Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/0eb4c6e9-405b-3975-8455-eee3b037f882.roa
File:                     0eb4c6e9-405b-3975-8455-eee3b037f882.roa (raw, json)
Hash identifier:          AuciYEOU9tPDaTcbKgpjb+L4/LlzfWdOMukEUk5fxEw=
Subject key identifier:   D1:F7:42:39:B7:A3:03:38:53:ED:A7:A0:8B:83:87:47:A1:2E:D1:0F
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584A8410F4D7E16B812C094DD740
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/0eb4c6e9-405b-3975-8455-eee3b037f882.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     2734
IP address blocks:        2605:6c00:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f4:d7:e1:6b:81:2c:09:4d:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=100b573c-93cd-405a-a1bf-2510d06a21af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e1:07:cb:26:f6:83:82:a5:46:3e:08:c1:dc:
                    31:ad:03:49:ad:23:b0:47:bc:98:d2:b5:92:e0:3d:
                    f3:9a:26:e1:4f:7c:95:96:b6:ad:55:83:00:70:3d:
                    1a:cd:09:fd:b7:d0:72:c9:87:66:50:79:d2:12:b5:
                    6b:a7:d7:ed:95:89:2e:48:5b:c2:71:9e:2a:2d:45:
                    0c:25:dc:9c:78:72:30:0f:39:b3:a1:39:67:52:0d:
                    4d:67:82:ba:40:99:bc:02:30:ae:31:c5:de:e1:dc:
                    14:7f:d0:5b:49:3b:e5:90:20:c0:55:9a:4e:91:28:
                    78:e6:f7:d6:50:a8:bc:68:98:13:4f:9a:1a:94:a2:
                    32:4d:03:95:9e:10:4f:ca:96:1c:77:ef:b5:ac:df:
                    66:62:06:58:ce:10:29:db:9d:dd:cb:a6:d2:7b:b4:
                    bc:e6:22:ea:95:98:a1:b3:b6:18:af:40:e3:85:a7:
                    73:9a:dc:35:cc:18:85:a0:dc:f1:23:88:b8:41:9c:
                    3c:f4:3a:57:79:92:6b:da:7a:c8:b4:b4:4c:c5:ef:
                    a2:df:94:46:a2:01:f2:2f:d6:fc:5d:f5:ad:57:98:
                    60:d9:06:5b:26:28:a8:df:f9:bc:a8:17:33:5d:85:
                    02:17:df:ae:83:50:6b:09:dc:37:25:1c:9e:c1:fd:
                    53:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F7:42:39:B7:A3:03:38:53:ED:A7:A0:8B:83:87:47:A1:2E:D1:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/0eb4c6e9-405b-3975-8455-eee3b037f882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8f:36:0d:71:e1:cb:42:ff:ae:71:56:67:f2:6f:12:d3:27:
         82:7e:10:34:f9:d4:d7:b0:35:f0:b2:a7:44:65:1f:56:de:71:
         9c:16:54:b2:2b:61:80:87:de:5e:fd:60:ec:43:cb:d6:10:e7:
         66:63:25:72:a8:20:7d:46:5a:4e:97:21:3a:55:60:20:91:62:
         d0:75:87:fc:d3:ec:e7:fb:92:89:fa:68:59:de:c4:f0:dc:3b:
         85:25:cc:9d:52:6c:07:82:51:9c:62:3d:24:95:a1:80:7a:46:
         96:99:4f:95:f4:13:10:22:14:aa:ca:5a:99:e2:89:74:0c:75:
         70:ea:ca:26:87:e2:a9:2b:ef:2d:95:dd:cd:c0:fb:99:4f:6b:
         35:c7:2b:66:8e:da:27:fb:03:75:e7:59:bc:0e:eb:08:57:04:
         db:de:1e:c2:c8:47:98:22:87:20:f3:c0:58:ee:cc:93:9d:e6:
         c8:b2:cd:35:08:af:39:1d:07:f9:cb:a8:bd:1c:dc:df:b4:2f:
         46:87:1e:94:d5:5f:d3:cb:31:ee:51:26:5d:c6:1c:1d:37:f7:
         dc:ef:a3:8c:50:7e:39:5d:cf:a0:43:a3:93:b6:55:62:fc:e6:
         01:1d:3a:b5:a1:64:c3:6a:7e:57:bb:35:56:0f:8c:a9:c9:8c:
         68:23:28:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:16:12 2025 by rpki-client