Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/dbc93591-90d7-3efc-a75d-6e0c17ca42ea.roa
File:                     dbc93591-90d7-3efc-a75d-6e0c17ca42ea.roa (raw, json)
Hash identifier:          7Re4OK4DhSrvc7Imb4dRXeMRv2h86RjhFpjQkGpMuhA=
Subject key identifier:   0C:B3:0C:8B:BD:29:48:57:48:A1:AB:D2:C5:D4:DC:10:99:3C:13:54
Certificate issuer:       /CN=4b7340fc-698a-4488-b211-325f4ded4152
Certificate serial:       010D0C9F4328584AB91B8CAA6D621428C8D7A260
Authority key identifier: 23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/dbc93591-90d7-3efc-a75d-6e0c17ca42ea.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     9009
IP address blocks:        2605:3b80:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:8c:aa:6d:62:14:28:c8:d7:a2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7340fc-698a-4488-b211-325f4ded4152
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=4af29437-57bb-4dd8-bcc1-9f6ee8275068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e0:d1:88:82:e7:1f:5e:b0:b2:c5:6f:72:2d:
                    d3:84:4c:41:ee:5b:43:80:7d:ad:ea:98:66:a4:5e:
                    a0:79:0c:48:ba:c3:2d:e2:c1:62:fd:39:fa:54:ad:
                    f0:4f:25:ff:86:e3:6f:b1:68:73:b4:39:32:11:be:
                    c3:18:51:32:bc:7f:f5:3d:23:5c:7c:4a:98:18:5b:
                    bb:bf:1b:4c:c5:fe:c6:ca:90:96:05:e3:43:3f:84:
                    b3:c8:34:82:c1:6f:90:8d:db:30:bd:25:58:52:e4:
                    ec:9a:a5:cc:ac:9d:5c:2a:c7:33:9e:d1:3e:fc:f8:
                    a2:ee:06:18:c9:65:3a:9a:64:fc:3d:2e:9d:13:45:
                    9a:52:ec:b2:b9:50:66:9f:6c:ad:17:41:d9:f1:2c:
                    be:a4:1b:22:3e:17:6b:82:61:99:f7:53:a9:b3:69:
                    a1:0a:72:ab:89:59:04:c6:84:2c:1f:46:3d:7c:aa:
                    1f:23:a0:b9:77:ba:83:e3:0f:15:be:ab:5b:f2:82:
                    30:a0:b1:af:db:85:e1:88:34:9a:0f:68:ae:a2:bd:
                    4b:76:8c:ec:d5:cd:52:ca:5a:b4:14:d7:49:c6:81:
                    fd:fd:e6:8d:f9:14:2f:91:79:a2:74:33:8e:04:b5:
                    61:4d:38:79:55:bf:f4:39:da:33:6e:47:59:3d:9b:
                    8c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B3:0C:8B:BD:29:48:57:48:A1:AB:D2:C5:D4:DC:10:99:3C:13:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/dbc93591-90d7-3efc-a75d-6e0c17ca42ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl

            X509v3 Authority Key Identifier:
                keyid:23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3b80:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:2d:fd:b0:44:b2:75:79:41:07:6f:11:e4:39:44:b5:51:47:
         cc:0c:fd:e1:69:a9:6a:0e:a5:c1:e4:ba:43:de:9f:84:1c:d3:
         c6:47:8d:e3:58:92:16:0c:da:b3:8f:67:88:5c:1d:f2:31:90:
         eb:a5:07:95:2e:2e:fc:65:f5:23:d5:69:b0:16:90:7d:3e:4e:
         d1:e9:46:fd:6a:93:8f:67:93:b3:50:31:b3:d3:9c:e1:91:d3:
         bd:0d:31:d6:4e:63:8c:34:bd:b3:be:b2:69:57:94:8c:c1:e9:
         bd:95:63:7a:31:2a:79:08:b9:4f:a3:5b:27:41:a2:44:f5:7c:
         15:37:5d:0b:f3:4b:cb:ac:d3:09:f1:ea:c0:1c:f2:e6:28:57:
         a4:cb:44:b1:0d:73:ec:5f:69:86:d4:36:f8:5b:0c:2c:f1:44:
         19:2c:99:b8:b1:ea:7d:35:68:8b:2a:72:a9:75:2a:21:c3:e6:
         e0:df:39:39:a9:a2:66:2b:fb:2e:9c:4a:97:94:76:99:f3:d7:
         2e:a5:b2:f2:1b:2e:c4:14:27:5b:a1:d6:4a:84:bc:90:c5:4d:
         cd:6c:f2:7f:30:c0:45:c0:fe:5d:3f:24:a5:c3:05:69:86:de:
         13:83:ef:4e:64:5b:2f:95:63:bd:7b:13:7b:1a:09:d1:0a:ec:
         1c:60:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:15:29 2025 by rpki-client