Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4/2eb9e830-c0c5-3628-841f-641872da277d.roa
File:                     2eb9e830-c0c5-3628-841f-641872da277d.roa (raw, json)
Hash identifier:          xJ9jFSTHGWP3WD7vzulw6oOosMvEB+ypx/Vu2NePLpw=
Subject key identifier:   06:16:CF:3A:2D:4F:3E:3A:BD:F2:9A:1D:CE:8B:78:64:F0:28:AE:DC
Certificate issuer:       /CN=a13e27aa-7ea5-4d1a-989e-af8db15b38f4
Certificate serial:       010D0C9F4328584AD597ED639F3469B5CCEE98C0
Authority key identifier: 29:05:3A:20:D6:83:D8:80:13:3F:62:7E:86:20:7B:6C:FB:D9:22:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4/2eb9e830-c0c5-3628-841f-641872da277d.roa
Signing time:             Tue 12 Aug 2025 17:54:03 +0000
ROA not before:           Tue 12 Aug 2025 17:54:03 +0000
ROA not after:            Mon 10 Nov 2025 18:54:03 +0000
asID:                     398898
IP address blocks:        2602:fbe7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4/a13e27aa-7ea5-4d1a-989e-af8db15b38f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4/a13e27aa-7ea5-4d1a-989e-af8db15b38f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d5:97:ed:63:9f:34:69:b5:cc:ee:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a13e27aa-7ea5-4d1a-989e-af8db15b38f4
        Validity
            Not Before: Aug 12 17:54:03 2025 GMT
            Not After : Nov 10 18:54:03 2025 GMT
        Subject: CN=d0bdf9a4-fe0c-4bd7-9fca-f68a839ec792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d1:87:47:bd:31:a9:03:b7:d9:2a:b5:de:eb:
                    aa:c8:f7:bb:18:7e:8a:55:4b:0d:95:66:67:8d:b9:
                    87:2d:53:7b:5f:29:db:d4:cb:cb:a3:94:99:4e:0e:
                    32:8f:68:e1:89:d5:5b:90:5b:39:af:df:3f:ff:23:
                    22:31:cd:25:40:7e:01:b7:22:c3:da:af:a2:15:d0:
                    de:f1:c8:0b:28:58:3a:86:cd:37:02:bc:0d:4a:df:
                    ff:a8:fe:ae:a6:0b:a4:1c:f3:f7:4a:03:29:1d:d8:
                    2b:da:80:37:3d:b2:9e:ac:b5:85:1f:62:24:7f:44:
                    27:8d:b1:1d:3c:83:8a:64:ad:b2:e2:80:c1:05:32:
                    40:d7:8b:1d:34:f9:20:fb:6a:e3:66:c3:ea:a4:b5:
                    83:bf:f2:b5:a0:1c:6f:e1:b2:1a:a0:1f:e1:8e:43:
                    c5:f9:aa:7d:d3:56:3c:f8:cc:ac:7d:7d:a1:c6:7a:
                    8a:bb:b5:bc:76:aa:36:5c:e7:4d:d6:2b:52:82:d2:
                    a9:22:99:5e:59:4c:55:c8:b3:d3:0d:38:98:78:81:
                    9d:fb:ea:a8:af:d1:8f:df:68:dd:d1:46:72:89:4e:
                    3b:0a:da:c1:af:e1:1e:48:59:a7:4d:01:80:53:51:
                    be:94:a6:a3:e2:3e:fc:30:a2:f0:a4:0b:30:57:f7:
                    f5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:16:CF:3A:2D:4F:3E:3A:BD:F2:9A:1D:CE:8B:78:64:F0:28:AE:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4/2eb9e830-c0c5-3628-841f-641872da277d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4/a13e27aa-7ea5-4d1a-989e-af8db15b38f4.crl

            X509v3 Authority Key Identifier:
                keyid:29:05:3A:20:D6:83:D8:80:13:3F:62:7E:86:20:7B:6C:FB:D9:22:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a13e27aa-7ea5-4d1a-989e-af8db15b38f4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbe7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:8a:90:4d:eb:30:8e:fb:dc:94:af:b7:4e:c7:12:1d:03:96:
         8e:34:f1:67:76:dc:f3:17:a2:9f:54:65:72:c4:f6:c2:4e:f4:
         3e:c1:3f:c2:81:b6:4b:21:48:55:04:84:83:c7:6c:54:b4:fc:
         7e:e0:45:96:b6:d8:52:d3:ec:65:c2:99:d1:4d:71:7a:f1:3f:
         86:54:02:25:78:eb:d3:6d:36:61:1f:44:31:6e:40:3c:21:78:
         ce:67:b1:46:4d:94:9d:4c:92:0c:45:95:55:48:58:b7:01:2c:
         54:54:54:6e:94:1b:22:ea:ed:08:8f:2b:d5:ed:0d:9d:a8:26:
         ed:8d:07:83:95:f9:4d:eb:33:0c:f6:04:73:ec:a3:40:fd:73:
         89:2c:3e:93:fc:e9:c7:21:9d:ab:09:3e:c0:97:f0:95:e3:05:
         b2:53:31:98:8d:27:a6:bb:02:cb:01:a2:75:a7:61:d9:b5:7c:
         af:96:e9:16:c9:8f:26:bd:b3:a8:cd:12:7f:97:37:77:d2:54:
         88:e0:87:13:38:c6:be:4b:4f:47:c2:0b:90:8b:29:5e:8d:d4:
         40:71:68:f9:75:96:47:45:ea:9c:bb:c1:0a:15:f5:8c:f3:51:
         5b:74:30:72:42:0e:b5:ed:64:df:02:95:99:d5:e7:21:d8:30:
         f0:87:15:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:45:09 2025 by rpki-client