Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/9383c5fa-66ba-3e20-8d2f-3409e291cf77.roa
File:                     9383c5fa-66ba-3e20-8d2f-3409e291cf77.roa (raw, json)
Hash identifier:          AWs9hyJcSwR5uiChLIaVE+ApmWrxXVrPuThc1jhz2kU=
Subject key identifier:   60:39:ED:4E:B7:EF:A6:AD:36:5C:39:C0:22:6C:B3:78:61:61:4A:20
Certificate issuer:       /CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
Certificate serial:       010D0C9F4328584A8C70C5100D8B0AD683041BE0
Authority key identifier: AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/9383c5fa-66ba-3e20-8d2f-3409e291cf77.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     36222
IP address blocks:        2604:d9c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:c5:10:0d:8b:0a:d6:83:04:1b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=9e3abe2c-e9ca-433e-837e-bc350b16c97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2d:a5:fc:74:56:a2:d9:44:71:44:75:1c:8b:
                    3e:0c:89:3b:2a:88:9b:12:70:4a:94:32:50:ec:d1:
                    eb:b2:9b:82:a5:ba:a7:f2:1f:32:fd:01:22:fa:69:
                    46:a0:e1:67:61:9b:93:31:2b:94:5b:4e:28:10:08:
                    66:ff:71:8e:61:8d:df:d8:a0:2d:e7:cd:5e:be:57:
                    04:83:e2:35:56:7b:e7:f4:ff:e7:8e:5a:64:89:66:
                    89:df:19:32:4d:8e:4e:f6:9e:f1:10:d7:7a:d0:3a:
                    f7:52:5b:0d:0d:49:f2:99:b5:e5:fa:09:99:b3:31:
                    cf:46:ee:b0:27:fb:e6:60:1b:e4:5f:2b:e8:f2:6f:
                    34:23:d0:9a:a0:41:40:a4:7e:1c:72:c7:92:b5:20:
                    ae:09:7f:48:c0:69:8a:b4:d3:f7:c7:d5:d5:c3:d7:
                    31:b8:9b:46:59:f8:b2:df:3e:22:7c:c0:bb:ca:a8:
                    f5:97:61:08:86:e2:70:1e:78:57:15:0a:7f:94:3e:
                    15:94:25:b6:42:d5:9b:6d:74:d1:c6:d9:04:41:5b:
                    84:77:ef:82:c5:71:63:b5:a8:1b:13:e8:4c:d9:a2:
                    80:82:72:f8:9e:14:3d:f5:7b:f2:b8:50:ae:bc:f3:
                    1b:9a:a8:c3:77:9c:9e:f7:76:c6:34:fd:10:00:37:
                    a0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:39:ED:4E:B7:EF:A6:AD:36:5C:39:C0:22:6C:B3:78:61:61:4A:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/9383c5fa-66ba-3e20-8d2f-3409e291cf77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl

            X509v3 Authority Key Identifier:
                keyid:AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:d9c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:fb:be:9f:22:38:f4:10:ab:b6:42:79:6d:0f:35:87:52:35:
         ea:9c:4d:7a:87:bd:5d:96:6a:f2:57:b4:e0:5f:48:64:d6:cc:
         29:1f:10:f7:f8:5e:f6:60:3b:7b:54:4d:30:61:9d:98:41:e8:
         07:09:02:90:f2:f2:ab:8b:19:e0:82:8f:2b:9e:dd:fe:4c:7c:
         9a:9b:0a:33:44:69:a8:df:16:b9:ae:a9:09:f7:ac:bd:7f:3f:
         55:15:24:76:1a:9c:09:2b:c4:c9:5f:69:00:08:82:1e:87:3f:
         20:be:e4:c6:c9:eb:fa:41:d2:bb:f3:0f:e6:c1:c9:a3:14:a7:
         11:33:8a:18:4d:1b:33:13:cf:4e:0e:b6:ae:b4:f3:ef:c5:61:
         b7:a0:0e:67:b3:41:e7:c9:fb:55:b6:d8:9e:29:b4:71:49:3f:
         72:50:d4:1a:f1:1a:10:c6:31:bd:5c:2e:a1:d0:3a:32:27:b2:
         cd:4a:aa:28:39:53:e3:f0:23:dd:cb:7a:ba:f5:cb:f5:7f:ad:
         c4:64:62:c1:f9:0f:10:25:4c:5d:50:02:a1:5d:e1:5e:cf:08:
         95:c9:c8:40:44:a3:f1:58:af:be:fb:be:6b:9c:3c:40:2d:aa:
         5c:92:95:a1:e7:69:8d:8b:6f:01:3d:66:78:b5:91:4e:89:c8:
         c5:67:09:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:21:55 2025 by rpki-client