Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/c8cfce96-e8ff-309d-85e4-2921d84133eb.roa
File:                     c8cfce96-e8ff-309d-85e4-2921d84133eb.roa (raw, json)
Hash identifier:          Jl3a/kCZ4T++5ubp1t7ttbN1vLAfTtmCdHGoE4WwhJA=
Subject key identifier:   12:B7:BC:7C:19:68:9F:6E:95:A8:C0:91:3F:A0:89:2F:6C:0E:62:DC
Certificate issuer:       /CN=a92c0e3e-e786-40f1-a211-bf8a9b31315b
Certificate serial:       010D0C9F4328584AB91B862BD4322E9022822F00
Authority key identifier: 2C:1F:35:C9:C3:29:F1:59:1E:9C:2E:E5:82:25:B0:79:F5:67:BA:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/c8cfce96-e8ff-309d-85e4-2921d84133eb.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     29848
IP address blocks:        2605::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:86:2b:d4:32:2e:90:22:82:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92c0e3e-e786-40f1-a211-bf8a9b31315b
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=c6372ad5-2c3d-4385-a4b0-6332ae84d728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:21:c7:40:ca:a6:b9:01:b8:e2:b6:ce:07:8d:
                    c3:6a:5f:c3:f9:64:d3:c0:72:c8:4b:87:3f:b5:3f:
                    15:44:d2:c6:e6:46:7b:04:2f:c7:ab:4f:dd:f3:95:
                    58:cc:f6:6f:d5:90:c9:5b:80:4d:fc:53:f8:f3:60:
                    27:7e:ad:03:97:64:16:b4:2b:fc:90:4f:f7:6c:10:
                    7b:d3:c4:2e:52:25:65:c7:bc:56:3d:db:70:98:fb:
                    75:6d:61:eb:07:22:34:17:22:e8:0b:75:99:55:bf:
                    71:45:28:5f:19:07:1b:17:16:cd:93:0f:38:64:be:
                    a6:00:e5:6f:47:fb:8c:19:7c:89:d0:cd:ef:6d:78:
                    b1:cc:4a:a4:f6:2e:f3:e8:e0:9d:10:56:f1:85:7d:
                    72:b4:d6:80:a6:00:f6:be:57:27:78:5a:a7:bc:b6:
                    d5:43:d9:cc:bf:f9:ab:9d:aa:3a:41:96:1b:7f:0b:
                    ce:79:81:5a:17:4a:7c:27:36:2c:36:cb:5d:5f:d0:
                    f1:6b:ca:98:e1:df:10:a2:78:77:2e:f5:9f:1c:ed:
                    19:1b:81:c3:64:a4:df:ad:f6:59:45:1f:80:78:7b:
                    29:51:f6:ad:9b:b5:b0:dd:3e:ec:71:4d:0e:df:3e:
                    ac:c6:1c:71:19:c4:80:0b:34:17:2a:56:83:fd:f2:
                    03:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B7:BC:7C:19:68:9F:6E:95:A8:C0:91:3F:A0:89:2F:6C:0E:62:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/c8cfce96-e8ff-309d-85e4-2921d84133eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b/a92c0e3e-e786-40f1-a211-bf8a9b31315b.crl

            X509v3 Authority Key Identifier:
                keyid:2C:1F:35:C9:C3:29:F1:59:1E:9C:2E:E5:82:25:B0:79:F5:67:BA:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a92c0e3e-e786-40f1-a211-bf8a9b31315b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:65:c0:5e:4f:b1:97:a7:dd:27:de:19:1f:ed:b2:06:07:78:
         21:62:b3:73:37:f1:4f:32:d4:31:73:d3:42:23:76:70:2f:c5:
         7a:d2:9e:9d:1c:eb:55:54:04:f8:76:85:58:c4:9e:da:3a:5a:
         f9:b6:f2:f5:52:0a:ed:ec:4b:b1:95:f3:9d:a3:ea:65:8a:f9:
         e6:11:3c:c6:89:3f:c5:2f:7f:b0:97:4d:54:dd:35:ca:4c:b1:
         b8:4a:af:e1:e1:d9:2e:a1:10:1a:8c:32:cc:c8:61:e0:99:94:
         87:d4:e2:8f:a4:f6:72:b8:3a:26:ff:3e:f8:53:d8:e9:0b:78:
         eb:6e:0b:77:5c:cb:8b:3a:3e:78:21:70:e8:e4:8d:b3:1f:94:
         49:78:e4:6f:9a:bb:e2:c8:5e:b1:e0:02:dd:16:71:ee:5b:62:
         37:56:b5:ab:b2:dc:33:d0:f4:18:e2:ec:53:24:64:da:85:8c:
         1e:13:c4:b8:5e:2b:04:87:e7:d3:12:53:6e:e9:4a:5c:07:ff:
         ed:e2:d3:36:cc:fa:6d:8b:c2:64:34:6f:23:eb:d2:fd:85:4f:
         78:c8:26:8e:54:51:70:3e:50:de:ae:15:f5:4b:e4:a1:9f:b2:
         a7:b7:65:4b:06:be:41:48:61:62:35:3b:9f:20:05:b7:fb:5f:
         8f:b8:a0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:21 2025 by rpki-client