Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa
File:                     298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa (raw, json)
Hash identifier:          BpsJMasasPmT/+zyd2UwBOhCoq+cDY0XSQa1PtM9pGs=
Subject key identifier:   58:FB:AD:7E:F1:D2:8C:85:C8:F2:EE:4F:F3:65:1B:5F:2B:C8:D3:A3
Certificate issuer:       /CN=29dfb106-65b1-4e83-81d9-8b97730bd706
Certificate serial:       010D0C9F4328584A90A0C62BAFEC5C7527C4F380
Authority key identifier: 34:8B:1E:CC:F6:88:70:10:77:D8:70:1F:E9:00:7A:54:AA:6A:84:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     14333
IP address blocks:        2602:f793:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/29dfb106-65b1-4e83-81d9-8b97730bd706.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/29dfb106-65b1-4e83-81d9-8b97730bd706.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:c6:2b:af:ec:5c:75:27:c4:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29dfb106-65b1-4e83-81d9-8b97730bd706
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=b163d421-c5ac-4ba8-9f91-acb40729ba3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:16:f4:92:f9:c8:88:c0:03:54:33:2e:cd:
                    20:b2:e4:a2:f3:4b:57:32:85:c3:c9:09:52:bd:1c:
                    6d:3a:ce:4c:5d:f4:c3:ec:4c:4f:31:81:26:fd:08:
                    71:02:27:5d:e0:20:fc:dc:76:69:1e:6b:77:8e:4d:
                    f8:9c:16:c1:53:10:69:50:b7:ce:de:a8:2f:8c:6f:
                    4d:7d:a6:96:f7:5a:cf:69:42:8a:37:e4:56:14:8a:
                    89:9f:b5:61:3d:20:cd:00:9b:23:a8:fd:4b:f1:76:
                    aa:6a:53:77:a7:53:ce:8d:7e:d8:be:5b:70:db:00:
                    b9:69:0e:f0:50:f7:95:03:a7:31:a3:d3:c9:23:21:
                    59:37:67:08:5d:b6:93:09:bd:d4:04:b3:26:2f:e8:
                    58:9c:55:56:66:8b:8b:80:79:16:d5:2b:fb:5d:fa:
                    7b:cb:4a:be:9f:06:4f:a1:6f:11:e7:84:4b:d7:29:
                    a2:41:13:71:2e:fa:51:70:b4:a7:db:9b:a0:4a:85:
                    8d:f3:1e:53:aa:38:5a:1a:35:01:52:10:7c:97:f5:
                    6f:70:9c:4c:9e:c5:99:2b:2d:58:68:25:6a:69:9c:
                    bb:5e:12:d9:2c:2a:52:73:52:44:61:c6:98:14:cb:
                    75:f4:e3:ba:b1:f6:45:41:3b:3d:17:0a:00:59:53:
                    57:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FB:AD:7E:F1:D2:8C:85:C8:F2:EE:4F:F3:65:1B:5F:2B:C8:D3:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/298b7f0c-bccd-3b0f-a3fe-e558a68580d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706/29dfb106-65b1-4e83-81d9-8b97730bd706.crl

            X509v3 Authority Key Identifier:
                keyid:34:8B:1E:CC:F6:88:70:10:77:D8:70:1F:E9:00:7A:54:AA:6A:84:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/29dfb106-65b1-4e83-81d9-8b97730bd706.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f793:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:06:c9:32:4f:1d:a7:a6:35:3b:d0:d7:62:5b:a2:5f:e2:95:
         98:47:96:79:a5:b5:c5:f1:ba:80:78:fd:b3:0e:f0:8b:e7:23:
         13:d7:09:42:03:cb:c8:2b:46:64:de:3c:71:63:21:45:ed:03:
         48:fe:20:ce:b5:2f:16:34:ed:92:eb:da:d2:e6:b0:b3:ce:e4:
         c8:d8:53:4e:31:13:d8:63:20:09:6d:59:57:cc:8f:66:80:f8:
         56:cb:1d:6e:4d:df:3b:a3:a1:5f:bb:9f:20:1a:ad:0b:39:59:
         63:a9:b8:39:1f:ff:9e:a8:66:bb:5f:92:26:64:4c:b9:90:e0:
         62:f8:ff:34:c9:eb:37:2e:97:60:7c:92:5f:a8:c6:f4:b4:a8:
         06:82:27:ef:3f:5c:04:9f:e1:96:e5:6b:4e:ef:bf:55:20:54:
         fe:fc:41:a9:5c:63:03:9d:24:f3:f3:4d:dc:02:61:76:9c:33:
         ec:fe:f3:6e:ac:c2:40:4a:56:cb:d6:44:73:9c:cc:85:06:79:
         a4:b7:17:0a:c5:c4:cc:ca:59:ce:85:30:01:03:1b:28:4d:85:
         45:f3:0f:fa:ed:da:79:55:b5:08:ca:a9:6c:5d:26:a7:4a:04:
         fe:46:1d:11:6e:09:1b:a7:e8:0c:b0:4a:a4:f8:79:28:eb:08:
         3c:98:9c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:08 2025 by rpki-client