Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/3f7e0d16-021d-374b-b2b4-3923362ea427.roa
File:                     3f7e0d16-021d-374b-b2b4-3923362ea427.roa (raw, json)
Hash identifier:          imflJ09NLOaZT2QPektP2HfGr+0PtEWJwNlq56D0PFg=
Subject key identifier:   A1:CC:B5:38:4B:0F:A0:71:BB:80:E5:71:BF:F9:E9:12:BB:89:B3:10
Certificate issuer:       /CN=48c4aba6-5e67-450a-b4a4-647523380d01
Certificate serial:       010D0C9F4328584AC749E46E0F3AF12E08903BA0
Authority key identifier: E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/3f7e0d16-021d-374b-b2b4-3923362ea427.roa
Signing time:             Thu 07 Aug 2025 14:55:30 +0000
ROA not before:           Thu 07 Aug 2025 14:55:30 +0000
ROA not after:            Wed 05 Nov 2025 15:55:30 +0000
asID:                     15169
IP address blocks:        2602:f5df:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:49:e4:6e:0f:3a:f1:2e:08:90:3b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c4aba6-5e67-450a-b4a4-647523380d01
        Validity
            Not Before: Aug  7 14:55:30 2025 GMT
            Not After : Nov  5 15:55:30 2025 GMT
        Subject: CN=6ec200db-a934-45e8-a1dc-36ce5b2276ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:c7:09:5e:cb:6c:5e:db:44:14:e6:a8:c1:
                    01:aa:d0:7b:13:01:b4:f6:51:f3:be:86:08:70:f5:
                    d4:cf:d6:ce:05:67:c0:d8:0a:ea:ab:32:a4:af:1e:
                    10:34:fb:0a:0f:9b:9f:1e:1a:d5:14:4b:46:e7:85:
                    d4:18:f5:8c:b8:23:ce:dc:9e:3b:2a:f3:e1:1f:63:
                    e8:e2:0f:e9:53:00:85:d9:46:1a:b2:e4:f8:1b:cf:
                    7b:d9:2d:ee:d2:50:0c:88:8d:99:c5:d5:78:71:3b:
                    cc:8a:29:6a:26:38:ca:a1:c9:dd:f9:fc:61:f9:0a:
                    71:df:97:81:d1:0b:9e:56:56:a8:be:69:3e:55:59:
                    1f:8c:6c:73:c5:83:56:d5:c9:f3:df:3f:11:b6:c8:
                    85:9a:41:1f:04:6e:43:d6:8b:c1:87:41:58:07:77:
                    09:0b:71:5c:0d:75:c7:d0:72:23:9f:11:d7:b4:0a:
                    86:3b:03:36:04:7e:a2:34:67:3f:b8:f3:6a:bf:00:
                    e7:f1:f2:2a:21:e1:4d:f7:c2:8c:ae:f1:13:da:50:
                    68:4b:f7:f4:cf:e7:e3:88:ca:72:df:29:62:9b:85:
                    da:1a:39:a8:51:83:0f:04:e9:73:a2:7c:77:11:67:
                    58:80:d6:6e:42:11:9a:52:69:3d:75:73:e4:46:2d:
                    d2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CC:B5:38:4B:0F:A0:71:BB:80:E5:71:BF:F9:E9:12:BB:89:B3:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/3f7e0d16-021d-374b-b2b4-3923362ea427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl

            X509v3 Authority Key Identifier:
                keyid:E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f5df:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e8:7c:f2:ae:36:e6:ce:82:b3:f3:a6:ec:a4:ca:35:c1:3a:
         c8:52:b9:db:3c:a7:84:28:f2:7f:52:e9:93:da:0e:cf:5f:d1:
         0d:57:b9:74:2c:f5:da:a3:a5:20:b2:3f:55:01:36:b7:da:10:
         6e:5d:a8:d2:79:48:7b:41:41:a1:ef:2f:9d:e2:25:06:b9:2d:
         f7:9b:45:d8:b5:54:50:f5:0a:9b:81:1f:a7:ab:25:43:5c:04:
         9a:40:d1:b3:f5:8e:5c:a8:da:7f:45:e8:18:39:4b:05:c3:96:
         87:91:f4:66:97:44:80:61:9a:52:4c:f4:05:f8:4d:c3:a3:7e:
         63:ae:de:49:bd:ea:44:1d:da:14:cb:ca:a5:ad:72:87:ce:ca:
         63:9f:03:b5:26:d4:12:bc:b7:ea:e9:7a:3d:5e:ec:28:18:fa:
         29:c4:d5:a9:c1:2f:83:e4:28:dc:01:fa:02:3c:2d:b6:27:6c:
         30:f2:eb:ca:a9:4d:a9:64:8d:b2:08:86:ef:b3:a0:4f:39:81:
         f3:8d:c1:88:3b:be:7a:27:13:9d:1e:26:17:a6:68:a2:97:06:
         ec:2b:77:a7:95:98:9f:55:8d:3a:79:80:68:49:7b:b1:e3:b9:
         0a:e4:dc:8b:a5:ea:3b:b9:99:68:04:61:af:8a:88:fb:73:c0:
         0b:36:98:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:40:17 2025 by rpki-client