Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/12f12164-adcc-3b9f-a7d8-6da2e86bab76.roa
File:                     12f12164-adcc-3b9f-a7d8-6da2e86bab76.roa (raw, json)
Hash identifier:          TbdJOoHA/QnEhaRTWI2jemWK3fbQUy84OqH1Jtzlx6o=
Subject key identifier:   AC:10:B5:38:6A:80:43:A0:D2:1D:3C:EF:DA:29:54:9F:65:C1:54:07
Certificate issuer:       /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
Certificate serial:       010D0C9F4328584AC2E0DE9B50F9900BA5B53700
Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/12f12164-adcc-3b9f-a7d8-6da2e86bab76.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     30097
IP address blocks:        2604:3c00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:de:9b:50:f9:90:0b:a5:b5:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=da6a1518-47d9-4282-a2ab-73d4c20341e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ec:4b:e8:7f:ee:53:6c:55:ce:74:65:a1:50:
                    68:52:bb:a4:f5:0d:66:26:5c:b1:06:e2:d9:30:c5:
                    bb:fc:5c:66:95:e7:a5:d3:28:3e:3d:86:b0:4c:79:
                    b7:f8:ce:e3:71:65:7d:11:9e:25:91:23:7f:c0:0d:
                    50:f6:0f:4b:46:c7:ed:5c:f3:a3:4c:cb:c4:89:15:
                    0b:ad:e6:6f:5a:a3:05:aa:5b:3e:9d:15:f0:e6:a8:
                    0b:b8:3b:d6:f5:1d:56:ad:bd:b9:8a:63:61:bc:5e:
                    1a:40:0d:4e:1d:c3:72:99:04:e2:f5:ff:9c:da:d7:
                    5f:e4:66:c2:cc:2a:eb:77:f8:c5:95:36:d6:59:59:
                    c9:71:af:f8:31:ac:60:87:d6:5c:74:fa:6b:e5:0d:
                    90:bb:51:fe:3c:ba:10:76:86:0c:21:5f:44:84:44:
                    30:9b:72:52:7e:45:ad:48:ed:f8:58:09:31:0e:9b:
                    8d:d0:0b:d9:55:fb:f1:38:23:61:3a:9a:7d:e8:a8:
                    ec:05:7e:b1:59:5c:6c:db:4a:fb:c2:7f:d2:6a:6a:
                    cf:76:3c:a6:ab:99:e0:26:67:72:a9:09:25:dd:09:
                    f3:dc:f1:67:bd:a7:f4:57:d7:d2:72:be:83:2d:e0:
                    52:de:e3:e2:72:1f:5e:09:26:2c:de:30:1e:bc:af:
                    68:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:10:B5:38:6A:80:43:A0:D2:1D:3C:EF:DA:29:54:9F:65:C1:54:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/12f12164-adcc-3b9f-a7d8-6da2e86bab76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl

            X509v3 Authority Key Identifier:
                keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:3c00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:c4:4b:7c:c8:02:64:df:1b:13:fe:41:85:d8:b6:35:38:b2:
         e1:7f:7b:60:fd:af:a0:55:02:de:75:1d:d2:00:b7:fc:65:85:
         7a:a7:8a:df:72:b5:e1:cf:03:2f:ce:6a:13:b6:c5:4d:5f:54:
         9b:6f:97:3c:45:a0:ff:79:d9:aa:7d:5e:13:4e:20:da:21:32:
         53:54:f7:15:43:c2:a8:53:1d:0d:ad:14:b4:a9:2f:aa:74:7e:
         b0:53:f1:eb:46:f9:25:57:73:5a:4b:5a:78:19:6a:88:fd:83:
         c2:ea:3a:3b:23:80:d5:fd:7f:eb:32:49:a3:36:b7:92:fc:19:
         65:1c:1a:de:81:4f:a0:95:3e:c5:04:1e:a2:c9:13:9f:32:24:
         49:f3:60:d9:eb:97:ea:38:0c:47:1f:29:82:5a:be:de:95:86:
         16:d9:f0:a7:ce:e7:9a:33:1d:46:d1:49:4e:4d:6d:b7:4f:09:
         99:0e:9b:a1:a2:35:b4:c7:b5:94:78:98:4d:30:ff:7e:ab:35:
         b0:57:c4:f6:ef:eb:bc:82:53:de:99:fe:bb:67:e3:47:b6:6c:
         c7:80:66:9a:9c:24:59:12:b6:9b:59:4d:59:e8:ba:db:1d:12:
         d1:de:59:0e:96:cc:85:60:db:40:ba:54:43:4d:72:44:d5:87:
         87:c3:ec:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:32:40 2025 by rpki-client