Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/4c759263-7a84-306d-8d16-adacb407a81b.roa
File:                     4c759263-7a84-306d-8d16-adacb407a81b.roa (raw, json)
Hash identifier:          Dy7TQyqgOFvPeUL42Nz8uj4OPm+7rxhXzJOuAyFauHg=
Subject key identifier:   9B:8D:9B:6B:21:3B:A8:84:32:44:70:70:00:43:CB:73:E5:FB:08:65
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584AAB26612E9668B95B8E67F580
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/4c759263-7a84-306d-8d16-adacb407a81b.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     63023
IP address blocks:        2607:a140:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:61:2e:96:68:b9:5b:8e:67:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=6f1e4670-5ae9-40bb-b8aa-73fe0ba5508d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bd:fe:f8:4b:8d:6a:95:14:73:53:02:d3:31:
                    6a:2f:fb:b9:04:23:42:9d:79:46:ed:14:23:07:45:
                    57:d9:b7:48:40:47:61:05:73:5f:32:d5:7e:35:7e:
                    59:8b:bd:02:45:64:f6:27:f8:d1:70:a4:a3:0e:02:
                    53:85:5b:27:81:05:d1:ad:8c:fb:23:c0:08:3e:bb:
                    ad:5a:a3:0c:a3:61:62:91:fc:be:4e:6e:fe:41:e6:
                    34:8b:f7:6f:f1:df:9b:c0:8e:d7:bd:12:73:dd:48:
                    c4:8c:c3:7b:d5:30:12:0f:71:6b:ea:c5:8a:9a:52:
                    15:d1:46:4e:f4:b8:a9:34:15:3f:a2:ca:df:8d:71:
                    58:08:77:09:a4:21:b1:5f:e3:c9:90:1f:38:f2:60:
                    60:b6:ad:20:0e:4e:d7:ed:eb:a6:2f:7c:82:b7:7b:
                    d4:4e:57:98:21:81:e0:57:53:bd:11:84:d6:d0:e6:
                    ba:8c:88:e9:50:9b:1b:70:bf:a4:0e:de:e3:98:bb:
                    46:80:19:a6:d0:b8:95:f3:cf:49:d0:34:59:a7:55:
                    2c:71:40:1a:3a:30:f3:9f:1d:fd:40:9e:1d:b4:b0:
                    bc:aa:e9:2d:b5:3e:3b:03:38:04:d7:64:5b:75:45:
                    e7:aa:47:a1:06:1e:66:21:a9:cb:32:80:06:81:53:
                    f4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8D:9B:6B:21:3B:A8:84:32:44:70:70:00:43:CB:73:E5:FB:08:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/4c759263-7a84-306d-8d16-adacb407a81b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:8b:00:21:c2:dd:0e:91:04:f1:42:eb:60:de:af:cb:fb:74:
         8f:28:0a:5a:ad:1b:1c:d4:f1:98:70:7e:b3:f1:c7:66:c0:41:
         97:b4:81:c6:09:0d:6f:51:43:5b:f9:02:bc:64:f6:39:b0:6f:
         7f:a1:9d:46:db:00:d2:de:2f:82:3f:cf:3d:7b:7b:b8:55:7e:
         6e:2f:9e:7a:1c:6f:ed:cc:a4:4b:c1:c0:b9:0d:5d:e5:50:cf:
         98:f1:f9:aa:00:92:57:19:d1:cb:af:6d:08:17:87:45:f7:69:
         c1:07:5b:6a:8a:42:43:0b:13:21:b5:ac:f5:c6:2f:ae:6e:0c:
         a0:0a:33:eb:fb:73:2c:5f:d1:21:81:fa:85:fe:5c:5e:9e:42:
         d4:f4:4d:d1:f1:11:9a:12:b3:56:33:f2:fc:c0:68:62:f7:dd:
         4f:b2:7e:71:69:f7:e6:07:a3:e6:88:9d:b8:fa:c8:c8:1f:af:
         f8:24:d6:7c:d4:05:2b:24:9e:f1:65:28:82:a4:f9:cb:02:dc:
         6a:81:d4:e2:41:de:f5:3d:34:66:46:9c:78:15:12:51:87:97:
         19:a0:d2:bf:9c:a5:34:03:49:aa:4a:62:de:ef:12:36:23:f7:
         c5:2d:8d:8c:8d:9d:e0:04:1e:0c:67:6d:c5:36:97:6a:78:a0:
         0a:74:b6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:09:39 2025 by rpki-client