Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/014e7cbd-d848-3af8-8211-5ac82c77859a.roa
File:                     014e7cbd-d848-3af8-8211-5ac82c77859a.roa (raw, json)
Hash identifier:          4X5SWOXJX8qEqXJAf9u3ebgusXb8eqtZAdVMFSUc7is=
Subject key identifier:   A6:70:9F:62:F6:57:42:56:E4:A7:BF:F9:05:E5:81:9E:44:30:A1:7E
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584AAB2660A9C6B74B398CC92040
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/014e7cbd-d848-3af8-8211-5ac82c77859a.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     62563
IP address blocks:        2607:a140:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:60:a9:c6:b7:4b:39:8c:c9:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=eb74ee18-d074-48ae-bc70-7234f8e92932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:dc:01:1c:7e:53:cf:41:26:f4:42:3f:6a:f6:
                    44:80:da:35:72:13:bb:bc:b8:b3:2f:72:f3:1e:d3:
                    2c:37:93:9b:7c:ad:c1:51:f7:46:11:a1:2a:65:1a:
                    72:f3:96:67:92:d6:95:be:f7:24:53:ea:23:6c:a4:
                    f2:77:29:3d:42:52:6d:7b:4b:77:a8:a9:ba:12:a5:
                    71:07:3b:de:d0:ba:d0:62:41:61:e5:90:5b:09:6b:
                    93:ce:f2:b4:da:5c:9a:5a:01:0a:f6:bf:14:3d:ec:
                    07:c8:fc:94:c9:21:ea:76:ae:6c:c2:3b:e9:1e:68:
                    33:6d:6a:56:16:3d:2d:9a:8c:23:a9:99:dd:52:41:
                    1f:7f:da:a9:31:13:21:83:f1:90:4d:38:e7:48:2a:
                    61:ef:d1:28:45:a7:d5:1b:5d:9b:8d:0c:c2:d6:c6:
                    32:7b:27:aa:01:b2:c0:0e:32:10:2d:94:84:46:b1:
                    a9:98:11:e6:94:67:80:16:3d:79:62:8b:44:88:8e:
                    23:c6:6c:45:19:45:c3:cc:80:d5:91:35:f5:30:13:
                    f9:5a:6c:8f:37:49:e0:af:0a:0e:a7:a6:36:75:06:
                    78:15:66:58:98:2c:22:da:2e:ee:18:ea:33:dc:cb:
                    11:73:9d:a4:5e:95:62:bf:76:66:ae:d6:dc:52:a3:
                    94:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:70:9F:62:F6:57:42:56:E4:A7:BF:F9:05:E5:81:9E:44:30:A1:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/014e7cbd-d848-3af8-8211-5ac82c77859a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ea:b7:a5:d3:21:04:23:83:e8:11:3a:4b:93:1d:14:79:24:ea:
         89:d8:4b:5b:24:a2:b2:07:01:9e:93:5b:ed:95:f2:09:f7:b8:
         61:93:2c:3c:67:97:ea:21:0b:6b:e5:6c:20:94:ab:87:c4:19:
         91:29:d8:c9:4f:47:ad:31:61:8a:53:4d:54:cd:3c:c7:06:35:
         be:d5:37:7f:d5:e7:fd:37:3a:55:ea:b6:72:b8:39:fc:63:36:
         6c:ec:55:24:bd:3c:38:fe:e2:e1:4a:ea:4a:d7:42:4f:71:e7:
         ce:8a:f9:18:bf:95:1f:ad:c3:94:a4:5b:97:43:d2:2e:58:1c:
         c3:89:14:74:1a:e5:2d:4b:16:04:19:21:e1:31:ab:fb:53:c0:
         5b:57:55:cc:d2:c2:35:2f:c6:a3:44:1e:33:3e:06:14:13:b9:
         e8:4a:80:d7:4c:e5:89:2c:69:10:32:c0:75:a2:d3:42:b5:c4:
         7c:cc:68:f3:5a:96:04:ed:23:dc:3e:fd:a1:1a:e7:7b:05:c0:
         cd:17:c9:79:f6:eb:ae:26:3f:40:9d:d9:84:49:54:75:58:a4:
         d3:ee:fe:78:31:1a:59:d9:ff:1d:d7:c0:69:d0:dd:90:e3:d3:
         a3:15:2c:bf:2f:8b:de:e9:b6:f5:86:20:0e:a8:50:2f:22:9d:
         6e:fc:22:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:18:50 2025 by rpki-client