4bbe-bab3-afb7662be83d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5b3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:31:6f:f1:83:29:ad:9b:bf:0b:ec:d9:de:59:ed:04:43:d2:
         6e:39:d4:83:ef:97:98:c9:ad:5f:d1:3e:96:1a:43:48:8e:8c:
         8a:e7:18:75:ea:f9:69:be:16:b2:f4:ce:d1:e4:3c:82:b2:c7:
         40:91:6d:17:ff:f9:08:f6:b3:33:70:8c:ec:22:67:e1:2a:44:
         84:ad:cc:ad:7e:5d:63:81:bb:b8:0a:2b:c2:8f:ef:05:60:b8:
         ba:df:7c:ea:68:f5:9f:34:38:9b:b6:a6:bd:cc:c7:04:83:3e:
         21:a4:4a:a5:79:c1:39:98:70:9d:76:48:05:93:2b:70:37:14:
         45:f2:b9:0d:d8:29:6e:5b:b7:97:e8:d8:e5:fb:a4:4b:0b:c9:
         f6:c5:92:37:f3:b7:b3:9a:51:dd:67:af:17:01:00:90:1e:fd:
         43:55:56:fa:de:06:13:ed:87:26:74:ef:ce:52:a3:dc:84:e8:
         79:3f:27:0f:45:b5:61:a4:2a:dd:98:80:2c:71:89:c6:d9:c5:
         54:00:c2:60:80:c6:7e:8a:06:e0:53:98:2b:ac:4e:9d:1e:81:
         e3:43:fb:85:65:f5:7f:d0:ad:e5:ae:9f:e7:fc:35:02:bf:47:
         76:55:1a:a6:40:5c:5d:63:a5:3e:8d:8e:40:5b:f0:b3:ff:44:
         dd:89:d0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:33:42 2025 by rpki-client