Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa
File:                     424f26c4-887b-3d46-80f1-25fad32f836b.roa (raw, json)
Hash identifier:          5BzltmAYPnedtalQ9q7U+njEOgeYwJ8/S4qM1/XgA0E=
Subject key identifier:   CD:E7:2E:AD:69:E6:F8:9C:43:16:1F:2D:41:96:80:8C:AC:CC:8E:EF
Certificate issuer:       /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab
Certificate serial:       010D0C9F4328584AB650F293A6D20353FD273B80
Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     397181
IP address blocks:        2604:c840::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:f2:93:a6:d2:03:53:fd:27:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=2dfb7ffc-7b9a-4cfd-8551-af69592b19d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ae:c6:99:c9:12:8d:87:1e:c9:5a:a4:98:93:
                    71:b4:0b:32:62:b3:8b:7b:b7:da:15:a4:b7:71:5a:
                    50:ae:95:f9:ea:96:d5:a3:98:bc:00:d3:cd:97:b8:
                    88:20:19:f9:b8:53:5a:34:5b:67:5e:ff:29:b8:8f:
                    6b:0a:80:48:be:b9:ae:b6:51:fa:9c:f5:24:4c:81:
                    78:4a:37:f6:4b:34:ff:f6:7a:20:92:36:a1:6f:1f:
                    6f:4d:73:6a:43:a7:d0:2d:3f:c3:01:2b:7b:e7:ea:
                    a6:50:6e:76:00:07:46:08:67:40:26:5d:51:0b:e8:
                    f8:78:0b:66:81:91:6c:c7:35:c0:74:c1:db:cf:7a:
                    a4:06:16:ed:9f:71:e4:f3:c4:bf:86:a1:19:52:75:
                    6f:e4:1a:3b:a7:f6:d2:8a:70:9a:f0:a7:88:c4:f3:
                    38:fb:8d:51:50:19:04:e1:05:55:7b:bc:2f:9e:20:
                    e7:32:81:f9:a4:2a:98:63:7e:46:38:05:94:46:8a:
                    3d:88:b9:19:0d:a0:3b:79:27:0c:2d:23:12:a2:5b:
                    f6:d1:50:e9:77:a1:da:f1:d6:c5:26:81:4d:58:b6:
                    8e:47:2a:5a:30:07:7a:8c:0c:af:bb:20:1b:dc:02:
                    dc:91:5c:1d:4d:4b:c5:2f:89:ba:a2:34:51:1d:23:
                    d4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E7:2E:AD:69:E6:F8:9C:43:16:1F:2D:41:96:80:8C:AC:CC:8E:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/424f26c4-887b-3d46-80f1-25fad32f836b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl

            X509v3 Authority Key Identifier:
                keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:cb:55:bd:8e:2d:58:f4:75:28:da:60:2a:fe:7c:13:09:12:
         bc:c5:fd:4b:bf:cc:37:b0:cd:97:e7:7e:dd:84:83:ec:e2:66:
         96:88:59:50:d0:8c:f3:5b:6f:01:e2:f4:65:a6:dc:de:13:fd:
         40:f4:91:ba:d0:65:11:99:2a:ee:af:dc:3e:54:ed:7f:bb:2a:
         a2:56:d7:04:05:74:9d:29:d4:e5:d2:1e:22:d3:78:86:a4:fe:
         f7:90:d1:01:f0:9e:f8:31:01:e0:4e:90:5a:77:23:f2:e1:13:
         f5:30:82:80:46:0e:59:1a:c7:51:94:f7:ed:0e:e9:ae:ef:a1:
         70:41:d8:cf:57:49:16:79:0c:3a:2c:31:d2:20:c3:45:f2:69:
         05:14:62:81:c9:32:e2:3d:fd:0b:e3:e2:18:7d:c5:c6:2e:df:
         d2:9e:c1:ff:57:62:df:d7:82:16:92:9b:39:ba:86:e0:53:14:
         dd:0c:56:c4:b2:95:2d:1b:27:04:34:51:93:fa:6f:6c:a4:57:
         2a:ce:30:21:6a:63:df:a1:db:aa:87:36:ac:dd:14:2c:12:c2:
         86:53:71:a9:51:36:76:af:36:10:a0:da:cc:94:af:6c:27:06:
         af:4f:c4:7a:8a:d7:d0:19:fb:e5:3e:c6:70:04:f8:3f:24:6c:
         aa:61:e6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:18:58 2025 by rpki-client