Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/35003c30-30bb-36db-9212-03de41a7d417.roa
File:                     35003c30-30bb-36db-9212-03de41a7d417.roa (raw, json)
Hash identifier:          y2ZIbMKWLP2qTh8HRCazhWuI3xtU12k0gG2vlt2y3zg=
Subject key identifier:   47:D3:2F:48:B7:B2:58:DD:F7:8F:27:09:DD:98:BF:3A:92:55:00:25
Certificate issuer:       /CN=2ecd23d0-396c-41fa-8f41-cd10a4083dbe
Certificate serial:       010D0C9F4328584A7D16038BB6366E16D4FA2C00
Authority key identifier: 94:96:70:EC:F0:FA:E8:1A:15:46:3A:23:77:AD:AD:9E:46:AF:E1:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/35003c30-30bb-36db-9212-03de41a7d417.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     394437
IP address blocks:        2606:200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:16:03:8b:b6:36:6e:16:d4:fa:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ecd23d0-396c-41fa-8f41-cd10a4083dbe
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=24c3e1f6-2cb5-4735-8e93-e00385d1c26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:ad:80:de:d5:d1:4d:76:39:6d:03:c7:5a:
                    cb:5d:db:97:cc:43:e1:b8:e7:1b:da:bc:34:4b:87:
                    7b:57:7c:d4:8f:25:2a:23:38:84:a9:8c:6b:7e:21:
                    a6:ca:84:5a:ed:02:55:97:1c:1c:95:d6:33:4b:25:
                    cd:29:ed:f8:11:73:1e:73:77:b2:e8:9b:d0:78:ad:
                    de:41:22:02:fd:0d:db:72:f5:8a:db:7e:84:26:ae:
                    ae:eb:e6:df:86:f8:de:77:61:d4:a5:8c:5c:5b:6d:
                    bf:b5:0c:95:bf:bc:fb:3c:bb:76:f8:d6:14:8c:97:
                    ee:10:e1:ed:b7:e9:95:6a:13:83:6b:dc:06:21:a4:
                    7a:7d:6a:48:7d:c5:ca:f1:b2:8d:2a:c7:ae:26:0f:
                    88:34:ff:ed:d0:52:51:4e:56:16:0b:d8:2e:5b:7a:
                    82:10:ec:4c:f6:f4:4a:e1:53:77:ea:57:40:c1:32:
                    6c:e1:79:6f:25:85:2e:63:05:ab:7c:8a:75:b4:0f:
                    71:f2:64:23:11:e9:ce:5f:3e:76:78:8e:8f:ab:ea:
                    2f:07:d0:ee:17:e8:84:c2:80:84:92:0f:41:4d:f5:
                    87:69:01:1f:9f:c8:e5:8a:86:7b:cd:ec:8d:05:04:
                    64:68:b6:00:0f:cd:22:1f:64:2b:b0:4b:29:10:ef:
                    0d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D3:2F:48:B7:B2:58:DD:F7:8F:27:09:DD:98:BF:3A:92:55:00:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/35003c30-30bb-36db-9212-03de41a7d417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.crl

            X509v3 Authority Key Identifier:
                keyid:94:96:70:EC:F0:FA:E8:1A:15:46:3A:23:77:AD:AD:9E:46:AF:E1:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ecd23d0-396c-41fa-8f41-cd10a4083dbe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:5e:c3:16:cf:32:98:27:37:59:06:e3:21:36:5a:19:9a:70:
         9c:89:98:f7:7c:4c:d0:8d:04:93:2d:45:43:db:ae:27:8d:c4:
         90:19:47:06:2d:e9:d1:20:4a:b9:b9:77:ce:f6:0a:06:bb:fe:
         9a:b7:e3:38:eb:21:e2:0a:5b:41:f0:cd:82:46:3e:ba:c6:a5:
         19:69:27:d5:13:bc:f8:13:7e:30:66:86:41:18:d5:11:4a:b5:
         c0:b4:41:03:c2:86:22:22:de:79:9e:96:93:10:cf:64:c9:2d:
         f9:65:3e:e7:cd:a6:a8:f0:36:69:1b:34:6e:30:fd:5e:a8:50:
         8e:ea:34:18:9f:05:fb:06:cf:0e:a7:07:42:a9:94:7f:77:6e:
         0f:c9:03:58:74:3c:27:ef:2a:07:bd:b0:50:ff:e3:39:8d:69:
         ae:bd:6f:c9:c8:9c:ea:30:52:fd:24:96:71:ef:f4:e3:c5:25:
         41:7d:67:93:09:9e:05:5a:46:f6:68:f5:ec:37:df:45:96:ad:
         38:e6:24:42:a6:32:92:9d:b6:b6:20:17:f3:12:5c:b0:b2:d1:
         d7:8b:63:a2:19:2e:50:69:f9:5a:2f:6d:e0:0b:e7:5e:f5:a4:
         6c:a9:2a:90:10:6d:51:f8:c8:93:75:57:5d:80:72:62:04:af:
         e0:05:7c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:45:09 2025 by rpki-client