Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/48f1ac8d-8045-3e33-88f3-9f090e91cb46.roa
File:                     48f1ac8d-8045-3e33-88f3-9f090e91cb46.roa (raw, json)
Hash identifier:          fAaSCSaxUM9++0hesw3pksyWXF07IFF7gYU5bEymGoY=
Subject key identifier:   04:5A:83:4E:9C:10:A3:85:AA:A8:F9:B5:44:A5:27:76:C0:C3:65:24
Certificate issuer:       /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Certificate serial:       010D0C9F4328584AB4EB7B8AEB3BF4152F498700
Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/48f1ac8d-8045-3e33-88f3-9f090e91cb46.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     7029
IP address blocks:        2607:340::/29 maxlen: 29
                          2607:348::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:7b:8a:eb:3b:f4:15:2f:49:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=7c65d10b-0e2a-4fba-8e9d-8e3a3c33a474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e1:5d:02:ea:c0:25:f7:f3:5e:98:bd:81:ed:
                    dd:6c:55:2d:e0:10:29:3d:96:a6:ce:ce:0c:5e:36:
                    4a:a2:ac:c8:00:ea:b0:30:b7:13:72:b8:11:86:a5:
                    3e:8c:95:32:9c:a9:d5:be:34:7b:08:37:06:b1:fb:
                    01:12:ab:be:34:03:8e:7d:71:9e:bd:0f:68:de:1c:
                    24:1f:27:7d:f9:ce:7e:83:63:ba:e1:21:b0:ac:2a:
                    15:e4:6b:e6:5b:e6:77:6d:ba:ef:cb:b3:c2:83:5b:
                    ae:80:cb:a4:bf:70:9a:f1:fb:c8:bd:52:9c:0e:c7:
                    a7:20:d2:af:29:ab:68:4d:ac:c4:84:ed:6e:14:1e:
                    6e:96:2d:2e:03:aa:a7:18:77:3a:41:f3:14:e8:17:
                    3f:4e:f6:76:53:2b:e5:5f:f3:cf:90:91:3c:76:a9:
                    4a:cd:61:56:4b:89:c6:74:60:ab:c6:1d:01:7c:e1:
                    05:b0:56:0b:e5:d3:83:99:d9:6b:41:e9:c9:eb:bb:
                    b9:ab:e8:1b:10:27:90:68:c8:1a:6b:e0:a1:bf:e5:
                    14:b0:a3:e6:fc:de:b8:07:58:42:da:68:f3:b5:70:
                    c9:3d:14:d2:fe:c0:53:35:d1:f3:c2:29:75:e8:5a:
                    02:30:46:f5:7b:e0:cb:f1:bb:18:23:2b:f2:e1:73:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5A:83:4E:9C:10:A3:85:AA:A8:F9:B5:44:A5:27:76:C0:C3:65:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/48f1ac8d-8045-3e33-88f3-9f090e91cb46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl

            X509v3 Authority Key Identifier:
                keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:340::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:79:4e:e9:64:44:5b:f8:48:33:8c:c8:65:5b:ad:8f:c7:0c:
         1c:83:10:d6:1b:66:06:59:38:08:93:b9:87:5e:79:7b:c6:ef:
         db:a7:88:e9:11:a2:84:45:f6:73:c4:77:db:7d:f2:ee:38:95:
         af:9f:1c:3b:00:4e:f8:11:1e:b8:5e:59:2a:c7:5e:65:10:e2:
         ab:2a:5e:55:c1:3c:a4:d8:cf:37:2c:b3:61:0f:1b:1b:6d:f0:
         1f:ab:c3:83:a5:f1:c0:08:c6:fc:9b:99:3e:cb:72:c0:60:bf:
         79:05:69:63:03:51:d0:6d:15:32:29:5f:66:a1:d5:c7:be:d5:
         43:72:45:5b:fd:7c:0b:c4:cb:06:9b:1c:d3:55:c9:1f:0d:e4:
         cd:be:57:a3:31:44:fe:b9:dd:6c:34:92:ef:27:37:dd:62:00:
         e4:38:d4:35:ff:6f:32:7c:92:df:25:7b:e1:c1:a4:77:e6:90:
         17:79:0c:8e:da:20:20:0f:21:0c:0e:e9:7a:6c:aa:df:b7:6d:
         51:da:57:86:83:b8:44:9f:7e:af:01:07:42:19:7e:eb:f9:7a:
         ab:e5:51:30:b5:0a:37:5f:61:1e:57:06:a0:1f:4c:05:49:14:
         2f:76:80:b5:04:66:d8:c2:69:6d:5b:f3:eb:14:3c:80:6b:3b:
         f1:8f:c3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:22:50 2025 by rpki-client