Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/dd4384b9-7004-3141-991f-5c544be37016.roa
File:                     dd4384b9-7004-3141-991f-5c544be37016.roa (raw, json)
Hash identifier:          b7cPNK17J+A6i+DbrIjWBJB+tMQC7BrDMDmUlcsSyKc=
Subject key identifier:   A1:CE:B3:17:98:B0:F1:43:EF:57:5E:FA:E1:22:BE:88:5F:90:DA:9C
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F4328584AAB266099884B3F6102BEC500
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/dd4384b9-7004-3141-991f-5c544be37016.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     62563
IP address blocks:        2607:a140:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:60:99:88:4b:3f:61:02:be:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=3c5bbd0b-b3dc-412f-bafb-da6e12fa7548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:a3:1b:57:19:90:ab:97:2d:b6:02:91:d1:
                    ef:4f:e2:05:81:8a:a1:29:93:e5:65:3f:df:c4:cd:
                    e8:c8:43:98:6b:9e:81:0e:3a:a9:ae:c1:46:16:66:
                    b1:40:0b:49:24:97:97:ee:ac:d9:65:bc:f7:70:ed:
                    90:9b:e2:6c:7c:9d:c4:c0:26:1c:74:1a:6b:b9:e5:
                    4b:24:9a:58:6d:e0:32:a5:40:e8:4f:2d:3e:76:d5:
                    30:95:78:b6:32:7d:fe:68:42:73:da:29:f8:16:1d:
                    a4:0a:ae:37:19:a9:4a:52:69:58:06:24:86:6e:b4:
                    c8:c8:c3:7e:90:31:f7:95:ef:30:7f:7f:fc:03:1c:
                    65:fa:4e:33:e8:1b:cc:7e:14:ee:e2:95:b5:3c:a3:
                    c7:cb:00:4a:a3:95:01:ab:11:64:18:15:22:48:01:
                    4a:80:0d:cc:bf:44:ae:af:74:2f:bf:76:3a:50:69:
                    7c:bf:6f:02:22:5c:60:1d:e7:f9:ed:f9:d0:a1:7d:
                    73:a8:23:df:c6:72:c1:2a:3e:c5:f9:c0:fb:f7:f1:
                    09:3b:c0:ae:08:1f:d0:37:d5:ab:84:b5:4f:2f:39:
                    88:42:f5:e3:02:cd:cf:a7:24:26:8e:d6:2c:44:0f:
                    47:cd:07:49:6d:fa:da:8c:51:00:d5:46:38:df:99:
                    a9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CE:B3:17:98:B0:F1:43:EF:57:5E:FA:E1:22:BE:88:5F:90:DA:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/dd4384b9-7004-3141-991f-5c544be37016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d8:0a:03:ed:bf:b1:d3:4f:88:e4:1b:70:79:29:12:4e:54:
         64:0f:39:dd:a6:a4:c2:05:48:7b:49:9d:32:51:5d:71:1e:ce:
         9e:21:7f:4e:56:5b:f8:32:11:ad:48:5e:64:e3:74:9d:b4:45:
         85:f1:41:63:46:69:45:51:15:88:a2:0d:88:bf:dd:8a:a5:e1:
         a6:e6:65:08:c0:22:3d:04:ac:00:80:91:2b:92:b3:eb:9e:74:
         7e:15:02:73:bd:d2:4f:db:8b:a5:a1:ae:58:5b:4f:d3:8b:38:
         2c:1c:fe:7a:a5:00:65:bc:04:39:86:fd:7d:14:07:fc:9f:3a:
         04:ab:b9:a1:b4:8d:05:29:80:9a:8c:19:ef:63:c6:79:c9:64:
         78:7a:29:6c:75:c7:f8:34:6d:8f:76:42:68:c8:7a:da:00:d8:
         95:e4:2e:0d:d6:33:6e:71:a3:0f:e8:f7:e9:90:34:72:9d:8b:
         03:75:43:04:1f:51:f7:7f:df:89:fd:69:f3:16:42:b7:46:5b:
         60:a2:bd:90:0a:37:d3:3e:db:98:30:11:30:39:e8:e3:f1:d0:
         6e:18:15:4b:9f:a9:ae:84:cd:4c:65:90:6e:fe:09:b7:bc:e6:
         73:cc:24:37:38:9d:66:2c:66:82:b2:1a:64:c8:db:25:65:df:
         13:01:fa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:07:35 2025 by rpki-client