Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/52d60cd0-c9a1-3508-949b-51ffcd371d9b.roa
File:                     52d60cd0-c9a1-3508-949b-51ffcd371d9b.roa (raw, json)
Hash identifier:          8NcO187PDlr9RhoddkMFmjNSbK6SdskgcNOaqx/zwxM=
Subject key identifier:   8D:3F:06:9D:3F:3D:F9:28:4E:3F:F6:B2:B5:D4:7C:E8:D2:E6:0E:CA
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584A89A61C9FFDC6D5A46B263B20
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/52d60cd0-c9a1-3508-949b-51ffcd371d9b.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     2734
IP address blocks:        2605:6c00:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:1c:9f:fd:c6:d5:a4:6b:26:3b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=9d8d237f-162e-49e3-b68f-98b2f271f8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:87:f5:20:31:e1:20:77:70:72:d7:67:2e:f5:
                    bf:92:d7:c6:a5:aa:54:b8:93:ac:1f:40:e4:e6:c2:
                    ea:42:1a:c7:89:2b:a7:48:1b:7d:3d:00:65:33:b3:
                    e1:d3:d6:db:4f:e6:23:72:1a:27:f4:f1:f4:a3:0b:
                    08:6f:46:f3:9c:4b:ed:22:10:83:2d:c6:2a:82:ba:
                    81:e0:e0:6c:06:f9:cd:f2:89:4d:40:10:40:69:2a:
                    ce:57:7f:88:2d:a3:7a:28:cb:bb:d9:57:d3:88:c1:
                    0e:0c:94:56:27:ed:7c:03:dd:d4:27:d3:9e:7a:07:
                    45:fd:93:ca:38:7a:01:25:e6:15:64:23:02:a8:f5:
                    94:46:25:f1:91:7c:ef:35:23:4c:bb:f6:a8:5f:30:
                    fe:04:4e:60:30:ee:81:d9:4d:86:48:fe:44:ed:41:
                    09:4a:88:e1:d6:94:3a:6e:09:ce:9e:38:5b:ce:6f:
                    d7:3e:a2:24:ff:87:32:f0:5a:f2:e2:8b:8c:b4:ba:
                    fa:de:54:2d:b4:57:3d:c4:bd:22:02:7b:31:4a:bc:
                    9a:90:6d:ef:c2:46:f1:9e:74:79:6b:63:d4:1b:fb:
                    49:f1:f9:2e:dd:69:39:b1:f6:0c:28:91:f9:86:2a:
                    f6:47:cc:a9:05:53:5f:9a:c2:49:11:f7:9b:93:9d:
                    d6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3F:06:9D:3F:3D:F9:28:4E:3F:F6:B2:B5:D4:7C:E8:D2:E6:0E:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/52d60cd0-c9a1-3508-949b-51ffcd371d9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:6c00:8000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:4d:82:55:95:7a:12:01:f3:b0:83:48:52:fb:53:b6:c0:8d:
         16:a6:76:2c:98:18:15:cb:38:47:62:42:c6:38:9d:b4:d6:90:
         86:d1:cd:25:76:e9:85:99:de:4c:30:46:80:fa:c7:48:d4:36:
         8a:67:2a:02:22:e2:c2:e5:a4:b1:48:35:27:65:2f:9f:67:98:
         3b:28:55:b0:8c:8e:ad:06:a8:86:af:06:3a:09:e4:44:2d:b1:
         9d:49:d5:f7:cd:0b:99:38:66:fa:44:b6:b2:e3:6c:a7:b3:75:
         0d:81:0a:63:f0:74:1a:50:62:99:88:9f:5b:1e:5f:0f:02:3c:
         33:37:84:4d:2e:94:f9:3e:2c:08:56:93:46:81:73:3d:f7:45:
         cf:5f:d6:50:6a:70:b8:09:a3:9c:a8:38:68:22:0c:d7:0f:44:
         a4:63:ec:e1:ae:45:65:b4:57:06:4a:9d:6e:cb:17:f1:b7:59:
         b1:59:ca:e0:13:b6:86:d5:ed:92:b0:9e:6c:53:1c:d0:db:1a:
         bc:24:92:54:1d:00:82:05:df:b7:49:65:fc:6b:10:37:4a:e3:
         a8:45:50:57:e6:b5:3a:09:53:b7:0d:33:c3:e4:8d:9a:1d:ee:
         09:e8:b7:2c:08:07:85:4b:ca:93:4d:cb:c3:18:90:6b:7d:5f:
         17:13:90:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:41:31 2025 by rpki-client